--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"info","ts":"2026-07-07T00:31:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5ecba7d3-514f-4d51-9638-702430bd3983","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:37868","PortSpecifier":{"PortValue":37868}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5ecba7d3-514f-4d51-9638-702430bd3983","method":"POST","path":"/ai-tenant-e2e-inf-b-dd30cd/test-model-dd30cd/v1/chat/completions","host":"e2e-inf-b-dd30cd.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:31:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5ecba7d3-514f-4d51-9638-702430bd3983","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:37868","PortSpecifier":{"PortValue":37868}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384268,"nanos":478758704},"http":{"id":"5ecba7d3-514f-4d51-9638-702430bd3983","method":"POST","headers":{":authority":"e2e-inf-b-dd30cd.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-inf-b-dd30cd/test-model-dd30cd/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:31:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5ecba7d3-514f-4d51-9638-702430bd3983","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-pOavW8XsGflVt4oG_DD0dlr6pRcUy2p2NrlWaQkRHA0uvFG0fSB7GIB0HD42"}
{"level":"debug","ts":"2026-07-07T00:31:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5ecba7d3-514f-4d51-9638-702430bd3983","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-inf-b-dd30cd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-pOavW8XsGflVt4oG_DD0dlr6pRcUy2p2NrlWaQkRHA0uvFG0fSB7GIB0HD42\"}"}
{"level":"debug","ts":"2026-07-07T00:31:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5ecba7d3-514f-4d51-9638-702430bd3983","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-b-dd30cd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-07T00:31:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"cannot fetch metadata","request id":"5ecba7d3-514f-4d51-9638-702430bd3983","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-b-dd30cd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"reason":"no such key: groups"}
{"level":"debug","ts":"2026-07-07T00:31:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5ecba7d3-514f-4d51-9638-702430bd3983","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"15659cef9f21db726cbbe7757d23f9008af6c76c59c4380d9255f70aaf441f21"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-inf-b-dd30cd.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-inf-b-dd30cd/test-model-dd30cd/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:31:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ecba7d3-514f-4d51-9638-702430bd3983","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:31:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"5ecba7d3-514f-4d51-9638-702430bd3983","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-07T00:31:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5ecba7d3-514f-4d51-9638-702430bd3983","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-07T00:31:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5ecba7d3-514f-4d51-9638-702430bd3983","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-07T00:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eee32d465204284144ec30dce294150a3c1765cafef5a75b6e027b6d59cc1ae1"}
{"level":"info","ts":"2026-07-07T00:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/50481774831b2421d3773131299d5255c342cd3daa0c1dc1c477b18785d835e0"}
{"level":"info","ts":"2026-07-07T00:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cafb2a4bf5fa4a3bcc42b58474c4ccb21657d3041989db0cfd75060d1bd8e196"}
{"level":"info","ts":"2026-07-07T00:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/92bbeb2f91202e71cb90ace514716d14cc662664192aebeedece98507f822f77"}
{"level":"info","ts":"2026-07-07T00:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/84e7d27ab8de9ffd173db733eb655c66926649aacf998a14c0583a4343d1461b"}
{"level":"info","ts":"2026-07-07T00:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/15659cef9f21db726cbbe7757d23f9008af6c76c59c4380d9255f70aaf441f21"}
{"level":"info","ts":"2026-07-07T00:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e94a6a327ba0030e5b20459c226611344415845d5b044269db71a3cef809b755"}
{"level":"info","ts":"2026-07-07T00:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/582a9d548736407a0a108cd7a5cbf9bb2f18e3a89185f9da6c2bec4865af6acc"}
{"level":"info","ts":"2026-07-07T00:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/abd2571ddb1d96943681210d6349685f4c8717e2f70844a50fbda9804c238938"}
{"level":"info","ts":"2026-07-07T00:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8c4ec32651d7eb09092a9248213577fcf0478465d91cffe94f6db5055c3606e0"}
{"level":"info","ts":"2026-07-07T00:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0acdb4c5f3581bf7190dfb41b72ececf725254654455c2a7584fd0f36e9e8a78"}
{"level":"info","ts":"2026-07-07T00:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7e3f7402a2266dab23ed37430697cb292dc06cb143222711c3b19e5fa8f252ea"}
{"level":"info","ts":"2026-07-07T00:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/97b6464fad27f549d2f6fd46bfcc98f8d4332cffee7a0940bcbbc3d70c41bb48"}
{"level":"info","ts":"2026-07-07T00:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4708a383d3b8c26676980de09541302b472d0ec705785f8a796ac325cca22f52"}
{"level":"info","ts":"2026-07-07T00:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c55f8bb2137b4e4bed8165f789465dab17fa3d2b43da9478e89922d6b72a0d9f"}
{"level":"info","ts":"2026-07-07T00:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e6d404b1f7f7172f217fba54b53559faed12d8d54b7f8f6c08d983f8af608be2"}
{"level":"info","ts":"2026-07-07T00:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9fd0aefa72105a9a275eb81226d2cf4e17c456bfdc20966815515ee59df13bf8"}
{"level":"info","ts":"2026-07-07T00:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e52c9067cd63349f0aab8abadd2f095e7b35fed677723d013b544a13e02067dd"}
{"level":"info","ts":"2026-07-07T00:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7d991b5ea427f109d284e9c3e7d0dea434cbff8cf6ed71b79c13c80d127f4295"}
{"level":"info","ts":"2026-07-07T00:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/94755714f8af6f3cd5aef08dc39b227293b06f5f3469869ab95033fe9de0c70f"}
{"level":"debug","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97413c333edd04c7b3ae65cc78251230cbc1355e87b08a25623367951b8e3d9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97413c333edd04c7b3ae65cc78251230cbc1355e87b08a25623367951b8e3d9a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97413c333edd04c7b3ae65cc78251230cbc1355e87b08a25623367951b8e3d9a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97413c333edd04c7b3ae65cc78251230cbc1355e87b08a25623367951b8e3d9a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97413c333edd04c7b3ae65cc78251230cbc1355e87b08a25623367951b8e3d9a"}
{"level":"debug","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97413c333edd04c7b3ae65cc78251230cbc1355e87b08a25623367951b8e3d9a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97413c333edd04c7b3ae65cc78251230cbc1355e87b08a25623367951b8e3d9a"}
{"level":"debug","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97413c333edd04c7b3ae65cc78251230cbc1355e87b08a25623367951b8e3d9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97413c333edd04c7b3ae65cc78251230cbc1355e87b08a25623367951b8e3d9a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97413c333edd04c7b3ae65cc78251230cbc1355e87b08a25623367951b8e3d9a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97413c333edd04c7b3ae65cc78251230cbc1355e87b08a25623367951b8e3d9a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97413c333edd04c7b3ae65cc78251230cbc1355e87b08a25623367951b8e3d9a"}
{"level":"debug","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1a082d57a4351e8c903589d1cf7409435fb63b98f0c6dafed2090ec5073c4d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1a082d57a4351e8c903589d1cf7409435fb63b98f0c6dafed2090ec5073c4d8"}
{"level":"info","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1a082d57a4351e8c903589d1cf7409435fb63b98f0c6dafed2090ec5073c4d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1a082d57a4351e8c903589d1cf7409435fb63b98f0c6dafed2090ec5073c4d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1a082d57a4351e8c903589d1cf7409435fb63b98f0c6dafed2090ec5073c4d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1a082d57a4351e8c903589d1cf7409435fb63b98f0c6dafed2090ec5073c4d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1a082d57a4351e8c903589d1cf7409435fb63b98f0c6dafed2090ec5073c4d8"}
{"level":"debug","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1a082d57a4351e8c903589d1cf7409435fb63b98f0c6dafed2090ec5073c4d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1a082d57a4351e8c903589d1cf7409435fb63b98f0c6dafed2090ec5073c4d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1a082d57a4351e8c903589d1cf7409435fb63b98f0c6dafed2090ec5073c4d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1a082d57a4351e8c903589d1cf7409435fb63b98f0c6dafed2090ec5073c4d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1a082d57a4351e8c903589d1cf7409435fb63b98f0c6dafed2090ec5073c4d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1a082d57a4351e8c903589d1cf7409435fb63b98f0c6dafed2090ec5073c4d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1a082d57a4351e8c903589d1cf7409435fb63b98f0c6dafed2090ec5073c4d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1a082d57a4351e8c903589d1cf7409435fb63b98f0c6dafed2090ec5073c4d8"}
{"level":"debug","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1a082d57a4351e8c903589d1cf7409435fb63b98f0c6dafed2090ec5073c4d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1a082d57a4351e8c903589d1cf7409435fb63b98f0c6dafed2090ec5073c4d8"}
{"level":"debug","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1a082d57a4351e8c903589d1cf7409435fb63b98f0c6dafed2090ec5073c4d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1a082d57a4351e8c903589d1cf7409435fb63b98f0c6dafed2090ec5073c4d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1a082d57a4351e8c903589d1cf7409435fb63b98f0c6dafed2090ec5073c4d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1a082d57a4351e8c903589d1cf7409435fb63b98f0c6dafed2090ec5073c4d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1a082d57a4351e8c903589d1cf7409435fb63b98f0c6dafed2090ec5073c4d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1a082d57a4351e8c903589d1cf7409435fb63b98f0c6dafed2090ec5073c4d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1a082d57a4351e8c903589d1cf7409435fb63b98f0c6dafed2090ec5073c4d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1a082d57a4351e8c903589d1cf7409435fb63b98f0c6dafed2090ec5073c4d8"}
{"level":"debug","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1a082d57a4351e8c903589d1cf7409435fb63b98f0c6dafed2090ec5073c4d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1a082d57a4351e8c903589d1cf7409435fb63b98f0c6dafed2090ec5073c4d8"}
{"level":"debug","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1a082d57a4351e8c903589d1cf7409435fb63b98f0c6dafed2090ec5073c4d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1a082d57a4351e8c903589d1cf7409435fb63b98f0c6dafed2090ec5073c4d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1a082d57a4351e8c903589d1cf7409435fb63b98f0c6dafed2090ec5073c4d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1a082d57a4351e8c903589d1cf7409435fb63b98f0c6dafed2090ec5073c4d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1a082d57a4351e8c903589d1cf7409435fb63b98f0c6dafed2090ec5073c4d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1a082d57a4351e8c903589d1cf7409435fb63b98f0c6dafed2090ec5073c4d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1a082d57a4351e8c903589d1cf7409435fb63b98f0c6dafed2090ec5073c4d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1a082d57a4351e8c903589d1cf7409435fb63b98f0c6dafed2090ec5073c4d8"}
{"level":"debug","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1a082d57a4351e8c903589d1cf7409435fb63b98f0c6dafed2090ec5073c4d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1a082d57a4351e8c903589d1cf7409435fb63b98f0c6dafed2090ec5073c4d8"}
{"level":"debug","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1a082d57a4351e8c903589d1cf7409435fb63b98f0c6dafed2090ec5073c4d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1a082d57a4351e8c903589d1cf7409435fb63b98f0c6dafed2090ec5073c4d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1a082d57a4351e8c903589d1cf7409435fb63b98f0c6dafed2090ec5073c4d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1a082d57a4351e8c903589d1cf7409435fb63b98f0c6dafed2090ec5073c4d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1a082d57a4351e8c903589d1cf7409435fb63b98f0c6dafed2090ec5073c4d8"}
{"level":"debug","ts":"2026-07-07T00:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"516aa57f9423591db2653a42cd8bfafde8e91748d28c3914f26c2e11d5b3153d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"516aa57f9423591db2653a42cd8bfafde8e91748d28c3914f26c2e11d5b3153d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"516aa57f9423591db2653a42cd8bfafde8e91748d28c3914f26c2e11d5b3153d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/516aa57f9423591db2653a42cd8bfafde8e91748d28c3914f26c2e11d5b3153d"}
{"level":"info","ts":"2026-07-07T00:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"516aa57f9423591db2653a42cd8bfafde8e91748d28c3914f26c2e11d5b3153d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"516aa57f9423591db2653a42cd8bfafde8e91748d28c3914f26c2e11d5b3153d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T00:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"516aa57f9423591db2653a42cd8bfafde8e91748d28c3914f26c2e11d5b3153d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"516aa57f9423591db2653a42cd8bfafde8e91748d28c3914f26c2e11d5b3153d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"516aa57f9423591db2653a42cd8bfafde8e91748d28c3914f26c2e11d5b3153d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"516aa57f9423591db2653a42cd8bfafde8e91748d28c3914f26c2e11d5b3153d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/516aa57f9423591db2653a42cd8bfafde8e91748d28c3914f26c2e11d5b3153d"}
{"level":"info","ts":"2026-07-07T00:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/516aa57f9423591db2653a42cd8bfafde8e91748d28c3914f26c2e11d5b3153d"}
{"level":"debug","ts":"2026-07-07T00:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"516aa57f9423591db2653a42cd8bfafde8e91748d28c3914f26c2e11d5b3153d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["516aa57f9423591db2653a42cd8bfafde8e91748d28c3914f26c2e11d5b3153d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"516aa57f9423591db2653a42cd8bfafde8e91748d28c3914f26c2e11d5b3153d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"516aa57f9423591db2653a42cd8bfafde8e91748d28c3914f26c2e11d5b3153d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"516aa57f9423591db2653a42cd8bfafde8e91748d28c3914f26c2e11d5b3153d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"516aa57f9423591db2653a42cd8bfafde8e91748d28c3914f26c2e11d5b3153d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"516aa57f9423591db2653a42cd8bfafde8e91748d28c3914f26c2e11d5b3153d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/516aa57f9423591db2653a42cd8bfafde8e91748d28c3914f26c2e11d5b3153d"}
{"level":"debug","ts":"2026-07-07T00:32:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"516aa57f9423591db2653a42cd8bfafde8e91748d28c3914f26c2e11d5b3153d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/516aa57f9423591db2653a42cd8bfafde8e91748d28c3914f26c2e11d5b3153d"}
{"level":"debug","ts":"2026-07-07T00:32:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"516aa57f9423591db2653a42cd8bfafde8e91748d28c3914f26c2e11d5b3153d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["516aa57f9423591db2653a42cd8bfafde8e91748d28c3914f26c2e11d5b3153d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"516aa57f9423591db2653a42cd8bfafde8e91748d28c3914f26c2e11d5b3153d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"516aa57f9423591db2653a42cd8bfafde8e91748d28c3914f26c2e11d5b3153d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"516aa57f9423591db2653a42cd8bfafde8e91748d28c3914f26c2e11d5b3153d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"516aa57f9423591db2653a42cd8bfafde8e91748d28c3914f26c2e11d5b3153d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"516aa57f9423591db2653a42cd8bfafde8e91748d28c3914f26c2e11d5b3153d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/516aa57f9423591db2653a42cd8bfafde8e91748d28c3914f26c2e11d5b3153d"}
{"level":"debug","ts":"2026-07-07T00:32:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"516aa57f9423591db2653a42cd8bfafde8e91748d28c3914f26c2e11d5b3153d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/516aa57f9423591db2653a42cd8bfafde8e91748d28c3914f26c2e11d5b3153d"}
{"level":"debug","ts":"2026-07-07T00:32:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f717888595e170dc7c98da12c8b6f06cde20a4174bb7265d79b7ad3029146507","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f717888595e170dc7c98da12c8b6f06cde20a4174bb7265d79b7ad3029146507","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f717888595e170dc7c98da12c8b6f06cde20a4174bb7265d79b7ad3029146507","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f717888595e170dc7c98da12c8b6f06cde20a4174bb7265d79b7ad3029146507"}
{"level":"info","ts":"2026-07-07T00:32:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f717888595e170dc7c98da12c8b6f06cde20a4174bb7265d79b7ad3029146507","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"516aa57f9423591db2653a42cd8bfafde8e91748d28c3914f26c2e11d5b3153d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["516aa57f9423591db2653a42cd8bfafde8e91748d28c3914f26c2e11d5b3153d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"516aa57f9423591db2653a42cd8bfafde8e91748d28c3914f26c2e11d5b3153d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f717888595e170dc7c98da12c8b6f06cde20a4174bb7265d79b7ad3029146507","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"516aa57f9423591db2653a42cd8bfafde8e91748d28c3914f26c2e11d5b3153d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f717888595e170dc7c98da12c8b6f06cde20a4174bb7265d79b7ad3029146507"}
{"level":"debug","ts":"2026-07-07T00:32:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f717888595e170dc7c98da12c8b6f06cde20a4174bb7265d79b7ad3029146507","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f717888595e170dc7c98da12c8b6f06cde20a4174bb7265d79b7ad3029146507"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/516aa57f9423591db2653a42cd8bfafde8e91748d28c3914f26c2e11d5b3153d"}
{"level":"info","ts":"2026-07-07T00:32:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f717888595e170dc7c98da12c8b6f06cde20a4174bb7265d79b7ad3029146507","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f717888595e170dc7c98da12c8b6f06cde20a4174bb7265d79b7ad3029146507","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:32:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:32:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f717888595e170dc7c98da12c8b6f06cde20a4174bb7265d79b7ad3029146507"}
{"level":"info","ts":"2026-07-07T00:32:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f717888595e170dc7c98da12c8b6f06cde20a4174bb7265d79b7ad3029146507","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f717888595e170dc7c98da12c8b6f06cde20a4174bb7265d79b7ad3029146507","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f717888595e170dc7c98da12c8b6f06cde20a4174bb7265d79b7ad3029146507","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f717888595e170dc7c98da12c8b6f06cde20a4174bb7265d79b7ad3029146507"}
{"level":"debug","ts":"2026-07-07T00:32:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f717888595e170dc7c98da12c8b6f06cde20a4174bb7265d79b7ad3029146507","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f717888595e170dc7c98da12c8b6f06cde20a4174bb7265d79b7ad3029146507"}
{"level":"debug","ts":"2026-07-07T00:32:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f717888595e170dc7c98da12c8b6f06cde20a4174bb7265d79b7ad3029146507","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:32:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:32:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f717888595e170dc7c98da12c8b6f06cde20a4174bb7265d79b7ad3029146507"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:32:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f717888595e170dc7c98da12c8b6f06cde20a4174bb7265d79b7ad3029146507","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:32:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f717888595e170dc7c98da12c8b6f06cde20a4174bb7265d79b7ad3029146507","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:32:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f717888595e170dc7c98da12c8b6f06cde20a4174bb7265d79b7ad3029146507"}
{"level":"info","ts":"2026-07-07T00:32:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/97413c333edd04c7b3ae65cc78251230cbc1355e87b08a25623367951b8e3d9a"}
{"level":"info","ts":"2026-07-07T00:32:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e1a082d57a4351e8c903589d1cf7409435fb63b98f0c6dafed2090ec5073c4d8"}
{"level":"info","ts":"2026-07-07T00:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f717888595e170dc7c98da12c8b6f06cde20a4174bb7265d79b7ad3029146507"}
{"level":"info","ts":"2026-07-07T00:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/516aa57f9423591db2653a42cd8bfafde8e91748d28c3914f26c2e11d5b3153d"}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"145a6a13e7b43c80600ae053ab96355b31a3a79d8783e6f9fd4ca046a35f9f2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"145a6a13e7b43c80600ae053ab96355b31a3a79d8783e6f9fd4ca046a35f9f2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"145a6a13e7b43c80600ae053ab96355b31a3a79d8783e6f9fd4ca046a35f9f2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/145a6a13e7b43c80600ae053ab96355b31a3a79d8783e6f9fd4ca046a35f9f2d"}
{"level":"info","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"145a6a13e7b43c80600ae053ab96355b31a3a79d8783e6f9fd4ca046a35f9f2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"145a6a13e7b43c80600ae053ab96355b31a3a79d8783e6f9fd4ca046a35f9f2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"145a6a13e7b43c80600ae053ab96355b31a3a79d8783e6f9fd4ca046a35f9f2d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"145a6a13e7b43c80600ae053ab96355b31a3a79d8783e6f9fd4ca046a35f9f2d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"145a6a13e7b43c80600ae053ab96355b31a3a79d8783e6f9fd4ca046a35f9f2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"145a6a13e7b43c80600ae053ab96355b31a3a79d8783e6f9fd4ca046a35f9f2d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/145a6a13e7b43c80600ae053ab96355b31a3a79d8783e6f9fd4ca046a35f9f2d"}
{"level":"info","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/145a6a13e7b43c80600ae053ab96355b31a3a79d8783e6f9fd4ca046a35f9f2d"}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"145a6a13e7b43c80600ae053ab96355b31a3a79d8783e6f9fd4ca046a35f9f2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["145a6a13e7b43c80600ae053ab96355b31a3a79d8783e6f9fd4ca046a35f9f2d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"145a6a13e7b43c80600ae053ab96355b31a3a79d8783e6f9fd4ca046a35f9f2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"145a6a13e7b43c80600ae053ab96355b31a3a79d8783e6f9fd4ca046a35f9f2d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/145a6a13e7b43c80600ae053ab96355b31a3a79d8783e6f9fd4ca046a35f9f2d"}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94f4f4b57e09a938a00b7d44a5a50f6ed5768e5535ecfa6f8cdf12a1a33406cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94f4f4b57e09a938a00b7d44a5a50f6ed5768e5535ecfa6f8cdf12a1a33406cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94f4f4b57e09a938a00b7d44a5a50f6ed5768e5535ecfa6f8cdf12a1a33406cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94f4f4b57e09a938a00b7d44a5a50f6ed5768e5535ecfa6f8cdf12a1a33406cd"}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94f4f4b57e09a938a00b7d44a5a50f6ed5768e5535ecfa6f8cdf12a1a33406cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94f4f4b57e09a938a00b7d44a5a50f6ed5768e5535ecfa6f8cdf12a1a33406cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"94f4f4b57e09a938a00b7d44a5a50f6ed5768e5535ecfa6f8cdf12a1a33406cd","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"94f4f4b57e09a938a00b7d44a5a50f6ed5768e5535ecfa6f8cdf12a1a33406cd\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94f4f4b57e09a938a00b7d44a5a50f6ed5768e5535ecfa6f8cdf12a1a33406cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94f4f4b57e09a938a00b7d44a5a50f6ed5768e5535ecfa6f8cdf12a1a33406cd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94f4f4b57e09a938a00b7d44a5a50f6ed5768e5535ecfa6f8cdf12a1a33406cd"}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94f4f4b57e09a938a00b7d44a5a50f6ed5768e5535ecfa6f8cdf12a1a33406cd"}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60392fffeee2774564c40448c9b62d3b06f08e9e4c80ee9fc4a231a6414d0236","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60392fffeee2774564c40448c9b62d3b06f08e9e4c80ee9fc4a231a6414d0236","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60392fffeee2774564c40448c9b62d3b06f08e9e4c80ee9fc4a231a6414d0236","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94f4f4b57e09a938a00b7d44a5a50f6ed5768e5535ecfa6f8cdf12a1a33406cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["94f4f4b57e09a938a00b7d44a5a50f6ed5768e5535ecfa6f8cdf12a1a33406cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60392fffeee2774564c40448c9b62d3b06f08e9e4c80ee9fc4a231a6414d0236"}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94f4f4b57e09a938a00b7d44a5a50f6ed5768e5535ecfa6f8cdf12a1a33406cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60392fffeee2774564c40448c9b62d3b06f08e9e4c80ee9fc4a231a6414d0236","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94f4f4b57e09a938a00b7d44a5a50f6ed5768e5535ecfa6f8cdf12a1a33406cd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60392fffeee2774564c40448c9b62d3b06f08e9e4c80ee9fc4a231a6414d0236"}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60392fffeee2774564c40448c9b62d3b06f08e9e4c80ee9fc4a231a6414d0236","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60392fffeee2774564c40448c9b62d3b06f08e9e4c80ee9fc4a231a6414d0236"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94f4f4b57e09a938a00b7d44a5a50f6ed5768e5535ecfa6f8cdf12a1a33406cd"}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60392fffeee2774564c40448c9b62d3b06f08e9e4c80ee9fc4a231a6414d0236","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60392fffeee2774564c40448c9b62d3b06f08e9e4c80ee9fc4a231a6414d0236","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60392fffeee2774564c40448c9b62d3b06f08e9e4c80ee9fc4a231a6414d0236","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60392fffeee2774564c40448c9b62d3b06f08e9e4c80ee9fc4a231a6414d0236","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60392fffeee2774564c40448c9b62d3b06f08e9e4c80ee9fc4a231a6414d0236","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60392fffeee2774564c40448c9b62d3b06f08e9e4c80ee9fc4a231a6414d0236"}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"875381f37f2f69658e6b366fd8ae1e3f15d1bc7061441e14f205c9c30a930edf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"875381f37f2f69658e6b366fd8ae1e3f15d1bc7061441e14f205c9c30a930edf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60392fffeee2774564c40448c9b62d3b06f08e9e4c80ee9fc4a231a6414d0236","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60392fffeee2774564c40448c9b62d3b06f08e9e4c80ee9fc4a231a6414d0236"}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"875381f37f2f69658e6b366fd8ae1e3f15d1bc7061441e14f205c9c30a930edf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"875381f37f2f69658e6b366fd8ae1e3f15d1bc7061441e14f205c9c30a930edf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"875381f37f2f69658e6b366fd8ae1e3f15d1bc7061441e14f205c9c30a930edf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/875381f37f2f69658e6b366fd8ae1e3f15d1bc7061441e14f205c9c30a930edf"}
{"level":"error","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"875381f37f2f69658e6b366fd8ae1e3f15d1bc7061441e14f205c9c30a930edf","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"875381f37f2f69658e6b366fd8ae1e3f15d1bc7061441e14f205c9c30a930edf\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"875381f37f2f69658e6b366fd8ae1e3f15d1bc7061441e14f205c9c30a930edf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"875381f37f2f69658e6b366fd8ae1e3f15d1bc7061441e14f205c9c30a930edf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60392fffeee2774564c40448c9b62d3b06f08e9e4c80ee9fc4a231a6414d0236","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60392fffeee2774564c40448c9b62d3b06f08e9e4c80ee9fc4a231a6414d0236"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/875381f37f2f69658e6b366fd8ae1e3f15d1bc7061441e14f205c9c30a930edf"}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60392fffeee2774564c40448c9b62d3b06f08e9e4c80ee9fc4a231a6414d0236","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60392fffeee2774564c40448c9b62d3b06f08e9e4c80ee9fc4a231a6414d0236","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60392fffeee2774564c40448c9b62d3b06f08e9e4c80ee9fc4a231a6414d0236","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60392fffeee2774564c40448c9b62d3b06f08e9e4c80ee9fc4a231a6414d0236","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60392fffeee2774564c40448c9b62d3b06f08e9e4c80ee9fc4a231a6414d0236","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60392fffeee2774564c40448c9b62d3b06f08e9e4c80ee9fc4a231a6414d0236"}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da42e68e6471d53969dc13f3cb172960da85c1748bca6ba1c59e6e1905c9070d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60392fffeee2774564c40448c9b62d3b06f08e9e4c80ee9fc4a231a6414d0236"}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da42e68e6471d53969dc13f3cb172960da85c1748bca6ba1c59e6e1905c9070d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60392fffeee2774564c40448c9b62d3b06f08e9e4c80ee9fc4a231a6414d0236","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60392fffeee2774564c40448c9b62d3b06f08e9e4c80ee9fc4a231a6414d0236"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60392fffeee2774564c40448c9b62d3b06f08e9e4c80ee9fc4a231a6414d0236","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da42e68e6471d53969dc13f3cb172960da85c1748bca6ba1c59e6e1905c9070d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da42e68e6471d53969dc13f3cb172960da85c1748bca6ba1c59e6e1905c9070d"}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da42e68e6471d53969dc13f3cb172960da85c1748bca6ba1c59e6e1905c9070d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"875381f37f2f69658e6b366fd8ae1e3f15d1bc7061441e14f205c9c30a930edf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["875381f37f2f69658e6b366fd8ae1e3f15d1bc7061441e14f205c9c30a930edf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60392fffeee2774564c40448c9b62d3b06f08e9e4c80ee9fc4a231a6414d0236"}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"875381f37f2f69658e6b366fd8ae1e3f15d1bc7061441e14f205c9c30a930edf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60392fffeee2774564c40448c9b62d3b06f08e9e4c80ee9fc4a231a6414d0236","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da42e68e6471d53969dc13f3cb172960da85c1748bca6ba1c59e6e1905c9070d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"875381f37f2f69658e6b366fd8ae1e3f15d1bc7061441e14f205c9c30a930edf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da42e68e6471d53969dc13f3cb172960da85c1748bca6ba1c59e6e1905c9070d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da42e68e6471d53969dc13f3cb172960da85c1748bca6ba1c59e6e1905c9070d"}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac521800724d233c33040337ba49b81d23485b95283661c6917748bc30208b17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/875381f37f2f69658e6b366fd8ae1e3f15d1bc7061441e14f205c9c30a930edf"}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac521800724d233c33040337ba49b81d23485b95283661c6917748bc30208b17","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e480060e369774a56f04be18236c400b81feee7595f2ab740505e764815de779","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac521800724d233c33040337ba49b81d23485b95283661c6917748bc30208b17"}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e480060e369774a56f04be18236c400b81feee7595f2ab740505e764815de779","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac521800724d233c33040337ba49b81d23485b95283661c6917748bc30208b17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac521800724d233c33040337ba49b81d23485b95283661c6917748bc30208b17"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac521800724d233c33040337ba49b81d23485b95283661c6917748bc30208b17","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da42e68e6471d53969dc13f3cb172960da85c1748bca6ba1c59e6e1905c9070d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da42e68e6471d53969dc13f3cb172960da85c1748bca6ba1c59e6e1905c9070d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e480060e369774a56f04be18236c400b81feee7595f2ab740505e764815de779"}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da42e68e6471d53969dc13f3cb172960da85c1748bca6ba1c59e6e1905c9070d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e480060e369774a56f04be18236c400b81feee7595f2ab740505e764815de779","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e480060e369774a56f04be18236c400b81feee7595f2ab740505e764815de779"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac521800724d233c33040337ba49b81d23485b95283661c6917748bc30208b17"}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e480060e369774a56f04be18236c400b81feee7595f2ab740505e764815de779","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac521800724d233c33040337ba49b81d23485b95283661c6917748bc30208b17","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da42e68e6471d53969dc13f3cb172960da85c1748bca6ba1c59e6e1905c9070d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e480060e369774a56f04be18236c400b81feee7595f2ab740505e764815de779","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e480060e369774a56f04be18236c400b81feee7595f2ab740505e764815de779","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e480060e369774a56f04be18236c400b81feee7595f2ab740505e764815de779","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e480060e369774a56f04be18236c400b81feee7595f2ab740505e764815de779"}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e480060e369774a56f04be18236c400b81feee7595f2ab740505e764815de779","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e480060e369774a56f04be18236c400b81feee7595f2ab740505e764815de779"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e480060e369774a56f04be18236c400b81feee7595f2ab740505e764815de779","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89930111d7925eb7ec61173298e0e3b21192640c8973625bde57210cd07a35a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da42e68e6471d53969dc13f3cb172960da85c1748bca6ba1c59e6e1905c9070d"}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89930111d7925eb7ec61173298e0e3b21192640c8973625bde57210cd07a35a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e480060e369774a56f04be18236c400b81feee7595f2ab740505e764815de779","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e480060e369774a56f04be18236c400b81feee7595f2ab740505e764815de779","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89930111d7925eb7ec61173298e0e3b21192640c8973625bde57210cd07a35a9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e480060e369774a56f04be18236c400b81feee7595f2ab740505e764815de779"}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e480060e369774a56f04be18236c400b81feee7595f2ab740505e764815de779","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e480060e369774a56f04be18236c400b81feee7595f2ab740505e764815de779"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e480060e369774a56f04be18236c400b81feee7595f2ab740505e764815de779","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89930111d7925eb7ec61173298e0e3b21192640c8973625bde57210cd07a35a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89930111d7925eb7ec61173298e0e3b21192640c8973625bde57210cd07a35a9"}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89930111d7925eb7ec61173298e0e3b21192640c8973625bde57210cd07a35a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e480060e369774a56f04be18236c400b81feee7595f2ab740505e764815de779","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e480060e369774a56f04be18236c400b81feee7595f2ab740505e764815de779","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89930111d7925eb7ec61173298e0e3b21192640c8973625bde57210cd07a35a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89930111d7925eb7ec61173298e0e3b21192640c8973625bde57210cd07a35a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e480060e369774a56f04be18236c400b81feee7595f2ab740505e764815de779"}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89930111d7925eb7ec61173298e0e3b21192640c8973625bde57210cd07a35a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e480060e369774a56f04be18236c400b81feee7595f2ab740505e764815de779","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e480060e369774a56f04be18236c400b81feee7595f2ab740505e764815de779"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e480060e369774a56f04be18236c400b81feee7595f2ab740505e764815de779","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89930111d7925eb7ec61173298e0e3b21192640c8973625bde57210cd07a35a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89930111d7925eb7ec61173298e0e3b21192640c8973625bde57210cd07a35a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e480060e369774a56f04be18236c400b81feee7595f2ab740505e764815de779","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89930111d7925eb7ec61173298e0e3b21192640c8973625bde57210cd07a35a9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89930111d7925eb7ec61173298e0e3b21192640c8973625bde57210cd07a35a9"}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89930111d7925eb7ec61173298e0e3b21192640c8973625bde57210cd07a35a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89930111d7925eb7ec61173298e0e3b21192640c8973625bde57210cd07a35a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89930111d7925eb7ec61173298e0e3b21192640c8973625bde57210cd07a35a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89930111d7925eb7ec61173298e0e3b21192640c8973625bde57210cd07a35a9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e480060e369774a56f04be18236c400b81feee7595f2ab740505e764815de779"}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89930111d7925eb7ec61173298e0e3b21192640c8973625bde57210cd07a35a9"}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50850e069b01b8c7cfcc85a8a8c27d967b059e5808de4753002b523f98b429ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50850e069b01b8c7cfcc85a8a8c27d967b059e5808de4753002b523f98b429ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50850e069b01b8c7cfcc85a8a8c27d967b059e5808de4753002b523f98b429ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50850e069b01b8c7cfcc85a8a8c27d967b059e5808de4753002b523f98b429ca"}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50850e069b01b8c7cfcc85a8a8c27d967b059e5808de4753002b523f98b429ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1"}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50850e069b01b8c7cfcc85a8a8c27d967b059e5808de4753002b523f98b429ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50850e069b01b8c7cfcc85a8a8c27d967b059e5808de4753002b523f98b429ca"}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1"}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50850e069b01b8c7cfcc85a8a8c27d967b059e5808de4753002b523f98b429ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50850e069b01b8c7cfcc85a8a8c27d967b059e5808de4753002b523f98b429ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50850e069b01b8c7cfcc85a8a8c27d967b059e5808de4753002b523f98b429ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1"}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50850e069b01b8c7cfcc85a8a8c27d967b059e5808de4753002b523f98b429ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1"}
{"level":"info","ts":"2026-07-07T00:33:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50850e069b01b8c7cfcc85a8a8c27d967b059e5808de4753002b523f98b429ca"}
{"level":"debug","ts":"2026-07-07T00:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1"}
{"level":"debug","ts":"2026-07-07T00:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1"}
{"level":"debug","ts":"2026-07-07T00:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1"}
{"level":"debug","ts":"2026-07-07T00:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1"}
{"level":"debug","ts":"2026-07-07T00:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1"}
{"level":"debug","ts":"2026-07-07T00:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1"}
{"level":"debug","ts":"2026-07-07T00:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1"}
{"level":"debug","ts":"2026-07-07T00:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1"}
{"level":"debug","ts":"2026-07-07T00:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1"}
{"level":"debug","ts":"2026-07-07T00:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1"}
{"level":"debug","ts":"2026-07-07T00:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1"}
{"level":"debug","ts":"2026-07-07T00:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1"}
{"level":"debug","ts":"2026-07-07T00:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1"}
{"level":"debug","ts":"2026-07-07T00:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1"}
{"level":"debug","ts":"2026-07-07T00:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1"}
{"level":"debug","ts":"2026-07-07T00:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1"}
{"level":"debug","ts":"2026-07-07T00:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1"}
{"level":"debug","ts":"2026-07-07T00:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1"}
{"level":"debug","ts":"2026-07-07T00:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1"}
{"level":"debug","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"468c11051cc20726ff5ea4ca2aae680d70b64faff1ef71cd87b4fdcb3ef256c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"468c11051cc20726ff5ea4ca2aae680d70b64faff1ef71cd87b4fdcb3ef256c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"468c11051cc20726ff5ea4ca2aae680d70b64faff1ef71cd87b4fdcb3ef256c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"468c11051cc20726ff5ea4ca2aae680d70b64faff1ef71cd87b4fdcb3ef256c3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/468c11051cc20726ff5ea4ca2aae680d70b64faff1ef71cd87b4fdcb3ef256c3"}
{"level":"debug","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"468c11051cc20726ff5ea4ca2aae680d70b64faff1ef71cd87b4fdcb3ef256c3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/468c11051cc20726ff5ea4ca2aae680d70b64faff1ef71cd87b4fdcb3ef256c3"}
{"level":"debug","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"468c11051cc20726ff5ea4ca2aae680d70b64faff1ef71cd87b4fdcb3ef256c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["468c11051cc20726ff5ea4ca2aae680d70b64faff1ef71cd87b4fdcb3ef256c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"468c11051cc20726ff5ea4ca2aae680d70b64faff1ef71cd87b4fdcb3ef256c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"468c11051cc20726ff5ea4ca2aae680d70b64faff1ef71cd87b4fdcb3ef256c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"468c11051cc20726ff5ea4ca2aae680d70b64faff1ef71cd87b4fdcb3ef256c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"468c11051cc20726ff5ea4ca2aae680d70b64faff1ef71cd87b4fdcb3ef256c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"468c11051cc20726ff5ea4ca2aae680d70b64faff1ef71cd87b4fdcb3ef256c3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/468c11051cc20726ff5ea4ca2aae680d70b64faff1ef71cd87b4fdcb3ef256c3"}
{"level":"debug","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"468c11051cc20726ff5ea4ca2aae680d70b64faff1ef71cd87b4fdcb3ef256c3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/468c11051cc20726ff5ea4ca2aae680d70b64faff1ef71cd87b4fdcb3ef256c3"}
{"level":"debug","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"468c11051cc20726ff5ea4ca2aae680d70b64faff1ef71cd87b4fdcb3ef256c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["468c11051cc20726ff5ea4ca2aae680d70b64faff1ef71cd87b4fdcb3ef256c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"468c11051cc20726ff5ea4ca2aae680d70b64faff1ef71cd87b4fdcb3ef256c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3635b47e4a12542b95febe3b45345ef1538b11bd2ee2a66348a2d3d30357c37f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3635b47e4a12542b95febe3b45345ef1538b11bd2ee2a66348a2d3d30357c37f"}
{"level":"info","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3635b47e4a12542b95febe3b45345ef1538b11bd2ee2a66348a2d3d30357c37f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"468c11051cc20726ff5ea4ca2aae680d70b64faff1ef71cd87b4fdcb3ef256c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"468c11051cc20726ff5ea4ca2aae680d70b64faff1ef71cd87b4fdcb3ef256c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3635b47e4a12542b95febe3b45345ef1538b11bd2ee2a66348a2d3d30357c37f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3635b47e4a12542b95febe3b45345ef1538b11bd2ee2a66348a2d3d30357c37f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3635b47e4a12542b95febe3b45345ef1538b11bd2ee2a66348a2d3d30357c37f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"468c11051cc20726ff5ea4ca2aae680d70b64faff1ef71cd87b4fdcb3ef256c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3635b47e4a12542b95febe3b45345ef1538b11bd2ee2a66348a2d3d30357c37f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/468c11051cc20726ff5ea4ca2aae680d70b64faff1ef71cd87b4fdcb3ef256c3"}
{"level":"debug","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"468c11051cc20726ff5ea4ca2aae680d70b64faff1ef71cd87b4fdcb3ef256c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["468c11051cc20726ff5ea4ca2aae680d70b64faff1ef71cd87b4fdcb3ef256c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"468c11051cc20726ff5ea4ca2aae680d70b64faff1ef71cd87b4fdcb3ef256c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"468c11051cc20726ff5ea4ca2aae680d70b64faff1ef71cd87b4fdcb3ef256c3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3635b47e4a12542b95febe3b45345ef1538b11bd2ee2a66348a2d3d30357c37f"}
{"level":"info","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/468c11051cc20726ff5ea4ca2aae680d70b64faff1ef71cd87b4fdcb3ef256c3"}
{"level":"debug","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee77aa5cf5b3c735f8fe32635642290811c73b1d0f74c8e5e2c6fee2b18d25d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee77aa5cf5b3c735f8fe32635642290811c73b1d0f74c8e5e2c6fee2b18d25d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee77aa5cf5b3c735f8fe32635642290811c73b1d0f74c8e5e2c6fee2b18d25d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee77aa5cf5b3c735f8fe32635642290811c73b1d0f74c8e5e2c6fee2b18d25d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee77aa5cf5b3c735f8fe32635642290811c73b1d0f74c8e5e2c6fee2b18d25d3"}
{"level":"debug","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee77aa5cf5b3c735f8fe32635642290811c73b1d0f74c8e5e2c6fee2b18d25d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee77aa5cf5b3c735f8fe32635642290811c73b1d0f74c8e5e2c6fee2b18d25d3"}
{"level":"debug","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee77aa5cf5b3c735f8fe32635642290811c73b1d0f74c8e5e2c6fee2b18d25d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee77aa5cf5b3c735f8fe32635642290811c73b1d0f74c8e5e2c6fee2b18d25d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee77aa5cf5b3c735f8fe32635642290811c73b1d0f74c8e5e2c6fee2b18d25d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee77aa5cf5b3c735f8fe32635642290811c73b1d0f74c8e5e2c6fee2b18d25d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99e6a9db3c4e960919e9e307f2a4053ca26445b6de28170f37f2d70aaaf29d77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99e6a9db3c4e960919e9e307f2a4053ca26445b6de28170f37f2d70aaaf29d77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99e6a9db3c4e960919e9e307f2a4053ca26445b6de28170f37f2d70aaaf29d77","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee77aa5cf5b3c735f8fe32635642290811c73b1d0f74c8e5e2c6fee2b18d25d3"}
{"level":"debug","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99e6a9db3c4e960919e9e307f2a4053ca26445b6de28170f37f2d70aaaf29d77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99e6a9db3c4e960919e9e307f2a4053ca26445b6de28170f37f2d70aaaf29d77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99e6a9db3c4e960919e9e307f2a4053ca26445b6de28170f37f2d70aaaf29d77","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99e6a9db3c4e960919e9e307f2a4053ca26445b6de28170f37f2d70aaaf29d77"}
{"level":"debug","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99e6a9db3c4e960919e9e307f2a4053ca26445b6de28170f37f2d70aaaf29d77","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99e6a9db3c4e960919e9e307f2a4053ca26445b6de28170f37f2d70aaaf29d77"}
{"level":"debug","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ea5da46cc40baaae6182164056c9216707e492bf70e801c29604255257fbb19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ea5da46cc40baaae6182164056c9216707e492bf70e801c29604255257fbb19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ea5da46cc40baaae6182164056c9216707e492bf70e801c29604255257fbb19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ea5da46cc40baaae6182164056c9216707e492bf70e801c29604255257fbb19","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ea5da46cc40baaae6182164056c9216707e492bf70e801c29604255257fbb19"}
{"level":"debug","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99e6a9db3c4e960919e9e307f2a4053ca26445b6de28170f37f2d70aaaf29d77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99e6a9db3c4e960919e9e307f2a4053ca26445b6de28170f37f2d70aaaf29d77"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ea5da46cc40baaae6182164056c9216707e492bf70e801c29604255257fbb19"}
{"level":"info","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99e6a9db3c4e960919e9e307f2a4053ca26445b6de28170f37f2d70aaaf29d77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ea5da46cc40baaae6182164056c9216707e492bf70e801c29604255257fbb19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ea5da46cc40baaae6182164056c9216707e492bf70e801c29604255257fbb19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ea5da46cc40baaae6182164056c9216707e492bf70e801c29604255257fbb19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99e6a9db3c4e960919e9e307f2a4053ca26445b6de28170f37f2d70aaaf29d77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99e6a9db3c4e960919e9e307f2a4053ca26445b6de28170f37f2d70aaaf29d77"}
{"level":"info","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99e6a9db3c4e960919e9e307f2a4053ca26445b6de28170f37f2d70aaaf29d77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ea5da46cc40baaae6182164056c9216707e492bf70e801c29604255257fbb19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ea5da46cc40baaae6182164056c9216707e492bf70e801c29604255257fbb19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99e6a9db3c4e960919e9e307f2a4053ca26445b6de28170f37f2d70aaaf29d77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99e6a9db3c4e960919e9e307f2a4053ca26445b6de28170f37f2d70aaaf29d77"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ea5da46cc40baaae6182164056c9216707e492bf70e801c29604255257fbb19"}
{"level":"info","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99e6a9db3c4e960919e9e307f2a4053ca26445b6de28170f37f2d70aaaf29d77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ea5da46cc40baaae6182164056c9216707e492bf70e801c29604255257fbb19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ea5da46cc40baaae6182164056c9216707e492bf70e801c29604255257fbb19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99e6a9db3c4e960919e9e307f2a4053ca26445b6de28170f37f2d70aaaf29d77"}
{"level":"info","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ea5da46cc40baaae6182164056c9216707e492bf70e801c29604255257fbb19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3bdd1cbfa23c89d5898f2844375aa15153d86264dfd03b68d3ed6bbbc7cfcd26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3bdd1cbfa23c89d5898f2844375aa15153d86264dfd03b68d3ed6bbbc7cfcd26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99e6a9db3c4e960919e9e307f2a4053ca26445b6de28170f37f2d70aaaf29d77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d658abbf2254af77aca0782468a304322b6bb17596fe57d27eea19e216e982a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ea5da46cc40baaae6182164056c9216707e492bf70e801c29604255257fbb19"}
{"level":"info","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d658abbf2254af77aca0782468a304322b6bb17596fe57d27eea19e216e982a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ea5da46cc40baaae6182164056c9216707e492bf70e801c29604255257fbb19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3bdd1cbfa23c89d5898f2844375aa15153d86264dfd03b68d3ed6bbbc7cfcd26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bdd1cbfa23c89d5898f2844375aa15153d86264dfd03b68d3ed6bbbc7cfcd26"}
{"level":"info","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3bdd1cbfa23c89d5898f2844375aa15153d86264dfd03b68d3ed6bbbc7cfcd26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d658abbf2254af77aca0782468a304322b6bb17596fe57d27eea19e216e982a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d658abbf2254af77aca0782468a304322b6bb17596fe57d27eea19e216e982a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3bdd1cbfa23c89d5898f2844375aa15153d86264dfd03b68d3ed6bbbc7cfcd26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3bdd1cbfa23c89d5898f2844375aa15153d86264dfd03b68d3ed6bbbc7cfcd26"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d658abbf2254af77aca0782468a304322b6bb17596fe57d27eea19e216e982a"}
{"level":"info","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3bdd1cbfa23c89d5898f2844375aa15153d86264dfd03b68d3ed6bbbc7cfcd26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d658abbf2254af77aca0782468a304322b6bb17596fe57d27eea19e216e982a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d658abbf2254af77aca0782468a304322b6bb17596fe57d27eea19e216e982a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99e6a9db3c4e960919e9e307f2a4053ca26445b6de28170f37f2d70aaaf29d77"}
{"level":"info","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d658abbf2254af77aca0782468a304322b6bb17596fe57d27eea19e216e982a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bdd1cbfa23c89d5898f2844375aa15153d86264dfd03b68d3ed6bbbc7cfcd26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4bbb00779b0eb860bf2a1e27090775d847e67adf31361723f3396324b6289a75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4bbb00779b0eb860bf2a1e27090775d847e67adf31361723f3396324b6289a75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d658abbf2254af77aca0782468a304322b6bb17596fe57d27eea19e216e982a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4bbb00779b0eb860bf2a1e27090775d847e67adf31361723f3396324b6289a75","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ea5da46cc40baaae6182164056c9216707e492bf70e801c29604255257fbb19"}
{"level":"debug","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4bbb00779b0eb860bf2a1e27090775d847e67adf31361723f3396324b6289a75","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bdd1cbfa23c89d5898f2844375aa15153d86264dfd03b68d3ed6bbbc7cfcd26"}
{"level":"debug","ts":"2026-07-07T00:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4bbb00779b0eb860bf2a1e27090775d847e67adf31361723f3396324b6289a75","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d658abbf2254af77aca0782468a304322b6bb17596fe57d27eea19e216e982a"}
{"level":"debug","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4bbb00779b0eb860bf2a1e27090775d847e67adf31361723f3396324b6289a75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4bbb00779b0eb860bf2a1e27090775d847e67adf31361723f3396324b6289a75"}
{"level":"info","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4bbb00779b0eb860bf2a1e27090775d847e67adf31361723f3396324b6289a75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4bbb00779b0eb860bf2a1e27090775d847e67adf31361723f3396324b6289a75","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4bbb00779b0eb860bf2a1e27090775d847e67adf31361723f3396324b6289a75"}
{"level":"debug","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4bbb00779b0eb860bf2a1e27090775d847e67adf31361723f3396324b6289a75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4bbb00779b0eb860bf2a1e27090775d847e67adf31361723f3396324b6289a75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4bbb00779b0eb860bf2a1e27090775d847e67adf31361723f3396324b6289a75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9c38ac2a9d85185aec1ee09f63c62655fa1d38029eeb07bd28c18017c25221e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9c38ac2a9d85185aec1ee09f63c62655fa1d38029eeb07bd28c18017c25221e"}
{"level":"info","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9c38ac2a9d85185aec1ee09f63c62655fa1d38029eeb07bd28c18017c25221e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4bbb00779b0eb860bf2a1e27090775d847e67adf31361723f3396324b6289a75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4bbb00779b0eb860bf2a1e27090775d847e67adf31361723f3396324b6289a75"}
{"level":"info","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4bbb00779b0eb860bf2a1e27090775d847e67adf31361723f3396324b6289a75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9c38ac2a9d85185aec1ee09f63c62655fa1d38029eeb07bd28c18017c25221e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4bbb00779b0eb860bf2a1e27090775d847e67adf31361723f3396324b6289a75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4bbb00779b0eb860bf2a1e27090775d847e67adf31361723f3396324b6289a75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4bbb00779b0eb860bf2a1e27090775d847e67adf31361723f3396324b6289a75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9c38ac2a9d85185aec1ee09f63c62655fa1d38029eeb07bd28c18017c25221e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4bbb00779b0eb860bf2a1e27090775d847e67adf31361723f3396324b6289a75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4bbb00779b0eb860bf2a1e27090775d847e67adf31361723f3396324b6289a75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9c38ac2a9d85185aec1ee09f63c62655fa1d38029eeb07bd28c18017c25221e"}
{"level":"error","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4bbb00779b0eb860bf2a1e27090775d847e67adf31361723f3396324b6289a75","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4bbb00779b0eb860bf2a1e27090775d847e67adf31361723f3396324b6289a75\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4bbb00779b0eb860bf2a1e27090775d847e67adf31361723f3396324b6289a75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4bbb00779b0eb860bf2a1e27090775d847e67adf31361723f3396324b6289a75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0eadbcfb541167efda2ba5772006da52903c254140acc144b3d374848e734bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4bbb00779b0eb860bf2a1e27090775d847e67adf31361723f3396324b6289a75"}
{"level":"info","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0eadbcfb541167efda2ba5772006da52903c254140acc144b3d374848e734bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9c38ac2a9d85185aec1ee09f63c62655fa1d38029eeb07bd28c18017c25221e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9c38ac2a9d85185aec1ee09f63c62655fa1d38029eeb07bd28c18017c25221e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0eadbcfb541167efda2ba5772006da52903c254140acc144b3d374848e734bd"}
{"level":"info","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9c38ac2a9d85185aec1ee09f63c62655fa1d38029eeb07bd28c18017c25221e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4bbb00779b0eb860bf2a1e27090775d847e67adf31361723f3396324b6289a75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0eadbcfb541167efda2ba5772006da52903c254140acc144b3d374848e734bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0eadbcfb541167efda2ba5772006da52903c254140acc144b3d374848e734bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0eadbcfb541167efda2ba5772006da52903c254140acc144b3d374848e734bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9c38ac2a9d85185aec1ee09f63c62655fa1d38029eeb07bd28c18017c25221e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4bbb00779b0eb860bf2a1e27090775d847e67adf31361723f3396324b6289a75"}
{"level":"debug","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0eadbcfb541167efda2ba5772006da52903c254140acc144b3d374848e734bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0eadbcfb541167efda2ba5772006da52903c254140acc144b3d374848e734bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4bbb00779b0eb860bf2a1e27090775d847e67adf31361723f3396324b6289a75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4bbb00779b0eb860bf2a1e27090775d847e67adf31361723f3396324b6289a75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0eadbcfb541167efda2ba5772006da52903c254140acc144b3d374848e734bd"}
{"level":"info","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4bbb00779b0eb860bf2a1e27090775d847e67adf31361723f3396324b6289a75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0eadbcfb541167efda2ba5772006da52903c254140acc144b3d374848e734bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0eadbcfb541167efda2ba5772006da52903c254140acc144b3d374848e734bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9c38ac2a9d85185aec1ee09f63c62655fa1d38029eeb07bd28c18017c25221e"}
{"level":"info","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0eadbcfb541167efda2ba5772006da52903c254140acc144b3d374848e734bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4bbb00779b0eb860bf2a1e27090775d847e67adf31361723f3396324b6289a75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0eadbcfb541167efda2ba5772006da52903c254140acc144b3d374848e734bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0eadbcfb541167efda2ba5772006da52903c254140acc144b3d374848e734bd"}
{"level":"info","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0eadbcfb541167efda2ba5772006da52903c254140acc144b3d374848e734bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0eadbcfb541167efda2ba5772006da52903c254140acc144b3d374848e734bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0eadbcfb541167efda2ba5772006da52903c254140acc144b3d374848e734bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0eadbcfb541167efda2ba5772006da52903c254140acc144b3d374848e734bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0eadbcfb541167efda2ba5772006da52903c254140acc144b3d374848e734bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0eadbcfb541167efda2ba5772006da52903c254140acc144b3d374848e734bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4bbb00779b0eb860bf2a1e27090775d847e67adf31361723f3396324b6289a75"}
{"level":"error","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f0eadbcfb541167efda2ba5772006da52903c254140acc144b3d374848e734bd","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f0eadbcfb541167efda2ba5772006da52903c254140acc144b3d374848e734bd\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0eadbcfb541167efda2ba5772006da52903c254140acc144b3d374848e734bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0eadbcfb541167efda2ba5772006da52903c254140acc144b3d374848e734bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0eadbcfb541167efda2ba5772006da52903c254140acc144b3d374848e734bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0eadbcfb541167efda2ba5772006da52903c254140acc144b3d374848e734bd"}
{"level":"error","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f0eadbcfb541167efda2ba5772006da52903c254140acc144b3d374848e734bd","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f0eadbcfb541167efda2ba5772006da52903c254140acc144b3d374848e734bd\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0eadbcfb541167efda2ba5772006da52903c254140acc144b3d374848e734bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0eadbcfb541167efda2ba5772006da52903c254140acc144b3d374848e734bd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0eadbcfb541167efda2ba5772006da52903c254140acc144b3d374848e734bd"}
{"level":"info","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0eadbcfb541167efda2ba5772006da52903c254140acc144b3d374848e734bd"}
{"level":"debug","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0eadbcfb541167efda2ba5772006da52903c254140acc144b3d374848e734bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0eadbcfb541167efda2ba5772006da52903c254140acc144b3d374848e734bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0eadbcfb541167efda2ba5772006da52903c254140acc144b3d374848e734bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0eadbcfb541167efda2ba5772006da52903c254140acc144b3d374848e734bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0eadbcfb541167efda2ba5772006da52903c254140acc144b3d374848e734bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0eadbcfb541167efda2ba5772006da52903c254140acc144b3d374848e734bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0eadbcfb541167efda2ba5772006da52903c254140acc144b3d374848e734bd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0eadbcfb541167efda2ba5772006da52903c254140acc144b3d374848e734bd"}
{"level":"debug","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0eadbcfb541167efda2ba5772006da52903c254140acc144b3d374848e734bd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0eadbcfb541167efda2ba5772006da52903c254140acc144b3d374848e734bd"}
{"level":"debug","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0eadbcfb541167efda2ba5772006da52903c254140acc144b3d374848e734bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0eadbcfb541167efda2ba5772006da52903c254140acc144b3d374848e734bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0eadbcfb541167efda2ba5772006da52903c254140acc144b3d374848e734bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0eadbcfb541167efda2ba5772006da52903c254140acc144b3d374848e734bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0eadbcfb541167efda2ba5772006da52903c254140acc144b3d374848e734bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0eadbcfb541167efda2ba5772006da52903c254140acc144b3d374848e734bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0eadbcfb541167efda2ba5772006da52903c254140acc144b3d374848e734bd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0eadbcfb541167efda2ba5772006da52903c254140acc144b3d374848e734bd"}
{"level":"debug","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0eadbcfb541167efda2ba5772006da52903c254140acc144b3d374848e734bd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0eadbcfb541167efda2ba5772006da52903c254140acc144b3d374848e734bd"}
{"level":"debug","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0eadbcfb541167efda2ba5772006da52903c254140acc144b3d374848e734bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0eadbcfb541167efda2ba5772006da52903c254140acc144b3d374848e734bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0eadbcfb541167efda2ba5772006da52903c254140acc144b3d374848e734bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0eadbcfb541167efda2ba5772006da52903c254140acc144b3d374848e734bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:33:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:33:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0eadbcfb541167efda2ba5772006da52903c254140acc144b3d374848e734bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0eadbcfb541167efda2ba5772006da52903c254140acc144b3d374848e734bd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0eadbcfb541167efda2ba5772006da52903c254140acc144b3d374848e734bd"}
{"level":"debug","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0eadbcfb541167efda2ba5772006da52903c254140acc144b3d374848e734bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0eadbcfb541167efda2ba5772006da52903c254140acc144b3d374848e734bd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0eadbcfb541167efda2ba5772006da52903c254140acc144b3d374848e734bd"}
{"level":"debug","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0eadbcfb541167efda2ba5772006da52903c254140acc144b3d374848e734bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:33:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:33:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0eadbcfb541167efda2ba5772006da52903c254140acc144b3d374848e734bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0eadbcfb541167efda2ba5772006da52903c254140acc144b3d374848e734bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0eadbcfb541167efda2ba5772006da52903c254140acc144b3d374848e734bd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:33:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0eadbcfb541167efda2ba5772006da52903c254140acc144b3d374848e734bd"}
{"level":"info","ts":"2026-07-07T00:33:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c4d4619c-8ec2-4976-9458-1402f06f1fb8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:39422","PortSpecifier":{"PortValue":39422}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c4d4619c-8ec2-4976-9458-1402f06f1fb8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a8caec.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:33:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c4d4619c-8ec2-4976-9458-1402f06f1fb8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:39422","PortSpecifier":{"PortValue":39422}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384434,"nanos":785180336},"http":{"id":"c4d4619c-8ec2-4976-9458-1402f06f1fb8","method":"POST","headers":{":authority":"e2e-shared-a-a8caec.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:33:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c4d4619c-8ec2-4976-9458-1402f06f1fb8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:33:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c4d4619c-8ec2-4976-9458-1402f06f1fb8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2e9425a8-e67e-49b7-8794-a9d0dfce4a66","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c3beb7c5-02c8-45b5-85ce-ca53bacd8b61"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/544916f30252"]}}
{"level":"debug","ts":"2026-07-07T00:33:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c4d4619c-8ec2-4976-9458-1402f06f1fb8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/544916f30252"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c3beb7c5-02c8-45b5-85ce-ca53bacd8b61"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2e9425a8-e67e-49b7-8794-a9d0dfce4a66","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"89930111d7925eb7ec61173298e0e3b21192640c8973625bde57210cd07a35a9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a8caec.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:33:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4d4619c-8ec2-4976-9458-1402f06f1fb8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:33:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4d4619c-8ec2-4976-9458-1402f06f1fb8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:33:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4d4619c-8ec2-4976-9458-1402f06f1fb8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a8caec/auth-test-model-a8caec\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:33:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c4d4619c-8ec2-4976-9458-1402f06f1fb8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:33:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c4d4619c-8ec2-4976-9458-1402f06f1fb8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:33:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c4d4619c-8ec2-4976-9458-1402f06f1fb8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:33:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c4d4619c-8ec2-4976-9458-1402f06f1fb8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:33:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c4d4619c-8ec2-4976-9458-1402f06f1fb8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:33:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7157c522-7c2a-4781-bde4-47ee762a5da2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56836","PortSpecifier":{"PortValue":56836}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7157c522-7c2a-4781-bde4-47ee762a5da2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-3ee067.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:33:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7157c522-7c2a-4781-bde4-47ee762a5da2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56836","PortSpecifier":{"PortValue":56836}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384434,"nanos":849279520},"http":{"id":"7157c522-7c2a-4781-bde4-47ee762a5da2","method":"POST","headers":{":authority":"e2e-shared-b-3ee067.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:33:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7157c522-7c2a-4781-bde4-47ee762a5da2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:33:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7157c522-7c2a-4781-bde4-47ee762a5da2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2e9425a8-e67e-49b7-8794-a9d0dfce4a66","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c3beb7c5-02c8-45b5-85ce-ca53bacd8b61"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/544916f30252"]}}
{"level":"debug","ts":"2026-07-07T00:33:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7157c522-7c2a-4781-bde4-47ee762a5da2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/544916f30252"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c3beb7c5-02c8-45b5-85ce-ca53bacd8b61"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2e9425a8-e67e-49b7-8794-a9d0dfce4a66","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"99e6a9db3c4e960919e9e307f2a4053ca26445b6de28170f37f2d70aaaf29d77"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3ee067.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:33:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7157c522-7c2a-4781-bde4-47ee762a5da2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:33:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7157c522-7c2a-4781-bde4-47ee762a5da2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:33:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7157c522-7c2a-4781-bde4-47ee762a5da2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3ee067/auth-test-model-3ee067\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:33:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7157c522-7c2a-4781-bde4-47ee762a5da2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:33:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7157c522-7c2a-4781-bde4-47ee762a5da2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:33:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7157c522-7c2a-4781-bde4-47ee762a5da2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T00:33:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7157c522-7c2a-4781-bde4-47ee762a5da2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:33:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7157c522-7c2a-4781-bde4-47ee762a5da2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:33:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"68d258c5-a2b7-4ff4-9d93-6516af881dc6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:39424","PortSpecifier":{"PortValue":39424}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"68d258c5-a2b7-4ff4-9d93-6516af881dc6","method":"GET","path":"/maas-api/v1/api-keys/57b49ad8-af59-4c31-aa29-1cb7782770b2","host":"e2e-shared-a-a8caec.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:33:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"68d258c5-a2b7-4ff4-9d93-6516af881dc6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:39424","PortSpecifier":{"PortValue":39424}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384434,"nanos":936495521},"http":{"id":"68d258c5-a2b7-4ff4-9d93-6516af881dc6","method":"GET","headers":{":authority":"e2e-shared-a-a8caec.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/57b49ad8-af59-4c31-aa29-1cb7782770b2",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:33:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"68d258c5-a2b7-4ff4-9d93-6516af881dc6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:33:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"68d258c5-a2b7-4ff4-9d93-6516af881dc6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2e9425a8-e67e-49b7-8794-a9d0dfce4a66","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c3beb7c5-02c8-45b5-85ce-ca53bacd8b61"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/544916f30252"]}}
{"level":"debug","ts":"2026-07-07T00:33:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"68d258c5-a2b7-4ff4-9d93-6516af881dc6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/544916f30252"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c3beb7c5-02c8-45b5-85ce-ca53bacd8b61"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2e9425a8-e67e-49b7-8794-a9d0dfce4a66","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"89930111d7925eb7ec61173298e0e3b21192640c8973625bde57210cd07a35a9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a8caec.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/57b49ad8-af59-4c31-aa29-1cb7782770b2",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:33:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"68d258c5-a2b7-4ff4-9d93-6516af881dc6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:33:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"68d258c5-a2b7-4ff4-9d93-6516af881dc6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:33:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"68d258c5-a2b7-4ff4-9d93-6516af881dc6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a8caec/auth-test-model-a8caec\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:33:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"68d258c5-a2b7-4ff4-9d93-6516af881dc6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:33:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"68d258c5-a2b7-4ff4-9d93-6516af881dc6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:33:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"68d258c5-a2b7-4ff4-9d93-6516af881dc6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:33:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"68d258c5-a2b7-4ff4-9d93-6516af881dc6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:33:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"68d258c5-a2b7-4ff4-9d93-6516af881dc6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:33:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"77dcea35-bf2a-4c0a-a847-3c4dcda4fff4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56844","PortSpecifier":{"PortValue":56844}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"77dcea35-bf2a-4c0a-a847-3c4dcda4fff4","method":"GET","path":"/maas-api/v1/api-keys/3fc23002-83c5-4f61-97f7-ff2a5bb52eff","host":"e2e-shared-b-3ee067.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:33:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"77dcea35-bf2a-4c0a-a847-3c4dcda4fff4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56844","PortSpecifier":{"PortValue":56844}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384434,"nanos":970968188},"http":{"id":"77dcea35-bf2a-4c0a-a847-3c4dcda4fff4","method":"GET","headers":{":authority":"e2e-shared-b-3ee067.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/3fc23002-83c5-4f61-97f7-ff2a5bb52eff",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:33:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"77dcea35-bf2a-4c0a-a847-3c4dcda4fff4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:33:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"77dcea35-bf2a-4c0a-a847-3c4dcda4fff4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2e9425a8-e67e-49b7-8794-a9d0dfce4a66","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c3beb7c5-02c8-45b5-85ce-ca53bacd8b61"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/544916f30252"]}}
{"level":"debug","ts":"2026-07-07T00:33:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"77dcea35-bf2a-4c0a-a847-3c4dcda4fff4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/544916f30252"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c3beb7c5-02c8-45b5-85ce-ca53bacd8b61"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2e9425a8-e67e-49b7-8794-a9d0dfce4a66","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"99e6a9db3c4e960919e9e307f2a4053ca26445b6de28170f37f2d70aaaf29d77"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3ee067.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/3fc23002-83c5-4f61-97f7-ff2a5bb52eff",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:33:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77dcea35-bf2a-4c0a-a847-3c4dcda4fff4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:33:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77dcea35-bf2a-4c0a-a847-3c4dcda4fff4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:33:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77dcea35-bf2a-4c0a-a847-3c4dcda4fff4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3ee067/auth-test-model-3ee067\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:33:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"77dcea35-bf2a-4c0a-a847-3c4dcda4fff4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:33:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"77dcea35-bf2a-4c0a-a847-3c4dcda4fff4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:33:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"77dcea35-bf2a-4c0a-a847-3c4dcda4fff4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:33:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"77dcea35-bf2a-4c0a-a847-3c4dcda4fff4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:33:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"77dcea35-bf2a-4c0a-a847-3c4dcda4fff4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:34:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"494dbbac-abcd-4232-bb2e-f66fc3607f17","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:39998","PortSpecifier":{"PortValue":39998}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"494dbbac-abcd-4232-bb2e-f66fc3607f17","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a8caec.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:34:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"494dbbac-abcd-4232-bb2e-f66fc3607f17","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:39998","PortSpecifier":{"PortValue":39998}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384450,"nanos":156176397},"http":{"id":"494dbbac-abcd-4232-bb2e-f66fc3607f17","method":"POST","headers":{":authority":"e2e-shared-a-a8caec.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:34:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"494dbbac-abcd-4232-bb2e-f66fc3607f17","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:34:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"494dbbac-abcd-4232-bb2e-f66fc3607f17","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2e9425a8-e67e-49b7-8794-a9d0dfce4a66","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c3beb7c5-02c8-45b5-85ce-ca53bacd8b61"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/544916f30252"]}}
{"level":"debug","ts":"2026-07-07T00:34:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"494dbbac-abcd-4232-bb2e-f66fc3607f17","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/544916f30252"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c3beb7c5-02c8-45b5-85ce-ca53bacd8b61"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2e9425a8-e67e-49b7-8794-a9d0dfce4a66","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"89930111d7925eb7ec61173298e0e3b21192640c8973625bde57210cd07a35a9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a8caec.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:34:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"494dbbac-abcd-4232-bb2e-f66fc3607f17","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"494dbbac-abcd-4232-bb2e-f66fc3607f17","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"494dbbac-abcd-4232-bb2e-f66fc3607f17","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a8caec/auth-test-model-a8caec\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"494dbbac-abcd-4232-bb2e-f66fc3607f17","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:34:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"494dbbac-abcd-4232-bb2e-f66fc3607f17","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:34:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"494dbbac-abcd-4232-bb2e-f66fc3607f17","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:34:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"494dbbac-abcd-4232-bb2e-f66fc3607f17","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:34:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"494dbbac-abcd-4232-bb2e-f66fc3607f17","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:34:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"66dae25c-b316-48b9-be2e-75a54389ba66","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:33152","PortSpecifier":{"PortValue":33152}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"66dae25c-b316-48b9-be2e-75a54389ba66","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-3ee067.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:34:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"66dae25c-b316-48b9-be2e-75a54389ba66","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:33152","PortSpecifier":{"PortValue":33152}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384450,"nanos":193257291},"http":{"id":"66dae25c-b316-48b9-be2e-75a54389ba66","method":"POST","headers":{":authority":"e2e-shared-b-3ee067.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:34:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"66dae25c-b316-48b9-be2e-75a54389ba66","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:34:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"66dae25c-b316-48b9-be2e-75a54389ba66","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2e9425a8-e67e-49b7-8794-a9d0dfce4a66","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c3beb7c5-02c8-45b5-85ce-ca53bacd8b61"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/544916f30252"]}}
{"level":"debug","ts":"2026-07-07T00:34:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"66dae25c-b316-48b9-be2e-75a54389ba66","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/544916f30252"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c3beb7c5-02c8-45b5-85ce-ca53bacd8b61"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2e9425a8-e67e-49b7-8794-a9d0dfce4a66","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"99e6a9db3c4e960919e9e307f2a4053ca26445b6de28170f37f2d70aaaf29d77"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3ee067.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:34:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66dae25c-b316-48b9-be2e-75a54389ba66","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66dae25c-b316-48b9-be2e-75a54389ba66","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66dae25c-b316-48b9-be2e-75a54389ba66","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3ee067/auth-test-model-3ee067\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"66dae25c-b316-48b9-be2e-75a54389ba66","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:34:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"66dae25c-b316-48b9-be2e-75a54389ba66","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:34:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"66dae25c-b316-48b9-be2e-75a54389ba66","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:34:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"66dae25c-b316-48b9-be2e-75a54389ba66","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:34:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"66dae25c-b316-48b9-be2e-75a54389ba66","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:34:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8b7784a1-6930-484a-ae3c-b86048e48544","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:40012","PortSpecifier":{"PortValue":40012}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8b7784a1-6930-484a-ae3c-b86048e48544","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-a8caec.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:34:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8b7784a1-6930-484a-ae3c-b86048e48544","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:40012","PortSpecifier":{"PortValue":40012}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384450,"nanos":237303878},"http":{"id":"8b7784a1-6930-484a-ae3c-b86048e48544","method":"GET","headers":{":authority":"e2e-shared-a-a8caec.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:34:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8b7784a1-6930-484a-ae3c-b86048e48544","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-bIAJab3PlzWIsMLh_iT6oqEy5QCoExIlwt6SbfRPqRGmPVJUK0lYvuZUXixb"}
{"level":"debug","ts":"2026-07-07T00:34:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8b7784a1-6930-484a-ae3c-b86048e48544","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a8caec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-bIAJab3PlzWIsMLh_iT6oqEy5QCoExIlwt6SbfRPqRGmPVJUK0lYvuZUXixb\"}"}
{"level":"debug","ts":"2026-07-07T00:34:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8b7784a1-6930-484a-ae3c-b86048e48544","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a8caec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6e56aad1-18b7-4a10-acaa-49cd0d06c3c9","keyName":"e2e-auth-iso-a-4ea430","subscription":"e2e-auth-iso-18233d","tenant":"e2e-shared-a-a8caec","userId":"6e56aad1-18b7-4a10-acaa-49cd0d06c3c9","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:34:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8b7784a1-6930-484a-ae3c-b86048e48544","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:34:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b7784a1-6930-484a-ae3c-b86048e48544","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b7784a1-6930-484a-ae3c-b86048e48544","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b7784a1-6930-484a-ae3c-b86048e48544","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a8caec/auth-test-model-a8caec\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b7784a1-6930-484a-ae3c-b86048e48544","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:34:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8b7784a1-6930-484a-ae3c-b86048e48544","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T00:34:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b7784a1-6930-484a-ae3c-b86048e48544","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-18233d"}
{"level":"debug","ts":"2026-07-07T00:34:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b7784a1-6930-484a-ae3c-b86048e48544","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:34:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8b7784a1-6930-484a-ae3c-b86048e48544","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:34:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8b7784a1-6930-484a-ae3c-b86048e48544","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:34:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dd9653ee-41bb-41f0-a6b3-a49bb6bc5bb3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:46790","PortSpecifier":{"PortValue":46790}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dd9653ee-41bb-41f0-a6b3-a49bb6bc5bb3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a8caec.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:34:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dd9653ee-41bb-41f0-a6b3-a49bb6bc5bb3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:46790","PortSpecifier":{"PortValue":46790}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384465,"nanos":423829195},"http":{"id":"dd9653ee-41bb-41f0-a6b3-a49bb6bc5bb3","method":"POST","headers":{":authority":"e2e-shared-a-a8caec.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:34:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"dd9653ee-41bb-41f0-a6b3-a49bb6bc5bb3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:34:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dd9653ee-41bb-41f0-a6b3-a49bb6bc5bb3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2e9425a8-e67e-49b7-8794-a9d0dfce4a66","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c3beb7c5-02c8-45b5-85ce-ca53bacd8b61"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/544916f30252"]}}
{"level":"debug","ts":"2026-07-07T00:34:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dd9653ee-41bb-41f0-a6b3-a49bb6bc5bb3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/544916f30252"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c3beb7c5-02c8-45b5-85ce-ca53bacd8b61"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2e9425a8-e67e-49b7-8794-a9d0dfce4a66","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"89930111d7925eb7ec61173298e0e3b21192640c8973625bde57210cd07a35a9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a8caec.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:34:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd9653ee-41bb-41f0-a6b3-a49bb6bc5bb3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd9653ee-41bb-41f0-a6b3-a49bb6bc5bb3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd9653ee-41bb-41f0-a6b3-a49bb6bc5bb3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a8caec/auth-test-model-a8caec\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dd9653ee-41bb-41f0-a6b3-a49bb6bc5bb3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:34:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dd9653ee-41bb-41f0-a6b3-a49bb6bc5bb3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:34:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dd9653ee-41bb-41f0-a6b3-a49bb6bc5bb3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T00:34:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dd9653ee-41bb-41f0-a6b3-a49bb6bc5bb3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:34:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dd9653ee-41bb-41f0-a6b3-a49bb6bc5bb3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:34:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0d608409-4537-4425-8e7f-ff4403088779","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:40890","PortSpecifier":{"PortValue":40890}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0d608409-4537-4425-8e7f-ff4403088779","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-3ee067.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:34:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0d608409-4537-4425-8e7f-ff4403088779","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:40890","PortSpecifier":{"PortValue":40890}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384465,"nanos":461784357},"http":{"id":"0d608409-4537-4425-8e7f-ff4403088779","method":"POST","headers":{":authority":"e2e-shared-b-3ee067.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:34:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0d608409-4537-4425-8e7f-ff4403088779","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:34:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0d608409-4537-4425-8e7f-ff4403088779","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2e9425a8-e67e-49b7-8794-a9d0dfce4a66","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c3beb7c5-02c8-45b5-85ce-ca53bacd8b61"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/544916f30252"]}}
{"level":"debug","ts":"2026-07-07T00:34:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0d608409-4537-4425-8e7f-ff4403088779","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/544916f30252"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c3beb7c5-02c8-45b5-85ce-ca53bacd8b61"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2e9425a8-e67e-49b7-8794-a9d0dfce4a66","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"99e6a9db3c4e960919e9e307f2a4053ca26445b6de28170f37f2d70aaaf29d77"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3ee067.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:34:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d608409-4537-4425-8e7f-ff4403088779","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d608409-4537-4425-8e7f-ff4403088779","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d608409-4537-4425-8e7f-ff4403088779","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3ee067/auth-test-model-3ee067\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0d608409-4537-4425-8e7f-ff4403088779","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:34:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d608409-4537-4425-8e7f-ff4403088779","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:34:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d608409-4537-4425-8e7f-ff4403088779","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:34:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0d608409-4537-4425-8e7f-ff4403088779","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:34:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0d608409-4537-4425-8e7f-ff4403088779","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:34:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7dfa7077-80bb-4570-9dd4-6ba15baff877","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:40904","PortSpecifier":{"PortValue":40904}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7dfa7077-80bb-4570-9dd4-6ba15baff877","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-3ee067.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:34:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7dfa7077-80bb-4570-9dd4-6ba15baff877","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:40904","PortSpecifier":{"PortValue":40904}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384465,"nanos":508406519},"http":{"id":"7dfa7077-80bb-4570-9dd4-6ba15baff877","method":"GET","headers":{":authority":"e2e-shared-b-3ee067.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:34:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7dfa7077-80bb-4570-9dd4-6ba15baff877","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-lNf2ZMFIuzpBkY23_iQAgRXIf5KVAFqYROdG58zapHWiV0k7J1JTjzshtZJi"}
{"level":"debug","ts":"2026-07-07T00:34:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7dfa7077-80bb-4570-9dd4-6ba15baff877","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-3ee067.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-lNf2ZMFIuzpBkY23_iQAgRXIf5KVAFqYROdG58zapHWiV0k7J1JTjzshtZJi\"}"}
{"level":"debug","ts":"2026-07-07T00:34:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7dfa7077-80bb-4570-9dd4-6ba15baff877","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-3ee067.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-07T00:34:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7dfa7077-80bb-4570-9dd4-6ba15baff877","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"99e6a9db3c4e960919e9e307f2a4053ca26445b6de28170f37f2d70aaaf29d77"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3ee067.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:34:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7dfa7077-80bb-4570-9dd4-6ba15baff877","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"7dfa7077-80bb-4570-9dd4-6ba15baff877","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-07T00:34:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7dfa7077-80bb-4570-9dd4-6ba15baff877","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-07T00:34:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7dfa7077-80bb-4570-9dd4-6ba15baff877","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-07T00:34:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4f416b54-7eaa-4973-9839-b38cd0a26b90","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:35390","PortSpecifier":{"PortValue":35390}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4f416b54-7eaa-4973-9839-b38cd0a26b90","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a8caec.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:34:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4f416b54-7eaa-4973-9839-b38cd0a26b90","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:35390","PortSpecifier":{"PortValue":35390}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384480,"nanos":677915243},"http":{"id":"4f416b54-7eaa-4973-9839-b38cd0a26b90","method":"POST","headers":{":authority":"e2e-shared-a-a8caec.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:34:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4f416b54-7eaa-4973-9839-b38cd0a26b90","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:34:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4f416b54-7eaa-4973-9839-b38cd0a26b90","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2e9425a8-e67e-49b7-8794-a9d0dfce4a66","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c3beb7c5-02c8-45b5-85ce-ca53bacd8b61"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/544916f30252"]}}
{"level":"debug","ts":"2026-07-07T00:34:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4f416b54-7eaa-4973-9839-b38cd0a26b90","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/544916f30252"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c3beb7c5-02c8-45b5-85ce-ca53bacd8b61"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2e9425a8-e67e-49b7-8794-a9d0dfce4a66","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"89930111d7925eb7ec61173298e0e3b21192640c8973625bde57210cd07a35a9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a8caec.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:34:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f416b54-7eaa-4973-9839-b38cd0a26b90","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f416b54-7eaa-4973-9839-b38cd0a26b90","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f416b54-7eaa-4973-9839-b38cd0a26b90","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a8caec/auth-test-model-a8caec\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4f416b54-7eaa-4973-9839-b38cd0a26b90","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:34:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f416b54-7eaa-4973-9839-b38cd0a26b90","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:34:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f416b54-7eaa-4973-9839-b38cd0a26b90","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:34:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4f416b54-7eaa-4973-9839-b38cd0a26b90","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:34:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4f416b54-7eaa-4973-9839-b38cd0a26b90","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:34:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6de47cb2-d99c-4611-8d0b-176f4b3b1dc2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:42462","PortSpecifier":{"PortValue":42462}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6de47cb2-d99c-4611-8d0b-176f4b3b1dc2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-3ee067.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:34:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6de47cb2-d99c-4611-8d0b-176f4b3b1dc2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:42462","PortSpecifier":{"PortValue":42462}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384480,"nanos":713597082},"http":{"id":"6de47cb2-d99c-4611-8d0b-176f4b3b1dc2","method":"POST","headers":{":authority":"e2e-shared-b-3ee067.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:34:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6de47cb2-d99c-4611-8d0b-176f4b3b1dc2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:34:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6de47cb2-d99c-4611-8d0b-176f4b3b1dc2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2e9425a8-e67e-49b7-8794-a9d0dfce4a66","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c3beb7c5-02c8-45b5-85ce-ca53bacd8b61"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/544916f30252"]}}
{"level":"debug","ts":"2026-07-07T00:34:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6de47cb2-d99c-4611-8d0b-176f4b3b1dc2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/544916f30252"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c3beb7c5-02c8-45b5-85ce-ca53bacd8b61"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2e9425a8-e67e-49b7-8794-a9d0dfce4a66","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"99e6a9db3c4e960919e9e307f2a4053ca26445b6de28170f37f2d70aaaf29d77"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3ee067.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:34:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6de47cb2-d99c-4611-8d0b-176f4b3b1dc2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6de47cb2-d99c-4611-8d0b-176f4b3b1dc2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6de47cb2-d99c-4611-8d0b-176f4b3b1dc2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3ee067/auth-test-model-3ee067\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6de47cb2-d99c-4611-8d0b-176f4b3b1dc2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:34:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6de47cb2-d99c-4611-8d0b-176f4b3b1dc2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:34:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6de47cb2-d99c-4611-8d0b-176f4b3b1dc2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:34:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6de47cb2-d99c-4611-8d0b-176f4b3b1dc2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:34:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6de47cb2-d99c-4611-8d0b-176f4b3b1dc2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:34:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fbec47ee-28cd-4054-be68-d769b24289cf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:35396","PortSpecifier":{"PortValue":35396}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fbec47ee-28cd-4054-be68-d769b24289cf","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-a8caec.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:34:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fbec47ee-28cd-4054-be68-d769b24289cf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:35396","PortSpecifier":{"PortValue":35396}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384480,"nanos":753765379},"http":{"id":"fbec47ee-28cd-4054-be68-d769b24289cf","method":"POST","headers":{":authority":"e2e-shared-a-a8caec.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:34:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fbec47ee-28cd-4054-be68-d769b24289cf","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:34:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fbec47ee-28cd-4054-be68-d769b24289cf","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2e9425a8-e67e-49b7-8794-a9d0dfce4a66","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c3beb7c5-02c8-45b5-85ce-ca53bacd8b61"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/544916f30252"]}}
{"level":"debug","ts":"2026-07-07T00:34:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fbec47ee-28cd-4054-be68-d769b24289cf","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/544916f30252"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c3beb7c5-02c8-45b5-85ce-ca53bacd8b61"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2e9425a8-e67e-49b7-8794-a9d0dfce4a66","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"89930111d7925eb7ec61173298e0e3b21192640c8973625bde57210cd07a35a9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a8caec.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:34:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fbec47ee-28cd-4054-be68-d769b24289cf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fbec47ee-28cd-4054-be68-d769b24289cf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fbec47ee-28cd-4054-be68-d769b24289cf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a8caec/auth-test-model-a8caec\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fbec47ee-28cd-4054-be68-d769b24289cf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:34:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fbec47ee-28cd-4054-be68-d769b24289cf","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:34:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fbec47ee-28cd-4054-be68-d769b24289cf","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:34:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fbec47ee-28cd-4054-be68-d769b24289cf","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:34:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fbec47ee-28cd-4054-be68-d769b24289cf","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:34:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"67ecaf79-730a-4769-a39a-2ecf322e8b85","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:42472","PortSpecifier":{"PortValue":42472}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"67ecaf79-730a-4769-a39a-2ecf322e8b85","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-3ee067.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:34:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"67ecaf79-730a-4769-a39a-2ecf322e8b85","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:42472","PortSpecifier":{"PortValue":42472}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384480,"nanos":791670025},"http":{"id":"67ecaf79-730a-4769-a39a-2ecf322e8b85","method":"POST","headers":{":authority":"e2e-shared-b-3ee067.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:34:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"67ecaf79-730a-4769-a39a-2ecf322e8b85","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:34:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"67ecaf79-730a-4769-a39a-2ecf322e8b85","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2e9425a8-e67e-49b7-8794-a9d0dfce4a66","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c3beb7c5-02c8-45b5-85ce-ca53bacd8b61"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/544916f30252"]}}
{"level":"debug","ts":"2026-07-07T00:34:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"67ecaf79-730a-4769-a39a-2ecf322e8b85","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/544916f30252"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c3beb7c5-02c8-45b5-85ce-ca53bacd8b61"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2e9425a8-e67e-49b7-8794-a9d0dfce4a66","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"99e6a9db3c4e960919e9e307f2a4053ca26445b6de28170f37f2d70aaaf29d77"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3ee067.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:34:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"67ecaf79-730a-4769-a39a-2ecf322e8b85","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"67ecaf79-730a-4769-a39a-2ecf322e8b85","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"67ecaf79-730a-4769-a39a-2ecf322e8b85","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3ee067/auth-test-model-3ee067\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"67ecaf79-730a-4769-a39a-2ecf322e8b85","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:34:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"67ecaf79-730a-4769-a39a-2ecf322e8b85","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:34:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"67ecaf79-730a-4769-a39a-2ecf322e8b85","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:34:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"67ecaf79-730a-4769-a39a-2ecf322e8b85","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:34:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"67ecaf79-730a-4769-a39a-2ecf322e8b85","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:34:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0dbda5de-5b30-4ee7-aaed-c2f3720329a3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:59212","PortSpecifier":{"PortValue":59212}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0dbda5de-5b30-4ee7-aaed-c2f3720329a3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a8caec.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:34:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0dbda5de-5b30-4ee7-aaed-c2f3720329a3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:59212","PortSpecifier":{"PortValue":59212}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384498,"nanos":76518330},"http":{"id":"0dbda5de-5b30-4ee7-aaed-c2f3720329a3","method":"POST","headers":{":authority":"e2e-shared-a-a8caec.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:34:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0dbda5de-5b30-4ee7-aaed-c2f3720329a3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:34:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0dbda5de-5b30-4ee7-aaed-c2f3720329a3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2e9425a8-e67e-49b7-8794-a9d0dfce4a66","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c3beb7c5-02c8-45b5-85ce-ca53bacd8b61"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/544916f30252"]}}
{"level":"debug","ts":"2026-07-07T00:34:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0dbda5de-5b30-4ee7-aaed-c2f3720329a3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/544916f30252"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c3beb7c5-02c8-45b5-85ce-ca53bacd8b61"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2e9425a8-e67e-49b7-8794-a9d0dfce4a66","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"89930111d7925eb7ec61173298e0e3b21192640c8973625bde57210cd07a35a9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a8caec.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:34:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0dbda5de-5b30-4ee7-aaed-c2f3720329a3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0dbda5de-5b30-4ee7-aaed-c2f3720329a3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0dbda5de-5b30-4ee7-aaed-c2f3720329a3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a8caec/auth-test-model-a8caec\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0dbda5de-5b30-4ee7-aaed-c2f3720329a3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:34:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0dbda5de-5b30-4ee7-aaed-c2f3720329a3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:34:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0dbda5de-5b30-4ee7-aaed-c2f3720329a3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:34:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0dbda5de-5b30-4ee7-aaed-c2f3720329a3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:34:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0dbda5de-5b30-4ee7-aaed-c2f3720329a3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:34:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"65e2dab9-498c-454a-b39e-9b6d4ca13843","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:39284","PortSpecifier":{"PortValue":39284}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"65e2dab9-498c-454a-b39e-9b6d4ca13843","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-3ee067.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:34:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"65e2dab9-498c-454a-b39e-9b6d4ca13843","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:39284","PortSpecifier":{"PortValue":39284}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384498,"nanos":116768576},"http":{"id":"65e2dab9-498c-454a-b39e-9b6d4ca13843","method":"POST","headers":{":authority":"e2e-shared-b-3ee067.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:34:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"65e2dab9-498c-454a-b39e-9b6d4ca13843","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:34:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"65e2dab9-498c-454a-b39e-9b6d4ca13843","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2e9425a8-e67e-49b7-8794-a9d0dfce4a66","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c3beb7c5-02c8-45b5-85ce-ca53bacd8b61"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/544916f30252"]}}
{"level":"debug","ts":"2026-07-07T00:34:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"65e2dab9-498c-454a-b39e-9b6d4ca13843","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/544916f30252"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c3beb7c5-02c8-45b5-85ce-ca53bacd8b61"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2e9425a8-e67e-49b7-8794-a9d0dfce4a66","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"99e6a9db3c4e960919e9e307f2a4053ca26445b6de28170f37f2d70aaaf29d77"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3ee067.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:34:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65e2dab9-498c-454a-b39e-9b6d4ca13843","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65e2dab9-498c-454a-b39e-9b6d4ca13843","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65e2dab9-498c-454a-b39e-9b6d4ca13843","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3ee067/auth-test-model-3ee067\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"65e2dab9-498c-454a-b39e-9b6d4ca13843","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:34:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"65e2dab9-498c-454a-b39e-9b6d4ca13843","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:34:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"65e2dab9-498c-454a-b39e-9b6d4ca13843","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:34:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"65e2dab9-498c-454a-b39e-9b6d4ca13843","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:34:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"65e2dab9-498c-454a-b39e-9b6d4ca13843","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:34:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d3f83fc8-9c23-4ad4-8cb1-6db922c4f330","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:39300","PortSpecifier":{"PortValue":39300}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d3f83fc8-9c23-4ad4-8cb1-6db922c4f330","method":"GET","path":"/maas-api/v1/api-keys/63e7ab1b-b17d-4b85-ad31-2faae6003e99","host":"e2e-shared-b-3ee067.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:34:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d3f83fc8-9c23-4ad4-8cb1-6db922c4f330","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:39300","PortSpecifier":{"PortValue":39300}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384498,"nanos":152509260},"http":{"id":"d3f83fc8-9c23-4ad4-8cb1-6db922c4f330","method":"GET","headers":{":authority":"e2e-shared-b-3ee067.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/63e7ab1b-b17d-4b85-ad31-2faae6003e99",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:34:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d3f83fc8-9c23-4ad4-8cb1-6db922c4f330","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:34:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d3f83fc8-9c23-4ad4-8cb1-6db922c4f330","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2e9425a8-e67e-49b7-8794-a9d0dfce4a66","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c3beb7c5-02c8-45b5-85ce-ca53bacd8b61"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/544916f30252"]}}
{"level":"debug","ts":"2026-07-07T00:34:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d3f83fc8-9c23-4ad4-8cb1-6db922c4f330","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/544916f30252"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c3beb7c5-02c8-45b5-85ce-ca53bacd8b61"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2e9425a8-e67e-49b7-8794-a9d0dfce4a66","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"99e6a9db3c4e960919e9e307f2a4053ca26445b6de28170f37f2d70aaaf29d77"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3ee067.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/63e7ab1b-b17d-4b85-ad31-2faae6003e99",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:34:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d3f83fc8-9c23-4ad4-8cb1-6db922c4f330","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d3f83fc8-9c23-4ad4-8cb1-6db922c4f330","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d3f83fc8-9c23-4ad4-8cb1-6db922c4f330","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3ee067/auth-test-model-3ee067\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d3f83fc8-9c23-4ad4-8cb1-6db922c4f330","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:34:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d3f83fc8-9c23-4ad4-8cb1-6db922c4f330","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:34:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d3f83fc8-9c23-4ad4-8cb1-6db922c4f330","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:34:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d3f83fc8-9c23-4ad4-8cb1-6db922c4f330","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:34:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d3f83fc8-9c23-4ad4-8cb1-6db922c4f330","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:34:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"673a749f-e1bb-441b-947f-56b3d298b23a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:59218","PortSpecifier":{"PortValue":59218}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"673a749f-e1bb-441b-947f-56b3d298b23a","method":"GET","path":"/maas-api/v1/api-keys/63e7ab1b-b17d-4b85-ad31-2faae6003e99","host":"e2e-shared-a-a8caec.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:34:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"673a749f-e1bb-441b-947f-56b3d298b23a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:59218","PortSpecifier":{"PortValue":59218}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384498,"nanos":186160629},"http":{"id":"673a749f-e1bb-441b-947f-56b3d298b23a","method":"GET","headers":{":authority":"e2e-shared-a-a8caec.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/63e7ab1b-b17d-4b85-ad31-2faae6003e99",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:34:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"673a749f-e1bb-441b-947f-56b3d298b23a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:34:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"673a749f-e1bb-441b-947f-56b3d298b23a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2e9425a8-e67e-49b7-8794-a9d0dfce4a66","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c3beb7c5-02c8-45b5-85ce-ca53bacd8b61"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/544916f30252"]}}
{"level":"debug","ts":"2026-07-07T00:34:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"673a749f-e1bb-441b-947f-56b3d298b23a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/544916f30252"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c3beb7c5-02c8-45b5-85ce-ca53bacd8b61"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2e9425a8-e67e-49b7-8794-a9d0dfce4a66","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"89930111d7925eb7ec61173298e0e3b21192640c8973625bde57210cd07a35a9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a8caec.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/63e7ab1b-b17d-4b85-ad31-2faae6003e99",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:34:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"673a749f-e1bb-441b-947f-56b3d298b23a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"673a749f-e1bb-441b-947f-56b3d298b23a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"673a749f-e1bb-441b-947f-56b3d298b23a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a8caec/auth-test-model-a8caec\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:34:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"673a749f-e1bb-441b-947f-56b3d298b23a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:34:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"673a749f-e1bb-441b-947f-56b3d298b23a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:34:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"673a749f-e1bb-441b-947f-56b3d298b23a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:34:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"673a749f-e1bb-441b-947f-56b3d298b23a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:34:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"673a749f-e1bb-441b-947f-56b3d298b23a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:35:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"985ccce3-2f17-4fb9-915a-4b7fbfaf2195","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:55418","PortSpecifier":{"PortValue":55418}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"985ccce3-2f17-4fb9-915a-4b7fbfaf2195","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a8caec.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:35:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"985ccce3-2f17-4fb9-915a-4b7fbfaf2195","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:55418","PortSpecifier":{"PortValue":55418}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384515,"nanos":441987874},"http":{"id":"985ccce3-2f17-4fb9-915a-4b7fbfaf2195","method":"POST","headers":{":authority":"e2e-shared-a-a8caec.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:35:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"985ccce3-2f17-4fb9-915a-4b7fbfaf2195","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:35:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"985ccce3-2f17-4fb9-915a-4b7fbfaf2195","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2e9425a8-e67e-49b7-8794-a9d0dfce4a66","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c3beb7c5-02c8-45b5-85ce-ca53bacd8b61"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/544916f30252"]}}
{"level":"debug","ts":"2026-07-07T00:35:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"985ccce3-2f17-4fb9-915a-4b7fbfaf2195","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/544916f30252"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c3beb7c5-02c8-45b5-85ce-ca53bacd8b61"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2e9425a8-e67e-49b7-8794-a9d0dfce4a66","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"89930111d7925eb7ec61173298e0e3b21192640c8973625bde57210cd07a35a9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a8caec.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:35:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"985ccce3-2f17-4fb9-915a-4b7fbfaf2195","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:35:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"985ccce3-2f17-4fb9-915a-4b7fbfaf2195","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:35:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"985ccce3-2f17-4fb9-915a-4b7fbfaf2195","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a8caec/auth-test-model-a8caec\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:35:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"985ccce3-2f17-4fb9-915a-4b7fbfaf2195","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:35:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"985ccce3-2f17-4fb9-915a-4b7fbfaf2195","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:35:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"985ccce3-2f17-4fb9-915a-4b7fbfaf2195","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:35:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"985ccce3-2f17-4fb9-915a-4b7fbfaf2195","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:35:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"985ccce3-2f17-4fb9-915a-4b7fbfaf2195","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:35:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"75194190-b389-4642-9de6-2d532e73101f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:48436","PortSpecifier":{"PortValue":48436}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"75194190-b389-4642-9de6-2d532e73101f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-3ee067.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:35:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"75194190-b389-4642-9de6-2d532e73101f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:48436","PortSpecifier":{"PortValue":48436}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384515,"nanos":481346333},"http":{"id":"75194190-b389-4642-9de6-2d532e73101f","method":"POST","headers":{":authority":"e2e-shared-b-3ee067.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:35:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"75194190-b389-4642-9de6-2d532e73101f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:35:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"75194190-b389-4642-9de6-2d532e73101f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2e9425a8-e67e-49b7-8794-a9d0dfce4a66","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c3beb7c5-02c8-45b5-85ce-ca53bacd8b61"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/544916f30252"]}}
{"level":"debug","ts":"2026-07-07T00:35:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"75194190-b389-4642-9de6-2d532e73101f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/544916f30252"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c3beb7c5-02c8-45b5-85ce-ca53bacd8b61"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2e9425a8-e67e-49b7-8794-a9d0dfce4a66","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"99e6a9db3c4e960919e9e307f2a4053ca26445b6de28170f37f2d70aaaf29d77"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3ee067.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:35:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75194190-b389-4642-9de6-2d532e73101f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:35:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75194190-b389-4642-9de6-2d532e73101f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:35:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75194190-b389-4642-9de6-2d532e73101f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3ee067/auth-test-model-3ee067\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:35:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"75194190-b389-4642-9de6-2d532e73101f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:35:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"75194190-b389-4642-9de6-2d532e73101f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:35:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"75194190-b389-4642-9de6-2d532e73101f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:35:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"75194190-b389-4642-9de6-2d532e73101f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:35:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"75194190-b389-4642-9de6-2d532e73101f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:35:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4e67a3f8-0800-4695-81f4-0cfd7697fc23","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:55426","PortSpecifier":{"PortValue":55426}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4e67a3f8-0800-4695-81f4-0cfd7697fc23","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-a8caec.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:35:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4e67a3f8-0800-4695-81f4-0cfd7697fc23","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:55426","PortSpecifier":{"PortValue":55426}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384515,"nanos":521139378},"http":{"id":"4e67a3f8-0800-4695-81f4-0cfd7697fc23","method":"POST","headers":{":authority":"e2e-shared-a-a8caec.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:35:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4e67a3f8-0800-4695-81f4-0cfd7697fc23","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Yr1m3hicBUGzPJL8_AvwP85U03vbl6bubS31Un9cZq5KjaFblauqCYSW6dIQ"}
{"level":"debug","ts":"2026-07-07T00:35:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4e67a3f8-0800-4695-81f4-0cfd7697fc23","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a8caec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Yr1m3hicBUGzPJL8_AvwP85U03vbl6bubS31Un9cZq5KjaFblauqCYSW6dIQ\"}"}
{"level":"debug","ts":"2026-07-07T00:35:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4e67a3f8-0800-4695-81f4-0cfd7697fc23","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a8caec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f1aefbe7-c809-44b8-be1e-57f7da574ef1","keyName":"e2e-auth-iso-a-1ddce3","subscription":"e2e-auth-iso-c20025","tenant":"e2e-shared-a-a8caec","userId":"f1aefbe7-c809-44b8-be1e-57f7da574ef1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:35:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4e67a3f8-0800-4695-81f4-0cfd7697fc23","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:35:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e67a3f8-0800-4695-81f4-0cfd7697fc23","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:35:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e67a3f8-0800-4695-81f4-0cfd7697fc23","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:35:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e67a3f8-0800-4695-81f4-0cfd7697fc23","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a8caec/auth-test-model-a8caec\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:35:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4e67a3f8-0800-4695-81f4-0cfd7697fc23","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T00:35:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e67a3f8-0800-4695-81f4-0cfd7697fc23","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:35:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e67a3f8-0800-4695-81f4-0cfd7697fc23","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:35:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e67a3f8-0800-4695-81f4-0cfd7697fc23","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-c20025"}
{"level":"info","ts":"2026-07-07T00:35:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4e67a3f8-0800-4695-81f4-0cfd7697fc23","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:35:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4e67a3f8-0800-4695-81f4-0cfd7697fc23","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e480060e369774a56f04be18236c400b81feee7595f2ab740505e764815de779"}
{"level":"info","ts":"2026-07-07T00:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/50850e069b01b8c7cfcc85a8a8c27d967b059e5808de4753002b523f98b429ca"}
{"level":"info","ts":"2026-07-07T00:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8c6b59faf7382ac26dbe37aadfb4cd348ace14921da4776d399164aa925b42b1"}
{"level":"info","ts":"2026-07-07T00:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/875381f37f2f69658e6b366fd8ae1e3f15d1bc7061441e14f205c9c30a930edf"}
{"level":"info","ts":"2026-07-07T00:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ac521800724d233c33040337ba49b81d23485b95283661c6917748bc30208b17"}
{"level":"info","ts":"2026-07-07T00:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/da42e68e6471d53969dc13f3cb172960da85c1748bca6ba1c59e6e1905c9070d"}
{"level":"info","ts":"2026-07-07T00:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/145a6a13e7b43c80600ae053ab96355b31a3a79d8783e6f9fd4ca046a35f9f2d"}
{"level":"info","ts":"2026-07-07T00:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/60392fffeee2774564c40448c9b62d3b06f08e9e4c80ee9fc4a231a6414d0236"}
{"level":"debug","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40d6999d9c07e28ff8c443cabd38b167e2d30ce54dfaac4394b8baff93a918af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:35:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:35:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40d6999d9c07e28ff8c443cabd38b167e2d30ce54dfaac4394b8baff93a918af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40d6999d9c07e28ff8c443cabd38b167e2d30ce54dfaac4394b8baff93a918af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40d6999d9c07e28ff8c443cabd38b167e2d30ce54dfaac4394b8baff93a918af","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40d6999d9c07e28ff8c443cabd38b167e2d30ce54dfaac4394b8baff93a918af"}
{"level":"debug","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40d6999d9c07e28ff8c443cabd38b167e2d30ce54dfaac4394b8baff93a918af","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40d6999d9c07e28ff8c443cabd38b167e2d30ce54dfaac4394b8baff93a918af"}
{"level":"debug","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40d6999d9c07e28ff8c443cabd38b167e2d30ce54dfaac4394b8baff93a918af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:35:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:35:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40d6999d9c07e28ff8c443cabd38b167e2d30ce54dfaac4394b8baff93a918af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40d6999d9c07e28ff8c443cabd38b167e2d30ce54dfaac4394b8baff93a918af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40d6999d9c07e28ff8c443cabd38b167e2d30ce54dfaac4394b8baff93a918af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:35:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:35:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40d6999d9c07e28ff8c443cabd38b167e2d30ce54dfaac4394b8baff93a918af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40d6999d9c07e28ff8c443cabd38b167e2d30ce54dfaac4394b8baff93a918af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40d6999d9c07e28ff8c443cabd38b167e2d30ce54dfaac4394b8baff93a918af","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40d6999d9c07e28ff8c443cabd38b167e2d30ce54dfaac4394b8baff93a918af"}
{"level":"debug","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40d6999d9c07e28ff8c443cabd38b167e2d30ce54dfaac4394b8baff93a918af","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40d6999d9c07e28ff8c443cabd38b167e2d30ce54dfaac4394b8baff93a918af"}
{"level":"debug","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40d6999d9c07e28ff8c443cabd38b167e2d30ce54dfaac4394b8baff93a918af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:35:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:35:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40d6999d9c07e28ff8c443cabd38b167e2d30ce54dfaac4394b8baff93a918af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40d6999d9c07e28ff8c443cabd38b167e2d30ce54dfaac4394b8baff93a918af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40d6999d9c07e28ff8c443cabd38b167e2d30ce54dfaac4394b8baff93a918af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:35:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:35:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40d6999d9c07e28ff8c443cabd38b167e2d30ce54dfaac4394b8baff93a918af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40d6999d9c07e28ff8c443cabd38b167e2d30ce54dfaac4394b8baff93a918af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40d6999d9c07e28ff8c443cabd38b167e2d30ce54dfaac4394b8baff93a918af","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40d6999d9c07e28ff8c443cabd38b167e2d30ce54dfaac4394b8baff93a918af"}
{"level":"debug","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40d6999d9c07e28ff8c443cabd38b167e2d30ce54dfaac4394b8baff93a918af","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40d6999d9c07e28ff8c443cabd38b167e2d30ce54dfaac4394b8baff93a918af"}
{"level":"debug","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40d6999d9c07e28ff8c443cabd38b167e2d30ce54dfaac4394b8baff93a918af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:35:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:35:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40d6999d9c07e28ff8c443cabd38b167e2d30ce54dfaac4394b8baff93a918af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40d6999d9c07e28ff8c443cabd38b167e2d30ce54dfaac4394b8baff93a918af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40d6999d9c07e28ff8c443cabd38b167e2d30ce54dfaac4394b8baff93a918af","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40d6999d9c07e28ff8c443cabd38b167e2d30ce54dfaac4394b8baff93a918af"}
{"level":"debug","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ced73bbd155921008800c93a7c56dbc1694be05a6c83b9ae2f89722f3ebdbe58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:35:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:35:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ced73bbd155921008800c93a7c56dbc1694be05a6c83b9ae2f89722f3ebdbe58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ced73bbd155921008800c93a7c56dbc1694be05a6c83b9ae2f89722f3ebdbe58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ced73bbd155921008800c93a7c56dbc1694be05a6c83b9ae2f89722f3ebdbe58","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ced73bbd155921008800c93a7c56dbc1694be05a6c83b9ae2f89722f3ebdbe58"}
{"level":"debug","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ced73bbd155921008800c93a7c56dbc1694be05a6c83b9ae2f89722f3ebdbe58","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ced73bbd155921008800c93a7c56dbc1694be05a6c83b9ae2f89722f3ebdbe58"}
{"level":"debug","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ced73bbd155921008800c93a7c56dbc1694be05a6c83b9ae2f89722f3ebdbe58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:35:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:35:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ced73bbd155921008800c93a7c56dbc1694be05a6c83b9ae2f89722f3ebdbe58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ced73bbd155921008800c93a7c56dbc1694be05a6c83b9ae2f89722f3ebdbe58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ced73bbd155921008800c93a7c56dbc1694be05a6c83b9ae2f89722f3ebdbe58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:35:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:35:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ced73bbd155921008800c93a7c56dbc1694be05a6c83b9ae2f89722f3ebdbe58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"635c2b37a6a31185c42b85f6d3d474913ec70696fca48836cd6353f2d80def56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:35:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:35:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ced73bbd155921008800c93a7c56dbc1694be05a6c83b9ae2f89722f3ebdbe58"}
{"level":"info","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"635c2b37a6a31185c42b85f6d3d474913ec70696fca48836cd6353f2d80def56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ced73bbd155921008800c93a7c56dbc1694be05a6c83b9ae2f89722f3ebdbe58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:35:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:35:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ced73bbd155921008800c93a7c56dbc1694be05a6c83b9ae2f89722f3ebdbe58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ced73bbd155921008800c93a7c56dbc1694be05a6c83b9ae2f89722f3ebdbe58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"635c2b37a6a31185c42b85f6d3d474913ec70696fca48836cd6353f2d80def56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:35:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:35:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/635c2b37a6a31185c42b85f6d3d474913ec70696fca48836cd6353f2d80def56"}
{"level":"info","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"635c2b37a6a31185c42b85f6d3d474913ec70696fca48836cd6353f2d80def56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ced73bbd155921008800c93a7c56dbc1694be05a6c83b9ae2f89722f3ebdbe58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:35:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:35:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ced73bbd155921008800c93a7c56dbc1694be05a6c83b9ae2f89722f3ebdbe58"}
{"level":"info","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ced73bbd155921008800c93a7c56dbc1694be05a6c83b9ae2f89722f3ebdbe58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"635c2b37a6a31185c42b85f6d3d474913ec70696fca48836cd6353f2d80def56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ced73bbd155921008800c93a7c56dbc1694be05a6c83b9ae2f89722f3ebdbe58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:35:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:35:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ced73bbd155921008800c93a7c56dbc1694be05a6c83b9ae2f89722f3ebdbe58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/635c2b37a6a31185c42b85f6d3d474913ec70696fca48836cd6353f2d80def56"}
{"level":"info","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ced73bbd155921008800c93a7c56dbc1694be05a6c83b9ae2f89722f3ebdbe58"}
{"level":"info","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ced73bbd155921008800c93a7c56dbc1694be05a6c83b9ae2f89722f3ebdbe58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"635c2b37a6a31185c42b85f6d3d474913ec70696fca48836cd6353f2d80def56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:35:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:35:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["635c2b37a6a31185c42b85f6d3d474913ec70696fca48836cd6353f2d80def56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ced73bbd155921008800c93a7c56dbc1694be05a6c83b9ae2f89722f3ebdbe58"}
{"level":"info","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"635c2b37a6a31185c42b85f6d3d474913ec70696fca48836cd6353f2d80def56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ced73bbd155921008800c93a7c56dbc1694be05a6c83b9ae2f89722f3ebdbe58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"635c2b37a6a31185c42b85f6d3d474913ec70696fca48836cd6353f2d80def56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:35:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:35:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/635c2b37a6a31185c42b85f6d3d474913ec70696fca48836cd6353f2d80def56"}
{"level":"info","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"635c2b37a6a31185c42b85f6d3d474913ec70696fca48836cd6353f2d80def56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"635c2b37a6a31185c42b85f6d3d474913ec70696fca48836cd6353f2d80def56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"635c2b37a6a31185c42b85f6d3d474913ec70696fca48836cd6353f2d80def56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/635c2b37a6a31185c42b85f6d3d474913ec70696fca48836cd6353f2d80def56"}
{"level":"debug","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"635c2b37a6a31185c42b85f6d3d474913ec70696fca48836cd6353f2d80def56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:35:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:35:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["635c2b37a6a31185c42b85f6d3d474913ec70696fca48836cd6353f2d80def56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"635c2b37a6a31185c42b85f6d3d474913ec70696fca48836cd6353f2d80def56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"635c2b37a6a31185c42b85f6d3d474913ec70696fca48836cd6353f2d80def56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/635c2b37a6a31185c42b85f6d3d474913ec70696fca48836cd6353f2d80def56"}
{"level":"debug","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de16bb0c24026165bf2c3d445333a520ee1a3eb0112978069965b32c004c8490","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:35:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:35:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de16bb0c24026165bf2c3d445333a520ee1a3eb0112978069965b32c004c8490","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de16bb0c24026165bf2c3d445333a520ee1a3eb0112978069965b32c004c8490","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:35:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:35:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de16bb0c24026165bf2c3d445333a520ee1a3eb0112978069965b32c004c8490"}
{"level":"info","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de16bb0c24026165bf2c3d445333a520ee1a3eb0112978069965b32c004c8490","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de16bb0c24026165bf2c3d445333a520ee1a3eb0112978069965b32c004c8490","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:35:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:35:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"de16bb0c24026165bf2c3d445333a520ee1a3eb0112978069965b32c004c8490","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"de16bb0c24026165bf2c3d445333a520ee1a3eb0112978069965b32c004c8490\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de16bb0c24026165bf2c3d445333a520ee1a3eb0112978069965b32c004c8490","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de16bb0c24026165bf2c3d445333a520ee1a3eb0112978069965b32c004c8490","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de16bb0c24026165bf2c3d445333a520ee1a3eb0112978069965b32c004c8490"}
{"level":"info","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de16bb0c24026165bf2c3d445333a520ee1a3eb0112978069965b32c004c8490"}
{"level":"debug","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1820403906301f6422d0596f6c7b7c0f38dd542ee8c70adfd377e7d87f9a4f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:35:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:35:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1820403906301f6422d0596f6c7b7c0f38dd542ee8c70adfd377e7d87f9a4f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1820403906301f6422d0596f6c7b7c0f38dd542ee8c70adfd377e7d87f9a4f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1820403906301f6422d0596f6c7b7c0f38dd542ee8c70adfd377e7d87f9a4f7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1820403906301f6422d0596f6c7b7c0f38dd542ee8c70adfd377e7d87f9a4f7"}
{"level":"debug","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de16bb0c24026165bf2c3d445333a520ee1a3eb0112978069965b32c004c8490","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:35:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:35:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de16bb0c24026165bf2c3d445333a520ee1a3eb0112978069965b32c004c8490"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de16bb0c24026165bf2c3d445333a520ee1a3eb0112978069965b32c004c8490","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de16bb0c24026165bf2c3d445333a520ee1a3eb0112978069965b32c004c8490","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1820403906301f6422d0596f6c7b7c0f38dd542ee8c70adfd377e7d87f9a4f7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1820403906301f6422d0596f6c7b7c0f38dd542ee8c70adfd377e7d87f9a4f7"}
{"level":"info","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de16bb0c24026165bf2c3d445333a520ee1a3eb0112978069965b32c004c8490"}
{"level":"debug","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1820403906301f6422d0596f6c7b7c0f38dd542ee8c70adfd377e7d87f9a4f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:35:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:35:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1820403906301f6422d0596f6c7b7c0f38dd542ee8c70adfd377e7d87f9a4f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1820403906301f6422d0596f6c7b7c0f38dd542ee8c70adfd377e7d87f9a4f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31e5c3b2a9316b0f4ffc3191f35c31320762034a15ba531ca452d93990c0d3e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:35:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:35:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31e5c3b2a9316b0f4ffc3191f35c31320762034a15ba531ca452d93990c0d3e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1820403906301f6422d0596f6c7b7c0f38dd542ee8c70adfd377e7d87f9a4f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cee9d529e30d9b266ff182088876539f3365d22d2456bd4dc3ad6b1869bc39f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:35:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:35:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31e5c3b2a9316b0f4ffc3191f35c31320762034a15ba531ca452d93990c0d3e2"}
{"level":"info","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cee9d529e30d9b266ff182088876539f3365d22d2456bd4dc3ad6b1869bc39f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31e5c3b2a9316b0f4ffc3191f35c31320762034a15ba531ca452d93990c0d3e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:35:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:35:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31e5c3b2a9316b0f4ffc3191f35c31320762034a15ba531ca452d93990c0d3e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1820403906301f6422d0596f6c7b7c0f38dd542ee8c70adfd377e7d87f9a4f7"}
{"level":"info","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31e5c3b2a9316b0f4ffc3191f35c31320762034a15ba531ca452d93990c0d3e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cee9d529e30d9b266ff182088876539f3365d22d2456bd4dc3ad6b1869bc39f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:35:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:35:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cee9d529e30d9b266ff182088876539f3365d22d2456bd4dc3ad6b1869bc39f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31e5c3b2a9316b0f4ffc3191f35c31320762034a15ba531ca452d93990c0d3e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cee9d529e30d9b266ff182088876539f3365d22d2456bd4dc3ad6b1869bc39f6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cee9d529e30d9b266ff182088876539f3365d22d2456bd4dc3ad6b1869bc39f6"}
{"level":"debug","ts":"2026-07-07T00:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cee9d529e30d9b266ff182088876539f3365d22d2456bd4dc3ad6b1869bc39f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:35:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:35:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cee9d529e30d9b266ff182088876539f3365d22d2456bd4dc3ad6b1869bc39f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cee9d529e30d9b266ff182088876539f3365d22d2456bd4dc3ad6b1869bc39f6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31e5c3b2a9316b0f4ffc3191f35c31320762034a15ba531ca452d93990c0d3e2"}
{"level":"debug","ts":"2026-07-07T00:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cee9d529e30d9b266ff182088876539f3365d22d2456bd4dc3ad6b1869bc39f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:35:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:35:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cee9d529e30d9b266ff182088876539f3365d22d2456bd4dc3ad6b1869bc39f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cee9d529e30d9b266ff182088876539f3365d22d2456bd4dc3ad6b1869bc39f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cee9d529e30d9b266ff182088876539f3365d22d2456bd4dc3ad6b1869bc39f6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cee9d529e30d9b266ff182088876539f3365d22d2456bd4dc3ad6b1869bc39f6"}
{"level":"debug","ts":"2026-07-07T00:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba3b4ff57ba3fc0cd60f4cf2125ec0c8a34350dc99088c6b5c3791fce2792049","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:35:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:35:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba3b4ff57ba3fc0cd60f4cf2125ec0c8a34350dc99088c6b5c3791fce2792049","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba3b4ff57ba3fc0cd60f4cf2125ec0c8a34350dc99088c6b5c3791fce2792049","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cee9d529e30d9b266ff182088876539f3365d22d2456bd4dc3ad6b1869bc39f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba3b4ff57ba3fc0cd60f4cf2125ec0c8a34350dc99088c6b5c3791fce2792049","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cee9d529e30d9b266ff182088876539f3365d22d2456bd4dc3ad6b1869bc39f6"}
{"level":"debug","ts":"2026-07-07T00:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba3b4ff57ba3fc0cd60f4cf2125ec0c8a34350dc99088c6b5c3791fce2792049","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:35:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:35:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba3b4ff57ba3fc0cd60f4cf2125ec0c8a34350dc99088c6b5c3791fce2792049"}
{"level":"info","ts":"2026-07-07T00:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7ea5da46cc40baaae6182164056c9216707e492bf70e801c29604255257fbb19"}
{"level":"info","ts":"2026-07-07T00:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba3b4ff57ba3fc0cd60f4cf2125ec0c8a34350dc99088c6b5c3791fce2792049","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba3b4ff57ba3fc0cd60f4cf2125ec0c8a34350dc99088c6b5c3791fce2792049","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:35:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:35:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba3b4ff57ba3fc0cd60f4cf2125ec0c8a34350dc99088c6b5c3791fce2792049"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba3b4ff57ba3fc0cd60f4cf2125ec0c8a34350dc99088c6b5c3791fce2792049","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cee9d529e30d9b266ff182088876539f3365d22d2456bd4dc3ad6b1869bc39f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:35:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:35:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cee9d529e30d9b266ff182088876539f3365d22d2456bd4dc3ad6b1869bc39f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cee9d529e30d9b266ff182088876539f3365d22d2456bd4dc3ad6b1869bc39f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba3b4ff57ba3fc0cd60f4cf2125ec0c8a34350dc99088c6b5c3791fce2792049","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:35:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:35:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba3b4ff57ba3fc0cd60f4cf2125ec0c8a34350dc99088c6b5c3791fce2792049"}
{"level":"info","ts":"2026-07-07T00:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba3b4ff57ba3fc0cd60f4cf2125ec0c8a34350dc99088c6b5c3791fce2792049","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cee9d529e30d9b266ff182088876539f3365d22d2456bd4dc3ad6b1869bc39f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba3b4ff57ba3fc0cd60f4cf2125ec0c8a34350dc99088c6b5c3791fce2792049","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:35:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:35:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba3b4ff57ba3fc0cd60f4cf2125ec0c8a34350dc99088c6b5c3791fce2792049"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/468c11051cc20726ff5ea4ca2aae680d70b64faff1ef71cd87b4fdcb3ef256c3"}
{"level":"info","ts":"2026-07-07T00:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba3b4ff57ba3fc0cd60f4cf2125ec0c8a34350dc99088c6b5c3791fce2792049","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba3b4ff57ba3fc0cd60f4cf2125ec0c8a34350dc99088c6b5c3791fce2792049","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:35:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:35:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba3b4ff57ba3fc0cd60f4cf2125ec0c8a34350dc99088c6b5c3791fce2792049"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T00:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ba3b4ff57ba3fc0cd60f4cf2125ec0c8a34350dc99088c6b5c3791fce2792049","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ba3b4ff57ba3fc0cd60f4cf2125ec0c8a34350dc99088c6b5c3791fce2792049\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba3b4ff57ba3fc0cd60f4cf2125ec0c8a34350dc99088c6b5c3791fce2792049","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba3b4ff57ba3fc0cd60f4cf2125ec0c8a34350dc99088c6b5c3791fce2792049","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cee9d529e30d9b266ff182088876539f3365d22d2456bd4dc3ad6b1869bc39f6"}
{"level":"info","ts":"2026-07-07T00:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5d658abbf2254af77aca0782468a304322b6bb17596fe57d27eea19e216e982a"}
{"level":"info","ts":"2026-07-07T00:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba3b4ff57ba3fc0cd60f4cf2125ec0c8a34350dc99088c6b5c3791fce2792049"}
{"level":"info","ts":"2026-07-07T00:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4bbb00779b0eb860bf2a1e27090775d847e67adf31361723f3396324b6289a75"}
{"level":"info","ts":"2026-07-07T00:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f0eadbcfb541167efda2ba5772006da52903c254140acc144b3d374848e734bd"}
{"level":"info","ts":"2026-07-07T00:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c9c38ac2a9d85185aec1ee09f63c62655fa1d38029eeb07bd28c18017c25221e"}
{"level":"info","ts":"2026-07-07T00:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3635b47e4a12542b95febe3b45345ef1538b11bd2ee2a66348a2d3d30357c37f"}
{"level":"info","ts":"2026-07-07T00:35:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ee77aa5cf5b3c735f8fe32635642290811c73b1d0f74c8e5e2c6fee2b18d25d3"}
{"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ea409fba83800356a02b1a7a190f9127ed6f54a8cb765129385b721933f07bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:35:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:35:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ea409fba83800356a02b1a7a190f9127ed6f54a8cb765129385b721933f07bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ea409fba83800356a02b1a7a190f9127ed6f54a8cb765129385b721933f07bb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ea409fba83800356a02b1a7a190f9127ed6f54a8cb765129385b721933f07bb"}
{"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ea409fba83800356a02b1a7a190f9127ed6f54a8cb765129385b721933f07bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ea409fba83800356a02b1a7a190f9127ed6f54a8cb765129385b721933f07bb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ea409fba83800356a02b1a7a190f9127ed6f54a8cb765129385b721933f07bb"}
{"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ea409fba83800356a02b1a7a190f9127ed6f54a8cb765129385b721933f07bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:35:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:35:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ea409fba83800356a02b1a7a190f9127ed6f54a8cb765129385b721933f07bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ea409fba83800356a02b1a7a190f9127ed6f54a8cb765129385b721933f07bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca11abb9c7c9c31310de0e3dd7f2e601e94187f542574d0fbf83890fc4cc5c76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:35:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:35:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca11abb9c7c9c31310de0e3dd7f2e601e94187f542574d0fbf83890fc4cc5c76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ea409fba83800356a02b1a7a190f9127ed6f54a8cb765129385b721933f07bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca11abb9c7c9c31310de0e3dd7f2e601e94187f542574d0fbf83890fc4cc5c76","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca11abb9c7c9c31310de0e3dd7f2e601e94187f542574d0fbf83890fc4cc5c76"}
{"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca11abb9c7c9c31310de0e3dd7f2e601e94187f542574d0fbf83890fc4cc5c76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca11abb9c7c9c31310de0e3dd7f2e601e94187f542574d0fbf83890fc4cc5c76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:35:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:35:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca11abb9c7c9c31310de0e3dd7f2e601e94187f542574d0fbf83890fc4cc5c76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ea409fba83800356a02b1a7a190f9127ed6f54a8cb765129385b721933f07bb"}
{"level":"info","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca11abb9c7c9c31310de0e3dd7f2e601e94187f542574d0fbf83890fc4cc5c76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca11abb9c7c9c31310de0e3dd7f2e601e94187f542574d0fbf83890fc4cc5c76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:35:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:35:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca11abb9c7c9c31310de0e3dd7f2e601e94187f542574d0fbf83890fc4cc5c76"}
{"level":"info","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca11abb9c7c9c31310de0e3dd7f2e601e94187f542574d0fbf83890fc4cc5c76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca11abb9c7c9c31310de0e3dd7f2e601e94187f542574d0fbf83890fc4cc5c76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca11abb9c7c9c31310de0e3dd7f2e601e94187f542574d0fbf83890fc4cc5c76","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca11abb9c7c9c31310de0e3dd7f2e601e94187f542574d0fbf83890fc4cc5c76"}
{"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca11abb9c7c9c31310de0e3dd7f2e601e94187f542574d0fbf83890fc4cc5c76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58f2d12914346297f25edcda3fc0cfde6a456d31156e94b81bb5fe46ae1a858e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:35:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:35:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca11abb9c7c9c31310de0e3dd7f2e601e94187f542574d0fbf83890fc4cc5c76"}
{"level":"info","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58f2d12914346297f25edcda3fc0cfde6a456d31156e94b81bb5fe46ae1a858e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58f2d12914346297f25edcda3fc0cfde6a456d31156e94b81bb5fe46ae1a858e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:35:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:35:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58f2d12914346297f25edcda3fc0cfde6a456d31156e94b81bb5fe46ae1a858e"}
{"level":"info","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58f2d12914346297f25edcda3fc0cfde6a456d31156e94b81bb5fe46ae1a858e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58f2d12914346297f25edcda3fc0cfde6a456d31156e94b81bb5fe46ae1a858e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:35:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:35:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"58f2d12914346297f25edcda3fc0cfde6a456d31156e94b81bb5fe46ae1a858e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"58f2d12914346297f25edcda3fc0cfde6a456d31156e94b81bb5fe46ae1a858e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58f2d12914346297f25edcda3fc0cfde6a456d31156e94b81bb5fe46ae1a858e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca11abb9c7c9c31310de0e3dd7f2e601e94187f542574d0fbf83890fc4cc5c76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:35:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:35:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca11abb9c7c9c31310de0e3dd7f2e601e94187f542574d0fbf83890fc4cc5c76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58f2d12914346297f25edcda3fc0cfde6a456d31156e94b81bb5fe46ae1a858e"}
{"level":"info","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca11abb9c7c9c31310de0e3dd7f2e601e94187f542574d0fbf83890fc4cc5c76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58f2d12914346297f25edcda3fc0cfde6a456d31156e94b81bb5fe46ae1a858e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca11abb9c7c9c31310de0e3dd7f2e601e94187f542574d0fbf83890fc4cc5c76","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58f2d12914346297f25edcda3fc0cfde6a456d31156e94b81bb5fe46ae1a858e"}
{"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18907d761f5d0d2366ce4e33b8f77a2676a7ef3aeedcd43e3540a75b7a420333","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:35:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:35:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca11abb9c7c9c31310de0e3dd7f2e601e94187f542574d0fbf83890fc4cc5c76"}
{"level":"info","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18907d761f5d0d2366ce4e33b8f77a2676a7ef3aeedcd43e3540a75b7a420333","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18907d761f5d0d2366ce4e33b8f77a2676a7ef3aeedcd43e3540a75b7a420333","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:35:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:35:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18907d761f5d0d2366ce4e33b8f77a2676a7ef3aeedcd43e3540a75b7a420333"}
{"level":"info","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18907d761f5d0d2366ce4e33b8f77a2676a7ef3aeedcd43e3540a75b7a420333","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18907d761f5d0d2366ce4e33b8f77a2676a7ef3aeedcd43e3540a75b7a420333","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:35:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:35:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"18907d761f5d0d2366ce4e33b8f77a2676a7ef3aeedcd43e3540a75b7a420333","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"18907d761f5d0d2366ce4e33b8f77a2676a7ef3aeedcd43e3540a75b7a420333\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58f2d12914346297f25edcda3fc0cfde6a456d31156e94b81bb5fe46ae1a858e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:35:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:35:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58f2d12914346297f25edcda3fc0cfde6a456d31156e94b81bb5fe46ae1a858e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18907d761f5d0d2366ce4e33b8f77a2676a7ef3aeedcd43e3540a75b7a420333"}
{"level":"info","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58f2d12914346297f25edcda3fc0cfde6a456d31156e94b81bb5fe46ae1a858e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18907d761f5d0d2366ce4e33b8f77a2676a7ef3aeedcd43e3540a75b7a420333","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58f2d12914346297f25edcda3fc0cfde6a456d31156e94b81bb5fe46ae1a858e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18907d761f5d0d2366ce4e33b8f77a2676a7ef3aeedcd43e3540a75b7a420333"}
{"level":"info","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58f2d12914346297f25edcda3fc0cfde6a456d31156e94b81bb5fe46ae1a858e"}
{"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18907d761f5d0d2366ce4e33b8f77a2676a7ef3aeedcd43e3540a75b7a420333","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:35:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:35:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18907d761f5d0d2366ce4e33b8f77a2676a7ef3aeedcd43e3540a75b7a420333"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18907d761f5d0d2366ce4e33b8f77a2676a7ef3aeedcd43e3540a75b7a420333","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c3dacdd362132a273d5adf4d5702bda999f12928aa19000e9030253d1e90e65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:35:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:35:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c3dacdd362132a273d5adf4d5702bda999f12928aa19000e9030253d1e90e65"}
{"level":"info","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c3dacdd362132a273d5adf4d5702bda999f12928aa19000e9030253d1e90e65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18907d761f5d0d2366ce4e33b8f77a2676a7ef3aeedcd43e3540a75b7a420333","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:35:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:35:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18907d761f5d0d2366ce4e33b8f77a2676a7ef3aeedcd43e3540a75b7a420333","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e86b1768c8c0fefe8fd7ad89dc1db93865976a939c519c4295c9b2d29e4cca65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:35:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:35:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18907d761f5d0d2366ce4e33b8f77a2676a7ef3aeedcd43e3540a75b7a420333"}
{"level":"info","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e86b1768c8c0fefe8fd7ad89dc1db93865976a939c519c4295c9b2d29e4cca65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c3dacdd362132a273d5adf4d5702bda999f12928aa19000e9030253d1e90e65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:35:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:35:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0c3dacdd362132a273d5adf4d5702bda999f12928aa19000e9030253d1e90e65"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e86b1768c8c0fefe8fd7ad89dc1db93865976a939c519c4295c9b2d29e4cca65"}
{"level":"info","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c3dacdd362132a273d5adf4d5702bda999f12928aa19000e9030253d1e90e65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18907d761f5d0d2366ce4e33b8f77a2676a7ef3aeedcd43e3540a75b7a420333","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:35:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:35:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18907d761f5d0d2366ce4e33b8f77a2676a7ef3aeedcd43e3540a75b7a420333"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18907d761f5d0d2366ce4e33b8f77a2676a7ef3aeedcd43e3540a75b7a420333","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e86b1768c8c0fefe8fd7ad89dc1db93865976a939c519c4295c9b2d29e4cca65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:35:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:35:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e86b1768c8c0fefe8fd7ad89dc1db93865976a939c519c4295c9b2d29e4cca65"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c3dacdd362132a273d5adf4d5702bda999f12928aa19000e9030253d1e90e65"}
{"level":"info","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e86b1768c8c0fefe8fd7ad89dc1db93865976a939c519c4295c9b2d29e4cca65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c3dacdd362132a273d5adf4d5702bda999f12928aa19000e9030253d1e90e65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18907d761f5d0d2366ce4e33b8f77a2676a7ef3aeedcd43e3540a75b7a420333","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:35:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:35:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18907d761f5d0d2366ce4e33b8f77a2676a7ef3aeedcd43e3540a75b7a420333"}
{"level":"info","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18907d761f5d0d2366ce4e33b8f77a2676a7ef3aeedcd43e3540a75b7a420333","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e86b1768c8c0fefe8fd7ad89dc1db93865976a939c519c4295c9b2d29e4cca65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:35:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:35:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e86b1768c8c0fefe8fd7ad89dc1db93865976a939c519c4295c9b2d29e4cca65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18907d761f5d0d2366ce4e33b8f77a2676a7ef3aeedcd43e3540a75b7a420333","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:35:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:35:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18907d761f5d0d2366ce4e33b8f77a2676a7ef3aeedcd43e3540a75b7a420333"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e86b1768c8c0fefe8fd7ad89dc1db93865976a939c519c4295c9b2d29e4cca65"}
{"level":"info","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18907d761f5d0d2366ce4e33b8f77a2676a7ef3aeedcd43e3540a75b7a420333","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e86b1768c8c0fefe8fd7ad89dc1db93865976a939c519c4295c9b2d29e4cca65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:35:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:35:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e86b1768c8c0fefe8fd7ad89dc1db93865976a939c519c4295c9b2d29e4cca65"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c3dacdd362132a273d5adf4d5702bda999f12928aa19000e9030253d1e90e65"}
{"level":"info","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e86b1768c8c0fefe8fd7ad89dc1db93865976a939c519c4295c9b2d29e4cca65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18907d761f5d0d2366ce4e33b8f77a2676a7ef3aeedcd43e3540a75b7a420333","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:35:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:35:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18907d761f5d0d2366ce4e33b8f77a2676a7ef3aeedcd43e3540a75b7a420333","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e86b1768c8c0fefe8fd7ad89dc1db93865976a939c519c4295c9b2d29e4cca65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18907d761f5d0d2366ce4e33b8f77a2676a7ef3aeedcd43e3540a75b7a420333","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18907d761f5d0d2366ce4e33b8f77a2676a7ef3aeedcd43e3540a75b7a420333"}
{"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18907d761f5d0d2366ce4e33b8f77a2676a7ef3aeedcd43e3540a75b7a420333","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:35:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:35:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18907d761f5d0d2366ce4e33b8f77a2676a7ef3aeedcd43e3540a75b7a420333"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18907d761f5d0d2366ce4e33b8f77a2676a7ef3aeedcd43e3540a75b7a420333","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18907d761f5d0d2366ce4e33b8f77a2676a7ef3aeedcd43e3540a75b7a420333","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e86b1768c8c0fefe8fd7ad89dc1db93865976a939c519c4295c9b2d29e4cca65"}
{"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abf529c5af77cb9bee886cba6ea405a48eb08faf8e85e802e2369ff717d1a9ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:35:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:35:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"abf529c5af77cb9bee886cba6ea405a48eb08faf8e85e802e2369ff717d1a9ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18907d761f5d0d2366ce4e33b8f77a2676a7ef3aeedcd43e3540a75b7a420333"}
{"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abf529c5af77cb9bee886cba6ea405a48eb08faf8e85e802e2369ff717d1a9ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:35:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:35:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"abf529c5af77cb9bee886cba6ea405a48eb08faf8e85e802e2369ff717d1a9ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abf529c5af77cb9bee886cba6ea405a48eb08faf8e85e802e2369ff717d1a9ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:35:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:35:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abf529c5af77cb9bee886cba6ea405a48eb08faf8e85e802e2369ff717d1a9ce"}
{"level":"error","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"abf529c5af77cb9bee886cba6ea405a48eb08faf8e85e802e2369ff717d1a9ce","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"abf529c5af77cb9bee886cba6ea405a48eb08faf8e85e802e2369ff717d1a9ce\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"abf529c5af77cb9bee886cba6ea405a48eb08faf8e85e802e2369ff717d1a9ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"abf529c5af77cb9bee886cba6ea405a48eb08faf8e85e802e2369ff717d1a9ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abf529c5af77cb9bee886cba6ea405a48eb08faf8e85e802e2369ff717d1a9ce"}
{"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"851d9282c8ebc3aa8669a3b0ca443a4568e0e430e42a9e21098731547b678cde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:35:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:35:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"851d9282c8ebc3aa8669a3b0ca443a4568e0e430e42a9e21098731547b678cde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"851d9282c8ebc3aa8669a3b0ca443a4568e0e430e42a9e21098731547b678cde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"851d9282c8ebc3aa8669a3b0ca443a4568e0e430e42a9e21098731547b678cde","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/851d9282c8ebc3aa8669a3b0ca443a4568e0e430e42a9e21098731547b678cde"}
{"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abf529c5af77cb9bee886cba6ea405a48eb08faf8e85e802e2369ff717d1a9ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:35:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:35:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["abf529c5af77cb9bee886cba6ea405a48eb08faf8e85e802e2369ff717d1a9ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/851d9282c8ebc3aa8669a3b0ca443a4568e0e430e42a9e21098731547b678cde"}
{"level":"info","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"abf529c5af77cb9bee886cba6ea405a48eb08faf8e85e802e2369ff717d1a9ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"851d9282c8ebc3aa8669a3b0ca443a4568e0e430e42a9e21098731547b678cde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:35:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:35:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["851d9282c8ebc3aa8669a3b0ca443a4568e0e430e42a9e21098731547b678cde"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"851d9282c8ebc3aa8669a3b0ca443a4568e0e430e42a9e21098731547b678cde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abf529c5af77cb9bee886cba6ea405a48eb08faf8e85e802e2369ff717d1a9ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:35:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:35:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abf529c5af77cb9bee886cba6ea405a48eb08faf8e85e802e2369ff717d1a9ce"}
{"level":"info","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"abf529c5af77cb9bee886cba6ea405a48eb08faf8e85e802e2369ff717d1a9ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"851d9282c8ebc3aa8669a3b0ca443a4568e0e430e42a9e21098731547b678cde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:35:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:35:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/851d9282c8ebc3aa8669a3b0ca443a4568e0e430e42a9e21098731547b678cde"}
{"level":"info","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"851d9282c8ebc3aa8669a3b0ca443a4568e0e430e42a9e21098731547b678cde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"abf529c5af77cb9bee886cba6ea405a48eb08faf8e85e802e2369ff717d1a9ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"851d9282c8ebc3aa8669a3b0ca443a4568e0e430e42a9e21098731547b678cde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:35:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:35:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["851d9282c8ebc3aa8669a3b0ca443a4568e0e430e42a9e21098731547b678cde"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"851d9282c8ebc3aa8669a3b0ca443a4568e0e430e42a9e21098731547b678cde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"abf529c5af77cb9bee886cba6ea405a48eb08faf8e85e802e2369ff717d1a9ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"851d9282c8ebc3aa8669a3b0ca443a4568e0e430e42a9e21098731547b678cde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:35:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:35:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["851d9282c8ebc3aa8669a3b0ca443a4568e0e430e42a9e21098731547b678cde"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abf529c5af77cb9bee886cba6ea405a48eb08faf8e85e802e2369ff717d1a9ce"}
{"level":"error","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"851d9282c8ebc3aa8669a3b0ca443a4568e0e430e42a9e21098731547b678cde","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"851d9282c8ebc3aa8669a3b0ca443a4568e0e430e42a9e21098731547b678cde\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"851d9282c8ebc3aa8669a3b0ca443a4568e0e430e42a9e21098731547b678cde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:35:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:35:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"851d9282c8ebc3aa8669a3b0ca443a4568e0e430e42a9e21098731547b678cde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abf529c5af77cb9bee886cba6ea405a48eb08faf8e85e802e2369ff717d1a9ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:35:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:35:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["abf529c5af77cb9bee886cba6ea405a48eb08faf8e85e802e2369ff717d1a9ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/851d9282c8ebc3aa8669a3b0ca443a4568e0e430e42a9e21098731547b678cde"}
{"level":"info","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"abf529c5af77cb9bee886cba6ea405a48eb08faf8e85e802e2369ff717d1a9ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"851d9282c8ebc3aa8669a3b0ca443a4568e0e430e42a9e21098731547b678cde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"abf529c5af77cb9bee886cba6ea405a48eb08faf8e85e802e2369ff717d1a9ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/851d9282c8ebc3aa8669a3b0ca443a4568e0e430e42a9e21098731547b678cde"}
{"level":"debug","ts":"2026-07-07T00:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"851d9282c8ebc3aa8669a3b0ca443a4568e0e430e42a9e21098731547b678cde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:35:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:35:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["851d9282c8ebc3aa8669a3b0ca443a4568e0e430e42a9e21098731547b678cde"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abf529c5af77cb9bee886cba6ea405a48eb08faf8e85e802e2369ff717d1a9ce"}
{"level":"info","ts":"2026-07-07T00:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"851d9282c8ebc3aa8669a3b0ca443a4568e0e430e42a9e21098731547b678cde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"851d9282c8ebc3aa8669a3b0ca443a4568e0e430e42a9e21098731547b678cde","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:35:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/851d9282c8ebc3aa8669a3b0ca443a4568e0e430e42a9e21098731547b678cde"}
{"level":"debug","ts":"2026-07-07T00:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89930111d7925eb7ec61173298e0e3b21192640c8973625bde57210cd07a35a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:36:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:36:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89930111d7925eb7ec61173298e0e3b21192640c8973625bde57210cd07a35a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89930111d7925eb7ec61173298e0e3b21192640c8973625bde57210cd07a35a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89930111d7925eb7ec61173298e0e3b21192640c8973625bde57210cd07a35a9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89930111d7925eb7ec61173298e0e3b21192640c8973625bde57210cd07a35a9"}
{"level":"debug","ts":"2026-07-07T00:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89930111d7925eb7ec61173298e0e3b21192640c8973625bde57210cd07a35a9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89930111d7925eb7ec61173298e0e3b21192640c8973625bde57210cd07a35a9"}
{"level":"debug","ts":"2026-07-07T00:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89930111d7925eb7ec61173298e0e3b21192640c8973625bde57210cd07a35a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:36:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:36:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89930111d7925eb7ec61173298e0e3b21192640c8973625bde57210cd07a35a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89930111d7925eb7ec61173298e0e3b21192640c8973625bde57210cd07a35a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89930111d7925eb7ec61173298e0e3b21192640c8973625bde57210cd07a35a9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89930111d7925eb7ec61173298e0e3b21192640c8973625bde57210cd07a35a9"}
{"level":"debug","ts":"2026-07-07T00:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba3b4ff57ba3fc0cd60f4cf2125ec0c8a34350dc99088c6b5c3791fce2792049","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba3b4ff57ba3fc0cd60f4cf2125ec0c8a34350dc99088c6b5c3791fce2792049"}
{"level":"debug","ts":"2026-07-07T00:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3bdd1cbfa23c89d5898f2844375aa15153d86264dfd03b68d3ed6bbbc7cfcd26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:36:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:36:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3bdd1cbfa23c89d5898f2844375aa15153d86264dfd03b68d3ed6bbbc7cfcd26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bdd1cbfa23c89d5898f2844375aa15153d86264dfd03b68d3ed6bbbc7cfcd26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bdd1cbfa23c89d5898f2844375aa15153d86264dfd03b68d3ed6bbbc7cfcd26","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bdd1cbfa23c89d5898f2844375aa15153d86264dfd03b68d3ed6bbbc7cfcd26"}
{"level":"debug","ts":"2026-07-07T00:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bdd1cbfa23c89d5898f2844375aa15153d86264dfd03b68d3ed6bbbc7cfcd26","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bdd1cbfa23c89d5898f2844375aa15153d86264dfd03b68d3ed6bbbc7cfcd26"}
{"level":"debug","ts":"2026-07-07T00:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3bdd1cbfa23c89d5898f2844375aa15153d86264dfd03b68d3ed6bbbc7cfcd26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:36:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:36:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3bdd1cbfa23c89d5898f2844375aa15153d86264dfd03b68d3ed6bbbc7cfcd26"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3bdd1cbfa23c89d5898f2844375aa15153d86264dfd03b68d3ed6bbbc7cfcd26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bdd1cbfa23c89d5898f2844375aa15153d86264dfd03b68d3ed6bbbc7cfcd26","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bdd1cbfa23c89d5898f2844375aa15153d86264dfd03b68d3ed6bbbc7cfcd26"}
{"level":"debug","ts":"2026-07-07T00:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"851d9282c8ebc3aa8669a3b0ca443a4568e0e430e42a9e21098731547b678cde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:36:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:36:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"851d9282c8ebc3aa8669a3b0ca443a4568e0e430e42a9e21098731547b678cde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"851d9282c8ebc3aa8669a3b0ca443a4568e0e430e42a9e21098731547b678cde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"851d9282c8ebc3aa8669a3b0ca443a4568e0e430e42a9e21098731547b678cde","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/851d9282c8ebc3aa8669a3b0ca443a4568e0e430e42a9e21098731547b678cde"}
{"level":"debug","ts":"2026-07-07T00:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"851d9282c8ebc3aa8669a3b0ca443a4568e0e430e42a9e21098731547b678cde","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/851d9282c8ebc3aa8669a3b0ca443a4568e0e430e42a9e21098731547b678cde"}
{"level":"debug","ts":"2026-07-07T00:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"851d9282c8ebc3aa8669a3b0ca443a4568e0e430e42a9e21098731547b678cde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:36:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:36:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["851d9282c8ebc3aa8669a3b0ca443a4568e0e430e42a9e21098731547b678cde"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"851d9282c8ebc3aa8669a3b0ca443a4568e0e430e42a9e21098731547b678cde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"851d9282c8ebc3aa8669a3b0ca443a4568e0e430e42a9e21098731547b678cde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:36:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:36:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"851d9282c8ebc3aa8669a3b0ca443a4568e0e430e42a9e21098731547b678cde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40d6999d9c07e28ff8c443cabd38b167e2d30ce54dfaac4394b8baff93a918af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"851d9282c8ebc3aa8669a3b0ca443a4568e0e430e42a9e21098731547b678cde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"851d9282c8ebc3aa8669a3b0ca443a4568e0e430e42a9e21098731547b678cde","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/851d9282c8ebc3aa8669a3b0ca443a4568e0e430e42a9e21098731547b678cde"}
{"level":"debug","ts":"2026-07-07T00:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"851d9282c8ebc3aa8669a3b0ca443a4568e0e430e42a9e21098731547b678cde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:36:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:36:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["851d9282c8ebc3aa8669a3b0ca443a4568e0e430e42a9e21098731547b678cde"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40d6999d9c07e28ff8c443cabd38b167e2d30ce54dfaac4394b8baff93a918af"}
{"level":"info","ts":"2026-07-07T00:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"851d9282c8ebc3aa8669a3b0ca443a4568e0e430e42a9e21098731547b678cde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"851d9282c8ebc3aa8669a3b0ca443a4568e0e430e42a9e21098731547b678cde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:36:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:36:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/851d9282c8ebc3aa8669a3b0ca443a4568e0e430e42a9e21098731547b678cde"}
{"level":"info","ts":"2026-07-07T00:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"851d9282c8ebc3aa8669a3b0ca443a4568e0e430e42a9e21098731547b678cde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"851d9282c8ebc3aa8669a3b0ca443a4568e0e430e42a9e21098731547b678cde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"851d9282c8ebc3aa8669a3b0ca443a4568e0e430e42a9e21098731547b678cde","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/851d9282c8ebc3aa8669a3b0ca443a4568e0e430e42a9e21098731547b678cde"}
{"level":"debug","ts":"2026-07-07T00:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"851d9282c8ebc3aa8669a3b0ca443a4568e0e430e42a9e21098731547b678cde","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/851d9282c8ebc3aa8669a3b0ca443a4568e0e430e42a9e21098731547b678cde"}
{"level":"debug","ts":"2026-07-07T00:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"851d9282c8ebc3aa8669a3b0ca443a4568e0e430e42a9e21098731547b678cde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:36:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:36:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["851d9282c8ebc3aa8669a3b0ca443a4568e0e430e42a9e21098731547b678cde"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"851d9282c8ebc3aa8669a3b0ca443a4568e0e430e42a9e21098731547b678cde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"851d9282c8ebc3aa8669a3b0ca443a4568e0e430e42a9e21098731547b678cde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:36:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:36:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"851d9282c8ebc3aa8669a3b0ca443a4568e0e430e42a9e21098731547b678cde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"851d9282c8ebc3aa8669a3b0ca443a4568e0e430e42a9e21098731547b678cde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"851d9282c8ebc3aa8669a3b0ca443a4568e0e430e42a9e21098731547b678cde","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/851d9282c8ebc3aa8669a3b0ca443a4568e0e430e42a9e21098731547b678cde"}
{"level":"debug","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"851d9282c8ebc3aa8669a3b0ca443a4568e0e430e42a9e21098731547b678cde","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/851d9282c8ebc3aa8669a3b0ca443a4568e0e430e42a9e21098731547b678cde"}
{"level":"debug","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abf529c5af77cb9bee886cba6ea405a48eb08faf8e85e802e2369ff717d1a9ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:36:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:36:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"abf529c5af77cb9bee886cba6ea405a48eb08faf8e85e802e2369ff717d1a9ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"abf529c5af77cb9bee886cba6ea405a48eb08faf8e85e802e2369ff717d1a9ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"abf529c5af77cb9bee886cba6ea405a48eb08faf8e85e802e2369ff717d1a9ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abf529c5af77cb9bee886cba6ea405a48eb08faf8e85e802e2369ff717d1a9ce"}
{"level":"debug","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"851d9282c8ebc3aa8669a3b0ca443a4568e0e430e42a9e21098731547b678cde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:36:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:36:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["851d9282c8ebc3aa8669a3b0ca443a4568e0e430e42a9e21098731547b678cde"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"851d9282c8ebc3aa8669a3b0ca443a4568e0e430e42a9e21098731547b678cde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"abf529c5af77cb9bee886cba6ea405a48eb08faf8e85e802e2369ff717d1a9ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"851d9282c8ebc3aa8669a3b0ca443a4568e0e430e42a9e21098731547b678cde","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abf529c5af77cb9bee886cba6ea405a48eb08faf8e85e802e2369ff717d1a9ce"}
{"level":"info","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/851d9282c8ebc3aa8669a3b0ca443a4568e0e430e42a9e21098731547b678cde"}
{"level":"debug","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abf529c5af77cb9bee886cba6ea405a48eb08faf8e85e802e2369ff717d1a9ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:36:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:36:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["abf529c5af77cb9bee886cba6ea405a48eb08faf8e85e802e2369ff717d1a9ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"abf529c5af77cb9bee886cba6ea405a48eb08faf8e85e802e2369ff717d1a9ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abf529c5af77cb9bee886cba6ea405a48eb08faf8e85e802e2369ff717d1a9ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:36:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:36:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"abf529c5af77cb9bee886cba6ea405a48eb08faf8e85e802e2369ff717d1a9ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c3dacdd362132a273d5adf4d5702bda999f12928aa19000e9030253d1e90e65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"abf529c5af77cb9bee886cba6ea405a48eb08faf8e85e802e2369ff717d1a9ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"abf529c5af77cb9bee886cba6ea405a48eb08faf8e85e802e2369ff717d1a9ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abf529c5af77cb9bee886cba6ea405a48eb08faf8e85e802e2369ff717d1a9ce"}
{"level":"debug","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abf529c5af77cb9bee886cba6ea405a48eb08faf8e85e802e2369ff717d1a9ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:36:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:36:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["abf529c5af77cb9bee886cba6ea405a48eb08faf8e85e802e2369ff717d1a9ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c3dacdd362132a273d5adf4d5702bda999f12928aa19000e9030253d1e90e65"}
{"level":"info","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"abf529c5af77cb9bee886cba6ea405a48eb08faf8e85e802e2369ff717d1a9ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abf529c5af77cb9bee886cba6ea405a48eb08faf8e85e802e2369ff717d1a9ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:36:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:36:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abf529c5af77cb9bee886cba6ea405a48eb08faf8e85e802e2369ff717d1a9ce"}
{"level":"info","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"abf529c5af77cb9bee886cba6ea405a48eb08faf8e85e802e2369ff717d1a9ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"abf529c5af77cb9bee886cba6ea405a48eb08faf8e85e802e2369ff717d1a9ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"abf529c5af77cb9bee886cba6ea405a48eb08faf8e85e802e2369ff717d1a9ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abf529c5af77cb9bee886cba6ea405a48eb08faf8e85e802e2369ff717d1a9ce"}
{"level":"debug","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"abf529c5af77cb9bee886cba6ea405a48eb08faf8e85e802e2369ff717d1a9ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abf529c5af77cb9bee886cba6ea405a48eb08faf8e85e802e2369ff717d1a9ce"}
{"level":"debug","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abf529c5af77cb9bee886cba6ea405a48eb08faf8e85e802e2369ff717d1a9ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:36:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:36:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["abf529c5af77cb9bee886cba6ea405a48eb08faf8e85e802e2369ff717d1a9ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"abf529c5af77cb9bee886cba6ea405a48eb08faf8e85e802e2369ff717d1a9ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abf529c5af77cb9bee886cba6ea405a48eb08faf8e85e802e2369ff717d1a9ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:36:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:36:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"abf529c5af77cb9bee886cba6ea405a48eb08faf8e85e802e2369ff717d1a9ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"abf529c5af77cb9bee886cba6ea405a48eb08faf8e85e802e2369ff717d1a9ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abf529c5af77cb9bee886cba6ea405a48eb08faf8e85e802e2369ff717d1a9ce"}
{"level":"debug","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"abf529c5af77cb9bee886cba6ea405a48eb08faf8e85e802e2369ff717d1a9ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"abf529c5af77cb9bee886cba6ea405a48eb08faf8e85e802e2369ff717d1a9ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abf529c5af77cb9bee886cba6ea405a48eb08faf8e85e802e2369ff717d1a9ce"}
{"level":"debug","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de16bb0c24026165bf2c3d445333a520ee1a3eb0112978069965b32c004c8490","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de16bb0c24026165bf2c3d445333a520ee1a3eb0112978069965b32c004c8490"}
{"level":"debug","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abf529c5af77cb9bee886cba6ea405a48eb08faf8e85e802e2369ff717d1a9ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:36:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:36:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["abf529c5af77cb9bee886cba6ea405a48eb08faf8e85e802e2369ff717d1a9ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"abf529c5af77cb9bee886cba6ea405a48eb08faf8e85e802e2369ff717d1a9ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abf529c5af77cb9bee886cba6ea405a48eb08faf8e85e802e2369ff717d1a9ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:36:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:36:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"abf529c5af77cb9bee886cba6ea405a48eb08faf8e85e802e2369ff717d1a9ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"abf529c5af77cb9bee886cba6ea405a48eb08faf8e85e802e2369ff717d1a9ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"abf529c5af77cb9bee886cba6ea405a48eb08faf8e85e802e2369ff717d1a9ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abf529c5af77cb9bee886cba6ea405a48eb08faf8e85e802e2369ff717d1a9ce"}
{"level":"debug","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"abf529c5af77cb9bee886cba6ea405a48eb08faf8e85e802e2369ff717d1a9ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abf529c5af77cb9bee886cba6ea405a48eb08faf8e85e802e2369ff717d1a9ce"}
{"level":"debug","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18907d761f5d0d2366ce4e33b8f77a2676a7ef3aeedcd43e3540a75b7a420333","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:36:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:36:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18907d761f5d0d2366ce4e33b8f77a2676a7ef3aeedcd43e3540a75b7a420333","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18907d761f5d0d2366ce4e33b8f77a2676a7ef3aeedcd43e3540a75b7a420333","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18907d761f5d0d2366ce4e33b8f77a2676a7ef3aeedcd43e3540a75b7a420333","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18907d761f5d0d2366ce4e33b8f77a2676a7ef3aeedcd43e3540a75b7a420333"}
{"level":"debug","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abf529c5af77cb9bee886cba6ea405a48eb08faf8e85e802e2369ff717d1a9ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:36:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:36:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["abf529c5af77cb9bee886cba6ea405a48eb08faf8e85e802e2369ff717d1a9ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18907d761f5d0d2366ce4e33b8f77a2676a7ef3aeedcd43e3540a75b7a420333"}
{"level":"info","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"abf529c5af77cb9bee886cba6ea405a48eb08faf8e85e802e2369ff717d1a9ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18907d761f5d0d2366ce4e33b8f77a2676a7ef3aeedcd43e3540a75b7a420333","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:36:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:36:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18907d761f5d0d2366ce4e33b8f77a2676a7ef3aeedcd43e3540a75b7a420333"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18907d761f5d0d2366ce4e33b8f77a2676a7ef3aeedcd43e3540a75b7a420333","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abf529c5af77cb9bee886cba6ea405a48eb08faf8e85e802e2369ff717d1a9ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:36:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:36:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abf529c5af77cb9bee886cba6ea405a48eb08faf8e85e802e2369ff717d1a9ce"}
{"level":"info","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"abf529c5af77cb9bee886cba6ea405a48eb08faf8e85e802e2369ff717d1a9ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18907d761f5d0d2366ce4e33b8f77a2676a7ef3aeedcd43e3540a75b7a420333","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:36:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:36:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18907d761f5d0d2366ce4e33b8f77a2676a7ef3aeedcd43e3540a75b7a420333","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abf529c5af77cb9bee886cba6ea405a48eb08faf8e85e802e2369ff717d1a9ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:36:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:36:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["abf529c5af77cb9bee886cba6ea405a48eb08faf8e85e802e2369ff717d1a9ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18907d761f5d0d2366ce4e33b8f77a2676a7ef3aeedcd43e3540a75b7a420333"}
{"level":"info","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"abf529c5af77cb9bee886cba6ea405a48eb08faf8e85e802e2369ff717d1a9ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18907d761f5d0d2366ce4e33b8f77a2676a7ef3aeedcd43e3540a75b7a420333","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:36:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:36:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18907d761f5d0d2366ce4e33b8f77a2676a7ef3aeedcd43e3540a75b7a420333"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abf529c5af77cb9bee886cba6ea405a48eb08faf8e85e802e2369ff717d1a9ce"}
{"level":"info","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18907d761f5d0d2366ce4e33b8f77a2676a7ef3aeedcd43e3540a75b7a420333","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31e5c3b2a9316b0f4ffc3191f35c31320762034a15ba531ca452d93990c0d3e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"abf529c5af77cb9bee886cba6ea405a48eb08faf8e85e802e2369ff717d1a9ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18907d761f5d0d2366ce4e33b8f77a2676a7ef3aeedcd43e3540a75b7a420333","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:36:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:36:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18907d761f5d0d2366ce4e33b8f77a2676a7ef3aeedcd43e3540a75b7a420333"}
{"level":"info","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18907d761f5d0d2366ce4e33b8f77a2676a7ef3aeedcd43e3540a75b7a420333","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58f2d12914346297f25edcda3fc0cfde6a456d31156e94b81bb5fe46ae1a858e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18907d761f5d0d2366ce4e33b8f77a2676a7ef3aeedcd43e3540a75b7a420333","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:36:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:36:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18907d761f5d0d2366ce4e33b8f77a2676a7ef3aeedcd43e3540a75b7a420333"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31e5c3b2a9316b0f4ffc3191f35c31320762034a15ba531ca452d93990c0d3e2"}
{"level":"info","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18907d761f5d0d2366ce4e33b8f77a2676a7ef3aeedcd43e3540a75b7a420333","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18907d761f5d0d2366ce4e33b8f77a2676a7ef3aeedcd43e3540a75b7a420333","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:36:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:36:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18907d761f5d0d2366ce4e33b8f77a2676a7ef3aeedcd43e3540a75b7a420333"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"18907d761f5d0d2366ce4e33b8f77a2676a7ef3aeedcd43e3540a75b7a420333","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"18907d761f5d0d2366ce4e33b8f77a2676a7ef3aeedcd43e3540a75b7a420333\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18907d761f5d0d2366ce4e33b8f77a2676a7ef3aeedcd43e3540a75b7a420333","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18907d761f5d0d2366ce4e33b8f77a2676a7ef3aeedcd43e3540a75b7a420333","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abf529c5af77cb9bee886cba6ea405a48eb08faf8e85e802e2369ff717d1a9ce"}
{"level":"debug","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"635c2b37a6a31185c42b85f6d3d474913ec70696fca48836cd6353f2d80def56","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58f2d12914346297f25edcda3fc0cfde6a456d31156e94b81bb5fe46ae1a858e"}
{"level":"debug","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cee9d529e30d9b266ff182088876539f3365d22d2456bd4dc3ad6b1869bc39f6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18907d761f5d0d2366ce4e33b8f77a2676a7ef3aeedcd43e3540a75b7a420333"}
{"level":"debug","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ced73bbd155921008800c93a7c56dbc1694be05a6c83b9ae2f89722f3ebdbe58","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/635c2b37a6a31185c42b85f6d3d474913ec70696fca48836cd6353f2d80def56"}
{"level":"debug","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca11abb9c7c9c31310de0e3dd7f2e601e94187f542574d0fbf83890fc4cc5c76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e86b1768c8c0fefe8fd7ad89dc1db93865976a939c519c4295c9b2d29e4cca65","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cee9d529e30d9b266ff182088876539f3365d22d2456bd4dc3ad6b1869bc39f6"}
{"level":"debug","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ea409fba83800356a02b1a7a190f9127ed6f54a8cb765129385b721933f07bb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94f4f4b57e09a938a00b7d44a5a50f6ed5768e5535ecfa6f8cdf12a1a33406cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99e6a9db3c4e960919e9e307f2a4053ca26445b6de28170f37f2d70aaaf29d77","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ced73bbd155921008800c93a7c56dbc1694be05a6c83b9ae2f89722f3ebdbe58"}
{"level":"debug","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1820403906301f6422d0596f6c7b7c0f38dd542ee8c70adfd377e7d87f9a4f7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca11abb9c7c9c31310de0e3dd7f2e601e94187f542574d0fbf83890fc4cc5c76"}
{"level":"info","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e86b1768c8c0fefe8fd7ad89dc1db93865976a939c519c4295c9b2d29e4cca65"}
{"level":"info","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ea409fba83800356a02b1a7a190f9127ed6f54a8cb765129385b721933f07bb"}
{"level":"info","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94f4f4b57e09a938a00b7d44a5a50f6ed5768e5535ecfa6f8cdf12a1a33406cd"}
{"level":"info","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99e6a9db3c4e960919e9e307f2a4053ca26445b6de28170f37f2d70aaaf29d77"}
{"level":"info","ts":"2026-07-07T00:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1820403906301f6422d0596f6c7b7c0f38dd542ee8c70adfd377e7d87f9a4f7"}
{"level":"info","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"65711d66-8030-4d88-95a1-59280c503a1c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:44868","PortSpecifier":{"PortValue":44868}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"65711d66-8030-4d88-95a1-59280c503a1c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a8caec.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"65711d66-8030-4d88-95a1-59280c503a1c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:44868","PortSpecifier":{"PortValue":44868}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384564,"nanos":279582590},"http":{"id":"65711d66-8030-4d88-95a1-59280c503a1c","method":"POST","headers":{":authority":"e2e-shared-a-a8caec.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"65711d66-8030-4d88-95a1-59280c503a1c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"65711d66-8030-4d88-95a1-59280c503a1c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2e9425a8-e67e-49b7-8794-a9d0dfce4a66","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c3beb7c5-02c8-45b5-85ce-ca53bacd8b61"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/544916f30252"]}}
{"level":"debug","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"65711d66-8030-4d88-95a1-59280c503a1c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/544916f30252"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c3beb7c5-02c8-45b5-85ce-ca53bacd8b61"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2e9425a8-e67e-49b7-8794-a9d0dfce4a66","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"89930111d7925eb7ec61173298e0e3b21192640c8973625bde57210cd07a35a9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a8caec.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65711d66-8030-4d88-95a1-59280c503a1c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65711d66-8030-4d88-95a1-59280c503a1c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65711d66-8030-4d88-95a1-59280c503a1c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a8caec/sub-test-model-a8caec\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"65711d66-8030-4d88-95a1-59280c503a1c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"65711d66-8030-4d88-95a1-59280c503a1c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"65711d66-8030-4d88-95a1-59280c503a1c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"65711d66-8030-4d88-95a1-59280c503a1c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"65711d66-8030-4d88-95a1-59280c503a1c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d465230c-d6af-44f9-85e9-a5ad6729e347","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:39560","PortSpecifier":{"PortValue":39560}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d465230c-d6af-44f9-85e9-a5ad6729e347","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-3ee067.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d465230c-d6af-44f9-85e9-a5ad6729e347","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:39560","PortSpecifier":{"PortValue":39560}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384564,"nanos":322175234},"http":{"id":"d465230c-d6af-44f9-85e9-a5ad6729e347","method":"POST","headers":{":authority":"e2e-shared-b-3ee067.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d465230c-d6af-44f9-85e9-a5ad6729e347","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d465230c-d6af-44f9-85e9-a5ad6729e347","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2e9425a8-e67e-49b7-8794-a9d0dfce4a66","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c3beb7c5-02c8-45b5-85ce-ca53bacd8b61"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/544916f30252"]}}
{"level":"debug","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d465230c-d6af-44f9-85e9-a5ad6729e347","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/544916f30252"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c3beb7c5-02c8-45b5-85ce-ca53bacd8b61"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2e9425a8-e67e-49b7-8794-a9d0dfce4a66","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"99e6a9db3c4e960919e9e307f2a4053ca26445b6de28170f37f2d70aaaf29d77"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3ee067.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d465230c-d6af-44f9-85e9-a5ad6729e347","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d465230c-d6af-44f9-85e9-a5ad6729e347","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d465230c-d6af-44f9-85e9-a5ad6729e347","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3ee067/sub-test-model-3ee067\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d465230c-d6af-44f9-85e9-a5ad6729e347","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d465230c-d6af-44f9-85e9-a5ad6729e347","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d465230c-d6af-44f9-85e9-a5ad6729e347","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d465230c-d6af-44f9-85e9-a5ad6729e347","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d465230c-d6af-44f9-85e9-a5ad6729e347","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0074d0e1-3ccc-416a-af94-b966d5a8dc9f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:44872","PortSpecifier":{"PortValue":44872}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0074d0e1-3ccc-416a-af94-b966d5a8dc9f","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-a8caec.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0074d0e1-3ccc-416a-af94-b966d5a8dc9f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:44872","PortSpecifier":{"PortValue":44872}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384564,"nanos":367203268},"http":{"id":"0074d0e1-3ccc-416a-af94-b966d5a8dc9f","method":"GET","headers":{":authority":"e2e-shared-a-a8caec.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0074d0e1-3ccc-416a-af94-b966d5a8dc9f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1EHKEttiUot5hGG5g_ghWiMdqLOKp5ndb1jmO1qimY384CNOcgNxVeR909l2A"}
{"level":"debug","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0074d0e1-3ccc-416a-af94-b966d5a8dc9f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a8caec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1EHKEttiUot5hGG5g_ghWiMdqLOKp5ndb1jmO1qimY384CNOcgNxVeR909l2A\"}"}
{"level":"debug","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0074d0e1-3ccc-416a-af94-b966d5a8dc9f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a8caec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"675b8740-1582-43ca-9d36-ae2565ada7d9","keyName":"e2e-sub-iso-d2dcc4","subscription":"e2e-a-only-85b160","tenant":"e2e-shared-a-a8caec","userId":"675b8740-1582-43ca-9d36-ae2565ada7d9","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0074d0e1-3ccc-416a-af94-b966d5a8dc9f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0074d0e1-3ccc-416a-af94-b966d5a8dc9f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0074d0e1-3ccc-416a-af94-b966d5a8dc9f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0074d0e1-3ccc-416a-af94-b966d5a8dc9f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a8caec/sub-test-model-a8caec\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0074d0e1-3ccc-416a-af94-b966d5a8dc9f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0074d0e1-3ccc-416a-af94-b966d5a8dc9f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0074d0e1-3ccc-416a-af94-b966d5a8dc9f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-85b160"}
{"level":"debug","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0074d0e1-3ccc-416a-af94-b966d5a8dc9f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0074d0e1-3ccc-416a-af94-b966d5a8dc9f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0074d0e1-3ccc-416a-af94-b966d5a8dc9f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3ee4c8a6-ef11-465b-9b0d-c7eb982a9967","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:39572","PortSpecifier":{"PortValue":39572}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3ee4c8a6-ef11-465b-9b0d-c7eb982a9967","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-3ee067.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3ee4c8a6-ef11-465b-9b0d-c7eb982a9967","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:39572","PortSpecifier":{"PortValue":39572}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384564,"nanos":397739949},"http":{"id":"3ee4c8a6-ef11-465b-9b0d-c7eb982a9967","method":"GET","headers":{":authority":"e2e-shared-b-3ee067.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3ee4c8a6-ef11-465b-9b0d-c7eb982a9967","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1S7C9A382gsksME5u_H7pbpEqyiQ78YeX3VqwKybJI0Z3uBW8v4HDPr1LUyhj"}
{"level":"debug","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3ee4c8a6-ef11-465b-9b0d-c7eb982a9967","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-3ee067.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1S7C9A382gsksME5u_H7pbpEqyiQ78YeX3VqwKybJI0Z3uBW8v4HDPr1LUyhj\"}"}
{"level":"debug","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3ee4c8a6-ef11-465b-9b0d-c7eb982a9967","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-3ee067.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"94c1de73-7499-48b0-997d-c9dc3efb5f4f","keyName":"e2e-sub-iso-76e1d7","subscription":"e2e-b-only-85b160","tenant":"e2e-shared-b-3ee067","userId":"94c1de73-7499-48b0-997d-c9dc3efb5f4f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3ee4c8a6-ef11-465b-9b0d-c7eb982a9967","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ee4c8a6-ef11-465b-9b0d-c7eb982a9967","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ee4c8a6-ef11-465b-9b0d-c7eb982a9967","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ee4c8a6-ef11-465b-9b0d-c7eb982a9967","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3ee067/sub-test-model-3ee067\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ee4c8a6-ef11-465b-9b0d-c7eb982a9967","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-85b160"}
{"level":"debug","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3ee4c8a6-ef11-465b-9b0d-c7eb982a9967","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ee4c8a6-ef11-465b-9b0d-c7eb982a9967","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ee4c8a6-ef11-465b-9b0d-c7eb982a9967","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3ee4c8a6-ef11-465b-9b0d-c7eb982a9967","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:36:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3ee4c8a6-ef11-465b-9b0d-c7eb982a9967","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:36:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"32c107cb-693d-4e0f-9b61-9d3e732913b7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:44878","PortSpecifier":{"PortValue":44878}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"32c107cb-693d-4e0f-9b61-9d3e732913b7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a8caec.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:36:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"32c107cb-693d-4e0f-9b61-9d3e732913b7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:44878","PortSpecifier":{"PortValue":44878}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384572,"nanos":451461776},"http":{"id":"32c107cb-693d-4e0f-9b61-9d3e732913b7","method":"POST","headers":{":authority":"e2e-shared-a-a8caec.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:36:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"32c107cb-693d-4e0f-9b61-9d3e732913b7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:36:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"32c107cb-693d-4e0f-9b61-9d3e732913b7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2e9425a8-e67e-49b7-8794-a9d0dfce4a66","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c3beb7c5-02c8-45b5-85ce-ca53bacd8b61"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/544916f30252"]}}
{"level":"debug","ts":"2026-07-07T00:36:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"32c107cb-693d-4e0f-9b61-9d3e732913b7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/544916f30252"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c3beb7c5-02c8-45b5-85ce-ca53bacd8b61"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2e9425a8-e67e-49b7-8794-a9d0dfce4a66","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"89930111d7925eb7ec61173298e0e3b21192640c8973625bde57210cd07a35a9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a8caec.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:36:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32c107cb-693d-4e0f-9b61-9d3e732913b7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:36:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32c107cb-693d-4e0f-9b61-9d3e732913b7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:36:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32c107cb-693d-4e0f-9b61-9d3e732913b7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a8caec/sub-test-model-a8caec\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:36:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"32c107cb-693d-4e0f-9b61-9d3e732913b7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:36:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"32c107cb-693d-4e0f-9b61-9d3e732913b7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:36:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"32c107cb-693d-4e0f-9b61-9d3e732913b7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T00:36:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"32c107cb-693d-4e0f-9b61-9d3e732913b7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:36:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"32c107cb-693d-4e0f-9b61-9d3e732913b7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:36:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"320b9076-d61a-4d3c-bb48-d77047f9ff18","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:39574","PortSpecifier":{"PortValue":39574}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"320b9076-d61a-4d3c-bb48-d77047f9ff18","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-3ee067.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:36:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"320b9076-d61a-4d3c-bb48-d77047f9ff18","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:39574","PortSpecifier":{"PortValue":39574}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384572,"nanos":484560823},"http":{"id":"320b9076-d61a-4d3c-bb48-d77047f9ff18","method":"POST","headers":{":authority":"e2e-shared-b-3ee067.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:36:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"320b9076-d61a-4d3c-bb48-d77047f9ff18","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:36:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"320b9076-d61a-4d3c-bb48-d77047f9ff18","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2e9425a8-e67e-49b7-8794-a9d0dfce4a66","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c3beb7c5-02c8-45b5-85ce-ca53bacd8b61"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/544916f30252"]}}
{"level":"debug","ts":"2026-07-07T00:36:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"320b9076-d61a-4d3c-bb48-d77047f9ff18","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/544916f30252"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c3beb7c5-02c8-45b5-85ce-ca53bacd8b61"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2e9425a8-e67e-49b7-8794-a9d0dfce4a66","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"99e6a9db3c4e960919e9e307f2a4053ca26445b6de28170f37f2d70aaaf29d77"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3ee067.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:36:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"320b9076-d61a-4d3c-bb48-d77047f9ff18","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:36:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"320b9076-d61a-4d3c-bb48-d77047f9ff18","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:36:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"320b9076-d61a-4d3c-bb48-d77047f9ff18","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3ee067/sub-test-model-3ee067\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:36:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"320b9076-d61a-4d3c-bb48-d77047f9ff18","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:36:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"320b9076-d61a-4d3c-bb48-d77047f9ff18","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:36:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"320b9076-d61a-4d3c-bb48-d77047f9ff18","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:36:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"320b9076-d61a-4d3c-bb48-d77047f9ff18","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:36:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"320b9076-d61a-4d3c-bb48-d77047f9ff18","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:36:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4f7c468a-22f4-42e8-bd8c-4279994fa4ab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:44882","PortSpecifier":{"PortValue":44882}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4f7c468a-22f4-42e8-bd8c-4279994fa4ab","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-a8caec.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:36:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4f7c468a-22f4-42e8-bd8c-4279994fa4ab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:44882","PortSpecifier":{"PortValue":44882}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384572,"nanos":519318968},"http":{"id":"4f7c468a-22f4-42e8-bd8c-4279994fa4ab","method":"POST","headers":{":authority":"e2e-shared-a-a8caec.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:36:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4f7c468a-22f4-42e8-bd8c-4279994fa4ab","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-d4ahGJhe6mED2QvZ_QTLzGFUyDsrZELJ34YZgcy6MfMd2D6wiCXFlByOdc9s"}
{"level":"debug","ts":"2026-07-07T00:36:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4f7c468a-22f4-42e8-bd8c-4279994fa4ab","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a8caec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-d4ahGJhe6mED2QvZ_QTLzGFUyDsrZELJ34YZgcy6MfMd2D6wiCXFlByOdc9s\"}"}
{"level":"debug","ts":"2026-07-07T00:36:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4f7c468a-22f4-42e8-bd8c-4279994fa4ab","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a8caec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"203cd8a0-0a3c-4960-a190-dd3ecbec51a1","keyName":"e2e-sub-iso-3acf1d","subscription":"e2e-shared-sub-91d623","tenant":"e2e-shared-a-a8caec","userId":"203cd8a0-0a3c-4960-a190-dd3ecbec51a1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:36:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4f7c468a-22f4-42e8-bd8c-4279994fa4ab","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:36:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f7c468a-22f4-42e8-bd8c-4279994fa4ab","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:36:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f7c468a-22f4-42e8-bd8c-4279994fa4ab","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:36:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f7c468a-22f4-42e8-bd8c-4279994fa4ab","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a8caec/sub-test-model-a8caec\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:36:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f7c468a-22f4-42e8-bd8c-4279994fa4ab","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:36:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4f7c468a-22f4-42e8-bd8c-4279994fa4ab","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T00:36:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f7c468a-22f4-42e8-bd8c-4279994fa4ab","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-91d623"}
{"level":"debug","ts":"2026-07-07T00:36:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f7c468a-22f4-42e8-bd8c-4279994fa4ab","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:36:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4f7c468a-22f4-42e8-bd8c-4279994fa4ab","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:36:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4f7c468a-22f4-42e8-bd8c-4279994fa4ab","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:36:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"03bcbf69-d9a0-436d-9afd-6c169d9beaaf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:39588","PortSpecifier":{"PortValue":39588}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"03bcbf69-d9a0-436d-9afd-6c169d9beaaf","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-3ee067.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:36:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"03bcbf69-d9a0-436d-9afd-6c169d9beaaf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:39588","PortSpecifier":{"PortValue":39588}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384572,"nanos":552220557},"http":{"id":"03bcbf69-d9a0-436d-9afd-6c169d9beaaf","method":"POST","headers":{":authority":"e2e-shared-b-3ee067.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:36:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"03bcbf69-d9a0-436d-9afd-6c169d9beaaf","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1aStndyEtDRbqIs5a_Oq2rBKO9pCVRW9sNelw5Bw8yCydCNf6QtdsC2wgVedR"}
{"level":"debug","ts":"2026-07-07T00:36:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"03bcbf69-d9a0-436d-9afd-6c169d9beaaf","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-3ee067.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1aStndyEtDRbqIs5a_Oq2rBKO9pCVRW9sNelw5Bw8yCydCNf6QtdsC2wgVedR\"}"}
{"level":"debug","ts":"2026-07-07T00:36:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"03bcbf69-d9a0-436d-9afd-6c169d9beaaf","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-3ee067.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7444154c-9daf-409b-b03b-42c63f52a2d5","keyName":"e2e-sub-iso-b7849d","subscription":"e2e-shared-sub-91d623","tenant":"e2e-shared-b-3ee067","userId":"7444154c-9daf-409b-b03b-42c63f52a2d5","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:36:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"03bcbf69-d9a0-436d-9afd-6c169d9beaaf","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:36:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03bcbf69-d9a0-436d-9afd-6c169d9beaaf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:36:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03bcbf69-d9a0-436d-9afd-6c169d9beaaf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:36:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03bcbf69-d9a0-436d-9afd-6c169d9beaaf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3ee067/sub-test-model-3ee067\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:36:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"03bcbf69-d9a0-436d-9afd-6c169d9beaaf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T00:36:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03bcbf69-d9a0-436d-9afd-6c169d9beaaf","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-91d623"}
{"level":"debug","ts":"2026-07-07T00:36:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03bcbf69-d9a0-436d-9afd-6c169d9beaaf","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:36:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03bcbf69-d9a0-436d-9afd-6c169d9beaaf","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T00:36:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"03bcbf69-d9a0-436d-9afd-6c169d9beaaf","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:36:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"03bcbf69-d9a0-436d-9afd-6c169d9beaaf","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:36:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0c3dacdd362132a273d5adf4d5702bda999f12928aa19000e9030253d1e90e65"}
{"level":"info","ts":"2026-07-07T00:36:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/58f2d12914346297f25edcda3fc0cfde6a456d31156e94b81bb5fe46ae1a858e"}
{"level":"info","ts":"2026-07-07T00:36:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/18907d761f5d0d2366ce4e33b8f77a2676a7ef3aeedcd43e3540a75b7a420333"}
{"level":"info","ts":"2026-07-07T00:36:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e86b1768c8c0fefe8fd7ad89dc1db93865976a939c519c4295c9b2d29e4cca65"}
{"level":"info","ts":"2026-07-07T00:36:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/851d9282c8ebc3aa8669a3b0ca443a4568e0e430e42a9e21098731547b678cde"}
{"level":"info","ts":"2026-07-07T00:36:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/31e5c3b2a9316b0f4ffc3191f35c31320762034a15ba531ca452d93990c0d3e2"}
{"level":"info","ts":"2026-07-07T00:36:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f1820403906301f6422d0596f6c7b7c0f38dd542ee8c70adfd377e7d87f9a4f7"}
{"level":"info","ts":"2026-07-07T00:36:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ca11abb9c7c9c31310de0e3dd7f2e601e94187f542574d0fbf83890fc4cc5c76"}
{"level":"info","ts":"2026-07-07T00:36:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ba3b4ff57ba3fc0cd60f4cf2125ec0c8a34350dc99088c6b5c3791fce2792049"}
{"level":"info","ts":"2026-07-07T00:36:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/635c2b37a6a31185c42b85f6d3d474913ec70696fca48836cd6353f2d80def56"}
{"level":"info","ts":"2026-07-07T00:36:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/40d6999d9c07e28ff8c443cabd38b167e2d30ce54dfaac4394b8baff93a918af"}
{"level":"info","ts":"2026-07-07T00:36:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/abf529c5af77cb9bee886cba6ea405a48eb08faf8e85e802e2369ff717d1a9ce"}
{"level":"info","ts":"2026-07-07T00:36:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0ea409fba83800356a02b1a7a190f9127ed6f54a8cb765129385b721933f07bb"}
{"level":"info","ts":"2026-07-07T00:36:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/de16bb0c24026165bf2c3d445333a520ee1a3eb0112978069965b32c004c8490"}
{"level":"info","ts":"2026-07-07T00:36:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ced73bbd155921008800c93a7c56dbc1694be05a6c83b9ae2f89722f3ebdbe58"}
{"level":"info","ts":"2026-07-07T00:36:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cee9d529e30d9b266ff182088876539f3365d22d2456bd4dc3ad6b1869bc39f6"}
{"level":"debug","ts":"2026-07-07T00:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccf7207c62b2c1f292bbd433e7f4e7bffc5cff1e920ab57d34f344ddf3dc04c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:36:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:36:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccf7207c62b2c1f292bbd433e7f4e7bffc5cff1e920ab57d34f344ddf3dc04c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccf7207c62b2c1f292bbd433e7f4e7bffc5cff1e920ab57d34f344ddf3dc04c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccf7207c62b2c1f292bbd433e7f4e7bffc5cff1e920ab57d34f344ddf3dc04c1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccf7207c62b2c1f292bbd433e7f4e7bffc5cff1e920ab57d34f344ddf3dc04c1"}
{"level":"debug","ts":"2026-07-07T00:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccf7207c62b2c1f292bbd433e7f4e7bffc5cff1e920ab57d34f344ddf3dc04c1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccf7207c62b2c1f292bbd433e7f4e7bffc5cff1e920ab57d34f344ddf3dc04c1"}
{"level":"debug","ts":"2026-07-07T00:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccf7207c62b2c1f292bbd433e7f4e7bffc5cff1e920ab57d34f344ddf3dc04c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:36:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:36:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ccf7207c62b2c1f292bbd433e7f4e7bffc5cff1e920ab57d34f344ddf3dc04c1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccf7207c62b2c1f292bbd433e7f4e7bffc5cff1e920ab57d34f344ddf3dc04c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccf7207c62b2c1f292bbd433e7f4e7bffc5cff1e920ab57d34f344ddf3dc04c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:36:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:36:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccf7207c62b2c1f292bbd433e7f4e7bffc5cff1e920ab57d34f344ddf3dc04c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccf7207c62b2c1f292bbd433e7f4e7bffc5cff1e920ab57d34f344ddf3dc04c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccf7207c62b2c1f292bbd433e7f4e7bffc5cff1e920ab57d34f344ddf3dc04c1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccf7207c62b2c1f292bbd433e7f4e7bffc5cff1e920ab57d34f344ddf3dc04c1"}
{"level":"debug","ts":"2026-07-07T00:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccf7207c62b2c1f292bbd433e7f4e7bffc5cff1e920ab57d34f344ddf3dc04c1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccf7207c62b2c1f292bbd433e7f4e7bffc5cff1e920ab57d34f344ddf3dc04c1"}
{"level":"debug","ts":"2026-07-07T00:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccf7207c62b2c1f292bbd433e7f4e7bffc5cff1e920ab57d34f344ddf3dc04c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:36:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:36:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ccf7207c62b2c1f292bbd433e7f4e7bffc5cff1e920ab57d34f344ddf3dc04c1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccf7207c62b2c1f292bbd433e7f4e7bffc5cff1e920ab57d34f344ddf3dc04c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccf7207c62b2c1f292bbd433e7f4e7bffc5cff1e920ab57d34f344ddf3dc04c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d54b11f7315e472f2fe9a3f4250cc17061b2f1f4c830482ac878dc8aaf106539","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:36:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:36:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d54b11f7315e472f2fe9a3f4250cc17061b2f1f4c830482ac878dc8aaf106539","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d54b11f7315e472f2fe9a3f4250cc17061b2f1f4c830482ac878dc8aaf106539","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccf7207c62b2c1f292bbd433e7f4e7bffc5cff1e920ab57d34f344ddf3dc04c1"}
{"level":"debug","ts":"2026-07-07T00:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d54b11f7315e472f2fe9a3f4250cc17061b2f1f4c830482ac878dc8aaf106539","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:36:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:36:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d54b11f7315e472f2fe9a3f4250cc17061b2f1f4c830482ac878dc8aaf106539","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d54b11f7315e472f2fe9a3f4250cc17061b2f1f4c830482ac878dc8aaf106539","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d54b11f7315e472f2fe9a3f4250cc17061b2f1f4c830482ac878dc8aaf106539"}
{"level":"debug","ts":"2026-07-07T00:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d54b11f7315e472f2fe9a3f4250cc17061b2f1f4c830482ac878dc8aaf106539","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d54b11f7315e472f2fe9a3f4250cc17061b2f1f4c830482ac878dc8aaf106539"}
{"level":"debug","ts":"2026-07-07T00:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d54b11f7315e472f2fe9a3f4250cc17061b2f1f4c830482ac878dc8aaf106539","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:36:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:36:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d54b11f7315e472f2fe9a3f4250cc17061b2f1f4c830482ac878dc8aaf106539"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d54b11f7315e472f2fe9a3f4250cc17061b2f1f4c830482ac878dc8aaf106539","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d54b11f7315e472f2fe9a3f4250cc17061b2f1f4c830482ac878dc8aaf106539","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:36:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:36:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d54b11f7315e472f2fe9a3f4250cc17061b2f1f4c830482ac878dc8aaf106539","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d54b11f7315e472f2fe9a3f4250cc17061b2f1f4c830482ac878dc8aaf106539","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d54b11f7315e472f2fe9a3f4250cc17061b2f1f4c830482ac878dc8aaf106539","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d54b11f7315e472f2fe9a3f4250cc17061b2f1f4c830482ac878dc8aaf106539"}
{"level":"debug","ts":"2026-07-07T00:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d54b11f7315e472f2fe9a3f4250cc17061b2f1f4c830482ac878dc8aaf106539","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d54b11f7315e472f2fe9a3f4250cc17061b2f1f4c830482ac878dc8aaf106539"}
{"level":"debug","ts":"2026-07-07T00:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d54b11f7315e472f2fe9a3f4250cc17061b2f1f4c830482ac878dc8aaf106539","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:36:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:36:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d54b11f7315e472f2fe9a3f4250cc17061b2f1f4c830482ac878dc8aaf106539"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d54b11f7315e472f2fe9a3f4250cc17061b2f1f4c830482ac878dc8aaf106539","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d54b11f7315e472f2fe9a3f4250cc17061b2f1f4c830482ac878dc8aaf106539","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:36:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:36:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d54b11f7315e472f2fe9a3f4250cc17061b2f1f4c830482ac878dc8aaf106539","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d54b11f7315e472f2fe9a3f4250cc17061b2f1f4c830482ac878dc8aaf106539","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d54b11f7315e472f2fe9a3f4250cc17061b2f1f4c830482ac878dc8aaf106539","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d54b11f7315e472f2fe9a3f4250cc17061b2f1f4c830482ac878dc8aaf106539"}
{"level":"debug","ts":"2026-07-07T00:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d54b11f7315e472f2fe9a3f4250cc17061b2f1f4c830482ac878dc8aaf106539","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d54b11f7315e472f2fe9a3f4250cc17061b2f1f4c830482ac878dc8aaf106539"}
{"level":"debug","ts":"2026-07-07T00:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3f40389edae1f4dc3d01b1c7bdfe3362219cb32477d314b07d311032c8a9949","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:36:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:36:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3f40389edae1f4dc3d01b1c7bdfe3362219cb32477d314b07d311032c8a9949","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3f40389edae1f4dc3d01b1c7bdfe3362219cb32477d314b07d311032c8a9949","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:36:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:36:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3f40389edae1f4dc3d01b1c7bdfe3362219cb32477d314b07d311032c8a9949"}
{"level":"info","ts":"2026-07-07T00:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3f40389edae1f4dc3d01b1c7bdfe3362219cb32477d314b07d311032c8a9949","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3f40389edae1f4dc3d01b1c7bdfe3362219cb32477d314b07d311032c8a9949","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:36:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:36:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T00:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a3f40389edae1f4dc3d01b1c7bdfe3362219cb32477d314b07d311032c8a9949","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a3f40389edae1f4dc3d01b1c7bdfe3362219cb32477d314b07d311032c8a9949\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d54b11f7315e472f2fe9a3f4250cc17061b2f1f4c830482ac878dc8aaf106539","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:36:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:36:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d54b11f7315e472f2fe9a3f4250cc17061b2f1f4c830482ac878dc8aaf106539"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3f40389edae1f4dc3d01b1c7bdfe3362219cb32477d314b07d311032c8a9949"}
{"level":"info","ts":"2026-07-07T00:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d54b11f7315e472f2fe9a3f4250cc17061b2f1f4c830482ac878dc8aaf106539","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3f40389edae1f4dc3d01b1c7bdfe3362219cb32477d314b07d311032c8a9949","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d54b11f7315e472f2fe9a3f4250cc17061b2f1f4c830482ac878dc8aaf106539","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3f40389edae1f4dc3d01b1c7bdfe3362219cb32477d314b07d311032c8a9949"}
{"level":"info","ts":"2026-07-07T00:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d54b11f7315e472f2fe9a3f4250cc17061b2f1f4c830482ac878dc8aaf106539"}
{"level":"debug","ts":"2026-07-07T00:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3f40389edae1f4dc3d01b1c7bdfe3362219cb32477d314b07d311032c8a9949","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:36:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:36:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a3f40389edae1f4dc3d01b1c7bdfe3362219cb32477d314b07d311032c8a9949"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3f40389edae1f4dc3d01b1c7bdfe3362219cb32477d314b07d311032c8a9949","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4977562fd39254e5d07857591110afa57b26094fbfaf46f710fad9939ff96453","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:36:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:36:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4977562fd39254e5d07857591110afa57b26094fbfaf46f710fad9939ff96453"}
{"level":"info","ts":"2026-07-07T00:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4977562fd39254e5d07857591110afa57b26094fbfaf46f710fad9939ff96453","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3f40389edae1f4dc3d01b1c7bdfe3362219cb32477d314b07d311032c8a9949","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:36:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:36:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3f40389edae1f4dc3d01b1c7bdfe3362219cb32477d314b07d311032c8a9949","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4977562fd39254e5d07857591110afa57b26094fbfaf46f710fad9939ff96453","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:36:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:36:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4977562fd39254e5d07857591110afa57b26094fbfaf46f710fad9939ff96453"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3f40389edae1f4dc3d01b1c7bdfe3362219cb32477d314b07d311032c8a9949"}
{"level":"info","ts":"2026-07-07T00:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4977562fd39254e5d07857591110afa57b26094fbfaf46f710fad9939ff96453","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3f40389edae1f4dc3d01b1c7bdfe3362219cb32477d314b07d311032c8a9949","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:36:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:36:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a3f40389edae1f4dc3d01b1c7bdfe3362219cb32477d314b07d311032c8a9949"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4977562fd39254e5d07857591110afa57b26094fbfaf46f710fad9939ff96453"}
{"level":"info","ts":"2026-07-07T00:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3f40389edae1f4dc3d01b1c7bdfe3362219cb32477d314b07d311032c8a9949","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4977562fd39254e5d07857591110afa57b26094fbfaf46f710fad9939ff96453","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3f40389edae1f4dc3d01b1c7bdfe3362219cb32477d314b07d311032c8a9949","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:36:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:36:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3f40389edae1f4dc3d01b1c7bdfe3362219cb32477d314b07d311032c8a9949","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3f40389edae1f4dc3d01b1c7bdfe3362219cb32477d314b07d311032c8a9949","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3f40389edae1f4dc3d01b1c7bdfe3362219cb32477d314b07d311032c8a9949"}
{"level":"debug","ts":"2026-07-07T00:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3f40389edae1f4dc3d01b1c7bdfe3362219cb32477d314b07d311032c8a9949","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:36:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:36:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a3f40389edae1f4dc3d01b1c7bdfe3362219cb32477d314b07d311032c8a9949"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3f40389edae1f4dc3d01b1c7bdfe3362219cb32477d314b07d311032c8a9949","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3f40389edae1f4dc3d01b1c7bdfe3362219cb32477d314b07d311032c8a9949","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4977562fd39254e5d07857591110afa57b26094fbfaf46f710fad9939ff96453"}
{"level":"info","ts":"2026-07-07T00:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3f40389edae1f4dc3d01b1c7bdfe3362219cb32477d314b07d311032c8a9949"}
{"level":"debug","ts":"2026-07-07T00:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3109b835fffe600e0af87c3d886230a92442724564366799ae54990c6a0b608","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:36:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:36:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3109b835fffe600e0af87c3d886230a92442724564366799ae54990c6a0b608","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3109b835fffe600e0af87c3d886230a92442724564366799ae54990c6a0b608","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3109b835fffe600e0af87c3d886230a92442724564366799ae54990c6a0b608"}
{"level":"debug","ts":"2026-07-07T00:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3109b835fffe600e0af87c3d886230a92442724564366799ae54990c6a0b608","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3109b835fffe600e0af87c3d886230a92442724564366799ae54990c6a0b608","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3109b835fffe600e0af87c3d886230a92442724564366799ae54990c6a0b608"}
{"level":"debug","ts":"2026-07-07T00:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3109b835fffe600e0af87c3d886230a92442724564366799ae54990c6a0b608","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:36:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:36:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3109b835fffe600e0af87c3d886230a92442724564366799ae54990c6a0b608"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3109b835fffe600e0af87c3d886230a92442724564366799ae54990c6a0b608","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3109b835fffe600e0af87c3d886230a92442724564366799ae54990c6a0b608","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:36:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:36:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3109b835fffe600e0af87c3d886230a92442724564366799ae54990c6a0b608","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3109b835fffe600e0af87c3d886230a92442724564366799ae54990c6a0b608","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3109b835fffe600e0af87c3d886230a92442724564366799ae54990c6a0b608","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3109b835fffe600e0af87c3d886230a92442724564366799ae54990c6a0b608"}
{"level":"debug","ts":"2026-07-07T00:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3109b835fffe600e0af87c3d886230a92442724564366799ae54990c6a0b608","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3109b835fffe600e0af87c3d886230a92442724564366799ae54990c6a0b608"}
{"level":"debug","ts":"2026-07-07T00:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3109b835fffe600e0af87c3d886230a92442724564366799ae54990c6a0b608","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:36:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:36:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3109b835fffe600e0af87c3d886230a92442724564366799ae54990c6a0b608"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3109b835fffe600e0af87c3d886230a92442724564366799ae54990c6a0b608","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3109b835fffe600e0af87c3d886230a92442724564366799ae54990c6a0b608","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f22c8551dbac80dccd9d447acb679a321092119dad96ff61f7c7692b62f709ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:36:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:36:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f22c8551dbac80dccd9d447acb679a321092119dad96ff61f7c7692b62f709ca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3109b835fffe600e0af87c3d886230a92442724564366799ae54990c6a0b608"}
{"level":"debug","ts":"2026-07-07T00:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f22c8551dbac80dccd9d447acb679a321092119dad96ff61f7c7692b62f709ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:36:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:36:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f22c8551dbac80dccd9d447acb679a321092119dad96ff61f7c7692b62f709ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f22c8551dbac80dccd9d447acb679a321092119dad96ff61f7c7692b62f709ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:36:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:36:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f22c8551dbac80dccd9d447acb679a321092119dad96ff61f7c7692b62f709ca"}
{"level":"error","ts":"2026-07-07T00:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f22c8551dbac80dccd9d447acb679a321092119dad96ff61f7c7692b62f709ca","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f22c8551dbac80dccd9d447acb679a321092119dad96ff61f7c7692b62f709ca\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f22c8551dbac80dccd9d447acb679a321092119dad96ff61f7c7692b62f709ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f22c8551dbac80dccd9d447acb679a321092119dad96ff61f7c7692b62f709ca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f22c8551dbac80dccd9d447acb679a321092119dad96ff61f7c7692b62f709ca"}
{"level":"debug","ts":"2026-07-07T00:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22b60e8046452fe4874b56030feb02a4e1de992af369878c8c2c2ee8dc528656","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:36:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:36:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22b60e8046452fe4874b56030feb02a4e1de992af369878c8c2c2ee8dc528656","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22b60e8046452fe4874b56030feb02a4e1de992af369878c8c2c2ee8dc528656","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22b60e8046452fe4874b56030feb02a4e1de992af369878c8c2c2ee8dc528656","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f22c8551dbac80dccd9d447acb679a321092119dad96ff61f7c7692b62f709ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:36:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:36:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f22c8551dbac80dccd9d447acb679a321092119dad96ff61f7c7692b62f709ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22b60e8046452fe4874b56030feb02a4e1de992af369878c8c2c2ee8dc528656"}
{"level":"info","ts":"2026-07-07T00:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f22c8551dbac80dccd9d447acb679a321092119dad96ff61f7c7692b62f709ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f22c8551dbac80dccd9d447acb679a321092119dad96ff61f7c7692b62f709ca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22b60e8046452fe4874b56030feb02a4e1de992af369878c8c2c2ee8dc528656"}
{"level":"debug","ts":"2026-07-07T00:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22b60e8046452fe4874b56030feb02a4e1de992af369878c8c2c2ee8dc528656","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:36:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:36:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["22b60e8046452fe4874b56030feb02a4e1de992af369878c8c2c2ee8dc528656"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22b60e8046452fe4874b56030feb02a4e1de992af369878c8c2c2ee8dc528656","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22b60e8046452fe4874b56030feb02a4e1de992af369878c8c2c2ee8dc528656","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f22c8551dbac80dccd9d447acb679a321092119dad96ff61f7c7692b62f709ca"}
{"level":"debug","ts":"2026-07-07T00:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f468b48b194f3ec6df9df75a506cb7cc7405a53bbc8943bad17cdb73334ad812","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:36:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:36:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f468b48b194f3ec6df9df75a506cb7cc7405a53bbc8943bad17cdb73334ad812","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f468b48b194f3ec6df9df75a506cb7cc7405a53bbc8943bad17cdb73334ad812","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f468b48b194f3ec6df9df75a506cb7cc7405a53bbc8943bad17cdb73334ad812","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22b60e8046452fe4874b56030feb02a4e1de992af369878c8c2c2ee8dc528656"}
{"level":"debug","ts":"2026-07-07T00:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f468b48b194f3ec6df9df75a506cb7cc7405a53bbc8943bad17cdb73334ad812","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:36:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:36:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f468b48b194f3ec6df9df75a506cb7cc7405a53bbc8943bad17cdb73334ad812","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f468b48b194f3ec6df9df75a506cb7cc7405a53bbc8943bad17cdb73334ad812","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f468b48b194f3ec6df9df75a506cb7cc7405a53bbc8943bad17cdb73334ad812"}
{"level":"info","ts":"2026-07-07T00:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f468b48b194f3ec6df9df75a506cb7cc7405a53bbc8943bad17cdb73334ad812"}
{"level":"debug","ts":"2026-07-07T00:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f468b48b194f3ec6df9df75a506cb7cc7405a53bbc8943bad17cdb73334ad812","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:36:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:36:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f468b48b194f3ec6df9df75a506cb7cc7405a53bbc8943bad17cdb73334ad812"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f468b48b194f3ec6df9df75a506cb7cc7405a53bbc8943bad17cdb73334ad812","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f468b48b194f3ec6df9df75a506cb7cc7405a53bbc8943bad17cdb73334ad812","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:36:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f468b48b194f3ec6df9df75a506cb7cc7405a53bbc8943bad17cdb73334ad812"}
{"level":"debug","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bece1303033c8c6c80ca7b83c00aa9e82f5d62692af0cffd1c5e6ae10602309","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:37:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:37:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bece1303033c8c6c80ca7b83c00aa9e82f5d62692af0cffd1c5e6ae10602309","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bece1303033c8c6c80ca7b83c00aa9e82f5d62692af0cffd1c5e6ae10602309","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bece1303033c8c6c80ca7b83c00aa9e82f5d62692af0cffd1c5e6ae10602309","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bece1303033c8c6c80ca7b83c00aa9e82f5d62692af0cffd1c5e6ae10602309"}
{"level":"debug","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bece1303033c8c6c80ca7b83c00aa9e82f5d62692af0cffd1c5e6ae10602309","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bece1303033c8c6c80ca7b83c00aa9e82f5d62692af0cffd1c5e6ae10602309"}
{"level":"debug","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bece1303033c8c6c80ca7b83c00aa9e82f5d62692af0cffd1c5e6ae10602309","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:37:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:37:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bece1303033c8c6c80ca7b83c00aa9e82f5d62692af0cffd1c5e6ae10602309"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bece1303033c8c6c80ca7b83c00aa9e82f5d62692af0cffd1c5e6ae10602309","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bece1303033c8c6c80ca7b83c00aa9e82f5d62692af0cffd1c5e6ae10602309","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8246e7f5ed655ad8b509a9f7018f25298cda888d194d55d7486b95dad3411e80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:37:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:37:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8246e7f5ed655ad8b509a9f7018f25298cda888d194d55d7486b95dad3411e80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e09a35908b732685e52c898dbde0ef235d3ca7e5a08bf76e241c7560e04724b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:37:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:37:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bece1303033c8c6c80ca7b83c00aa9e82f5d62692af0cffd1c5e6ae10602309"}
{"level":"info","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e09a35908b732685e52c898dbde0ef235d3ca7e5a08bf76e241c7560e04724b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8246e7f5ed655ad8b509a9f7018f25298cda888d194d55d7486b95dad3411e80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:37:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:37:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8246e7f5ed655ad8b509a9f7018f25298cda888d194d55d7486b95dad3411e80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e09a35908b732685e52c898dbde0ef235d3ca7e5a08bf76e241c7560e04724b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8246e7f5ed655ad8b509a9f7018f25298cda888d194d55d7486b95dad3411e80","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8246e7f5ed655ad8b509a9f7018f25298cda888d194d55d7486b95dad3411e80"}
{"level":"debug","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8246e7f5ed655ad8b509a9f7018f25298cda888d194d55d7486b95dad3411e80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:37:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:37:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8246e7f5ed655ad8b509a9f7018f25298cda888d194d55d7486b95dad3411e80"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e09a35908b732685e52c898dbde0ef235d3ca7e5a08bf76e241c7560e04724b2"}
{"level":"info","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8246e7f5ed655ad8b509a9f7018f25298cda888d194d55d7486b95dad3411e80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e09a35908b732685e52c898dbde0ef235d3ca7e5a08bf76e241c7560e04724b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:37:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:37:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e09a35908b732685e52c898dbde0ef235d3ca7e5a08bf76e241c7560e04724b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e09a35908b732685e52c898dbde0ef235d3ca7e5a08bf76e241c7560e04724b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8246e7f5ed655ad8b509a9f7018f25298cda888d194d55d7486b95dad3411e80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:37:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:37:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8246e7f5ed655ad8b509a9f7018f25298cda888d194d55d7486b95dad3411e80"}
{"level":"info","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8246e7f5ed655ad8b509a9f7018f25298cda888d194d55d7486b95dad3411e80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e09a35908b732685e52c898dbde0ef235d3ca7e5a08bf76e241c7560e04724b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:37:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:37:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e09a35908b732685e52c898dbde0ef235d3ca7e5a08bf76e241c7560e04724b2"}
{"level":"info","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e09a35908b732685e52c898dbde0ef235d3ca7e5a08bf76e241c7560e04724b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8246e7f5ed655ad8b509a9f7018f25298cda888d194d55d7486b95dad3411e80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70059770f7866cccc08674355536c746ad36d68d560a52606e7b915a85e2b2d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:37:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:37:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70059770f7866cccc08674355536c746ad36d68d560a52606e7b915a85e2b2d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e09a35908b732685e52c898dbde0ef235d3ca7e5a08bf76e241c7560e04724b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:37:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:37:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e09a35908b732685e52c898dbde0ef235d3ca7e5a08bf76e241c7560e04724b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8246e7f5ed655ad8b509a9f7018f25298cda888d194d55d7486b95dad3411e80"}
{"level":"info","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e09a35908b732685e52c898dbde0ef235d3ca7e5a08bf76e241c7560e04724b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb162ba1c25892aba0d612281f1b88903c8dd396c7b430bac0f01bfb01a298a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:37:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:37:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70059770f7866cccc08674355536c746ad36d68d560a52606e7b915a85e2b2d8"}
{"level":"info","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb162ba1c25892aba0d612281f1b88903c8dd396c7b430bac0f01bfb01a298a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8246e7f5ed655ad8b509a9f7018f25298cda888d194d55d7486b95dad3411e80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:37:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:37:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8246e7f5ed655ad8b509a9f7018f25298cda888d194d55d7486b95dad3411e80"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8246e7f5ed655ad8b509a9f7018f25298cda888d194d55d7486b95dad3411e80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70059770f7866cccc08674355536c746ad36d68d560a52606e7b915a85e2b2d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:37:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:37:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70059770f7866cccc08674355536c746ad36d68d560a52606e7b915a85e2b2d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e09a35908b732685e52c898dbde0ef235d3ca7e5a08bf76e241c7560e04724b2"}
{"level":"info","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70059770f7866cccc08674355536c746ad36d68d560a52606e7b915a85e2b2d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e09a35908b732685e52c898dbde0ef235d3ca7e5a08bf76e241c7560e04724b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb162ba1c25892aba0d612281f1b88903c8dd396c7b430bac0f01bfb01a298a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:37:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:37:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb162ba1c25892aba0d612281f1b88903c8dd396c7b430bac0f01bfb01a298a2"}
{"level":"info","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb162ba1c25892aba0d612281f1b88903c8dd396c7b430bac0f01bfb01a298a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8246e7f5ed655ad8b509a9f7018f25298cda888d194d55d7486b95dad3411e80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:37:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:37:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8246e7f5ed655ad8b509a9f7018f25298cda888d194d55d7486b95dad3411e80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70059770f7866cccc08674355536c746ad36d68d560a52606e7b915a85e2b2d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89d0eb184d16fea6083582fbeee94811ce60dcc53506432af7459a71255d98c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:37:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:37:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8246e7f5ed655ad8b509a9f7018f25298cda888d194d55d7486b95dad3411e80"}
{"level":"info","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89d0eb184d16fea6083582fbeee94811ce60dcc53506432af7459a71255d98c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb162ba1c25892aba0d612281f1b88903c8dd396c7b430bac0f01bfb01a298a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:37:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:37:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb162ba1c25892aba0d612281f1b88903c8dd396c7b430bac0f01bfb01a298a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70059770f7866cccc08674355536c746ad36d68d560a52606e7b915a85e2b2d8"}
{"level":"info","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb162ba1c25892aba0d612281f1b88903c8dd396c7b430bac0f01bfb01a298a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8246e7f5ed655ad8b509a9f7018f25298cda888d194d55d7486b95dad3411e80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:37:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:37:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8246e7f5ed655ad8b509a9f7018f25298cda888d194d55d7486b95dad3411e80"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8246e7f5ed655ad8b509a9f7018f25298cda888d194d55d7486b95dad3411e80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89d0eb184d16fea6083582fbeee94811ce60dcc53506432af7459a71255d98c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:37:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:37:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89d0eb184d16fea6083582fbeee94811ce60dcc53506432af7459a71255d98c0"}
{"level":"info","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89d0eb184d16fea6083582fbeee94811ce60dcc53506432af7459a71255d98c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb162ba1c25892aba0d612281f1b88903c8dd396c7b430bac0f01bfb01a298a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:37:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:37:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb162ba1c25892aba0d612281f1b88903c8dd396c7b430bac0f01bfb01a298a2"}
{"level":"info","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb162ba1c25892aba0d612281f1b88903c8dd396c7b430bac0f01bfb01a298a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8246e7f5ed655ad8b509a9f7018f25298cda888d194d55d7486b95dad3411e80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:37:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:37:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8246e7f5ed655ad8b509a9f7018f25298cda888d194d55d7486b95dad3411e80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89d0eb184d16fea6083582fbeee94811ce60dcc53506432af7459a71255d98c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:37:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:37:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89d0eb184d16fea6083582fbeee94811ce60dcc53506432af7459a71255d98c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8246e7f5ed655ad8b509a9f7018f25298cda888d194d55d7486b95dad3411e80"}
{"level":"info","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89d0eb184d16fea6083582fbeee94811ce60dcc53506432af7459a71255d98c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb162ba1c25892aba0d612281f1b88903c8dd396c7b430bac0f01bfb01a298a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:37:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:37:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb162ba1c25892aba0d612281f1b88903c8dd396c7b430bac0f01bfb01a298a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89d0eb184d16fea6083582fbeee94811ce60dcc53506432af7459a71255d98c0"}
{"level":"info","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb162ba1c25892aba0d612281f1b88903c8dd396c7b430bac0f01bfb01a298a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cf208211ea0343294a4e6eb28b45acd6c3735af2e1fa8d50d9fb5459380033b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:37:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:37:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cf208211ea0343294a4e6eb28b45acd6c3735af2e1fa8d50d9fb5459380033b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8246e7f5ed655ad8b509a9f7018f25298cda888d194d55d7486b95dad3411e80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:37:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:37:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8246e7f5ed655ad8b509a9f7018f25298cda888d194d55d7486b95dad3411e80"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb162ba1c25892aba0d612281f1b88903c8dd396c7b430bac0f01bfb01a298a2"}
{"level":"info","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8246e7f5ed655ad8b509a9f7018f25298cda888d194d55d7486b95dad3411e80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89d0eb184d16fea6083582fbeee94811ce60dcc53506432af7459a71255d98c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb162ba1c25892aba0d612281f1b88903c8dd396c7b430bac0f01bfb01a298a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cf208211ea0343294a4e6eb28b45acd6c3735af2e1fa8d50d9fb5459380033b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:37:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:37:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cf208211ea0343294a4e6eb28b45acd6c3735af2e1fa8d50d9fb5459380033b"}
{"level":"info","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cf208211ea0343294a4e6eb28b45acd6c3735af2e1fa8d50d9fb5459380033b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8246e7f5ed655ad8b509a9f7018f25298cda888d194d55d7486b95dad3411e80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:37:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:37:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8246e7f5ed655ad8b509a9f7018f25298cda888d194d55d7486b95dad3411e80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cf208211ea0343294a4e6eb28b45acd6c3735af2e1fa8d50d9fb5459380033b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:37:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:37:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8cf208211ea0343294a4e6eb28b45acd6c3735af2e1fa8d50d9fb5459380033b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8246e7f5ed655ad8b509a9f7018f25298cda888d194d55d7486b95dad3411e80"}
{"level":"info","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cf208211ea0343294a4e6eb28b45acd6c3735af2e1fa8d50d9fb5459380033b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8246e7f5ed655ad8b509a9f7018f25298cda888d194d55d7486b95dad3411e80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:37:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:37:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8246e7f5ed655ad8b509a9f7018f25298cda888d194d55d7486b95dad3411e80"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8246e7f5ed655ad8b509a9f7018f25298cda888d194d55d7486b95dad3411e80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"223130b3e13743cec8f5803f7624b4a61cd8c3ea37609851f48ba1e33540c899","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:37:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:37:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89d0eb184d16fea6083582fbeee94811ce60dcc53506432af7459a71255d98c0"}
{"level":"info","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"223130b3e13743cec8f5803f7624b4a61cd8c3ea37609851f48ba1e33540c899","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cf208211ea0343294a4e6eb28b45acd6c3735af2e1fa8d50d9fb5459380033b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8246e7f5ed655ad8b509a9f7018f25298cda888d194d55d7486b95dad3411e80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"223130b3e13743cec8f5803f7624b4a61cd8c3ea37609851f48ba1e33540c899","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:37:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"223130b3e13743cec8f5803f7624b4a61cd8c3ea37609851f48ba1e33540c899","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb162ba1c25892aba0d612281f1b88903c8dd396c7b430bac0f01bfb01a298a2"}
{"level":"debug","ts":"2026-07-07T00:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"223130b3e13743cec8f5803f7624b4a61cd8c3ea37609851f48ba1e33540c899","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cf208211ea0343294a4e6eb28b45acd6c3735af2e1fa8d50d9fb5459380033b"}
{"level":"info","ts":"2026-07-07T00:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8246e7f5ed655ad8b509a9f7018f25298cda888d194d55d7486b95dad3411e80"}
{"level":"debug","ts":"2026-07-07T00:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"223130b3e13743cec8f5803f7624b4a61cd8c3ea37609851f48ba1e33540c899","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:37:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:37:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"223130b3e13743cec8f5803f7624b4a61cd8c3ea37609851f48ba1e33540c899","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"223130b3e13743cec8f5803f7624b4a61cd8c3ea37609851f48ba1e33540c899","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/223130b3e13743cec8f5803f7624b4a61cd8c3ea37609851f48ba1e33540c899"}
{"level":"info","ts":"2026-07-07T00:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/223130b3e13743cec8f5803f7624b4a61cd8c3ea37609851f48ba1e33540c899"}
{"level":"debug","ts":"2026-07-07T00:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"223130b3e13743cec8f5803f7624b4a61cd8c3ea37609851f48ba1e33540c899","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:37:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:37:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["223130b3e13743cec8f5803f7624b4a61cd8c3ea37609851f48ba1e33540c899"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"223130b3e13743cec8f5803f7624b4a61cd8c3ea37609851f48ba1e33540c899","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"223130b3e13743cec8f5803f7624b4a61cd8c3ea37609851f48ba1e33540c899","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:37:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/223130b3e13743cec8f5803f7624b4a61cd8c3ea37609851f48ba1e33540c899"}
{"level":"debug","ts":"2026-07-07T00:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"223130b3e13743cec8f5803f7624b4a61cd8c3ea37609851f48ba1e33540c899","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/223130b3e13743cec8f5803f7624b4a61cd8c3ea37609851f48ba1e33540c899"}
{"level":"debug","ts":"2026-07-07T00:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22b60e8046452fe4874b56030feb02a4e1de992af369878c8c2c2ee8dc528656","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:37:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:37:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22b60e8046452fe4874b56030feb02a4e1de992af369878c8c2c2ee8dc528656","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22b60e8046452fe4874b56030feb02a4e1de992af369878c8c2c2ee8dc528656","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22b60e8046452fe4874b56030feb02a4e1de992af369878c8c2c2ee8dc528656"}
{"level":"debug","ts":"2026-07-07T00:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22b60e8046452fe4874b56030feb02a4e1de992af369878c8c2c2ee8dc528656","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22b60e8046452fe4874b56030feb02a4e1de992af369878c8c2c2ee8dc528656"}
{"level":"debug","ts":"2026-07-07T00:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22b60e8046452fe4874b56030feb02a4e1de992af369878c8c2c2ee8dc528656","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:37:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:37:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["22b60e8046452fe4874b56030feb02a4e1de992af369878c8c2c2ee8dc528656"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22b60e8046452fe4874b56030feb02a4e1de992af369878c8c2c2ee8dc528656","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22b60e8046452fe4874b56030feb02a4e1de992af369878c8c2c2ee8dc528656","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:37:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:37:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22b60e8046452fe4874b56030feb02a4e1de992af369878c8c2c2ee8dc528656","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22b60e8046452fe4874b56030feb02a4e1de992af369878c8c2c2ee8dc528656","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22b60e8046452fe4874b56030feb02a4e1de992af369878c8c2c2ee8dc528656","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22b60e8046452fe4874b56030feb02a4e1de992af369878c8c2c2ee8dc528656"}
{"level":"debug","ts":"2026-07-07T00:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22b60e8046452fe4874b56030feb02a4e1de992af369878c8c2c2ee8dc528656","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22b60e8046452fe4874b56030feb02a4e1de992af369878c8c2c2ee8dc528656"}
{"level":"debug","ts":"2026-07-07T00:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22b60e8046452fe4874b56030feb02a4e1de992af369878c8c2c2ee8dc528656","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:37:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:37:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["22b60e8046452fe4874b56030feb02a4e1de992af369878c8c2c2ee8dc528656"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22b60e8046452fe4874b56030feb02a4e1de992af369878c8c2c2ee8dc528656","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22b60e8046452fe4874b56030feb02a4e1de992af369878c8c2c2ee8dc528656","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:37:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:37:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22b60e8046452fe4874b56030feb02a4e1de992af369878c8c2c2ee8dc528656","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22b60e8046452fe4874b56030feb02a4e1de992af369878c8c2c2ee8dc528656","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22b60e8046452fe4874b56030feb02a4e1de992af369878c8c2c2ee8dc528656","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70059770f7866cccc08674355536c746ad36d68d560a52606e7b915a85e2b2d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22b60e8046452fe4874b56030feb02a4e1de992af369878c8c2c2ee8dc528656"}
{"level":"debug","ts":"2026-07-07T00:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22b60e8046452fe4874b56030feb02a4e1de992af369878c8c2c2ee8dc528656","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:37:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:37:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["22b60e8046452fe4874b56030feb02a4e1de992af369878c8c2c2ee8dc528656"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22b60e8046452fe4874b56030feb02a4e1de992af369878c8c2c2ee8dc528656","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e09a35908b732685e52c898dbde0ef235d3ca7e5a08bf76e241c7560e04724b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22b60e8046452fe4874b56030feb02a4e1de992af369878c8c2c2ee8dc528656","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70059770f7866cccc08674355536c746ad36d68d560a52606e7b915a85e2b2d8"}
{"level":"info","ts":"2026-07-07T00:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22b60e8046452fe4874b56030feb02a4e1de992af369878c8c2c2ee8dc528656"}
{"level":"debug","ts":"2026-07-07T00:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f468b48b194f3ec6df9df75a506cb7cc7405a53bbc8943bad17cdb73334ad812","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e09a35908b732685e52c898dbde0ef235d3ca7e5a08bf76e241c7560e04724b2"}
{"level":"info","ts":"2026-07-07T00:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f468b48b194f3ec6df9df75a506cb7cc7405a53bbc8943bad17cdb73334ad812"}
{"level":"debug","ts":"2026-07-07T00:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89d0eb184d16fea6083582fbeee94811ce60dcc53506432af7459a71255d98c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:37:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:37:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89d0eb184d16fea6083582fbeee94811ce60dcc53506432af7459a71255d98c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89d0eb184d16fea6083582fbeee94811ce60dcc53506432af7459a71255d98c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8246e7f5ed655ad8b509a9f7018f25298cda888d194d55d7486b95dad3411e80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89d0eb184d16fea6083582fbeee94811ce60dcc53506432af7459a71255d98c0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89d0eb184d16fea6083582fbeee94811ce60dcc53506432af7459a71255d98c0"}
{"level":"debug","ts":"2026-07-07T00:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89d0eb184d16fea6083582fbeee94811ce60dcc53506432af7459a71255d98c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:37:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:37:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89d0eb184d16fea6083582fbeee94811ce60dcc53506432af7459a71255d98c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8246e7f5ed655ad8b509a9f7018f25298cda888d194d55d7486b95dad3411e80"}
{"level":"info","ts":"2026-07-07T00:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89d0eb184d16fea6083582fbeee94811ce60dcc53506432af7459a71255d98c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89d0eb184d16fea6083582fbeee94811ce60dcc53506432af7459a71255d98c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:37:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:37:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89d0eb184d16fea6083582fbeee94811ce60dcc53506432af7459a71255d98c0"}
{"level":"info","ts":"2026-07-07T00:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89d0eb184d16fea6083582fbeee94811ce60dcc53506432af7459a71255d98c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89d0eb184d16fea6083582fbeee94811ce60dcc53506432af7459a71255d98c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89d0eb184d16fea6083582fbeee94811ce60dcc53506432af7459a71255d98c0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89d0eb184d16fea6083582fbeee94811ce60dcc53506432af7459a71255d98c0"}
{"level":"debug","ts":"2026-07-07T00:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89d0eb184d16fea6083582fbeee94811ce60dcc53506432af7459a71255d98c0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89d0eb184d16fea6083582fbeee94811ce60dcc53506432af7459a71255d98c0"}
{"level":"debug","ts":"2026-07-07T00:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89d0eb184d16fea6083582fbeee94811ce60dcc53506432af7459a71255d98c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:37:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:37:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89d0eb184d16fea6083582fbeee94811ce60dcc53506432af7459a71255d98c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89d0eb184d16fea6083582fbeee94811ce60dcc53506432af7459a71255d98c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89d0eb184d16fea6083582fbeee94811ce60dcc53506432af7459a71255d98c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:37:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:37:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89d0eb184d16fea6083582fbeee94811ce60dcc53506432af7459a71255d98c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89d0eb184d16fea6083582fbeee94811ce60dcc53506432af7459a71255d98c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89d0eb184d16fea6083582fbeee94811ce60dcc53506432af7459a71255d98c0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89d0eb184d16fea6083582fbeee94811ce60dcc53506432af7459a71255d98c0"}
{"level":"debug","ts":"2026-07-07T00:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89d0eb184d16fea6083582fbeee94811ce60dcc53506432af7459a71255d98c0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89d0eb184d16fea6083582fbeee94811ce60dcc53506432af7459a71255d98c0"}
{"level":"debug","ts":"2026-07-07T00:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3f40389edae1f4dc3d01b1c7bdfe3362219cb32477d314b07d311032c8a9949","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3f40389edae1f4dc3d01b1c7bdfe3362219cb32477d314b07d311032c8a9949"}
{"level":"debug","ts":"2026-07-07T00:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89d0eb184d16fea6083582fbeee94811ce60dcc53506432af7459a71255d98c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:37:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:37:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89d0eb184d16fea6083582fbeee94811ce60dcc53506432af7459a71255d98c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89d0eb184d16fea6083582fbeee94811ce60dcc53506432af7459a71255d98c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89d0eb184d16fea6083582fbeee94811ce60dcc53506432af7459a71255d98c0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89d0eb184d16fea6083582fbeee94811ce60dcc53506432af7459a71255d98c0"}
{"level":"debug","ts":"2026-07-07T00:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb162ba1c25892aba0d612281f1b88903c8dd396c7b430bac0f01bfb01a298a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:37:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:37:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb162ba1c25892aba0d612281f1b88903c8dd396c7b430bac0f01bfb01a298a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb162ba1c25892aba0d612281f1b88903c8dd396c7b430bac0f01bfb01a298a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f22c8551dbac80dccd9d447acb679a321092119dad96ff61f7c7692b62f709ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb162ba1c25892aba0d612281f1b88903c8dd396c7b430bac0f01bfb01a298a2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb162ba1c25892aba0d612281f1b88903c8dd396c7b430bac0f01bfb01a298a2"}
{"level":"debug","ts":"2026-07-07T00:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3109b835fffe600e0af87c3d886230a92442724564366799ae54990c6a0b608","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb162ba1c25892aba0d612281f1b88903c8dd396c7b430bac0f01bfb01a298a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:37:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:37:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb162ba1c25892aba0d612281f1b88903c8dd396c7b430bac0f01bfb01a298a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f22c8551dbac80dccd9d447acb679a321092119dad96ff61f7c7692b62f709ca"}
{"level":"info","ts":"2026-07-07T00:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb162ba1c25892aba0d612281f1b88903c8dd396c7b430bac0f01bfb01a298a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb162ba1c25892aba0d612281f1b88903c8dd396c7b430bac0f01bfb01a298a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:37:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:37:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb162ba1c25892aba0d612281f1b88903c8dd396c7b430bac0f01bfb01a298a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb162ba1c25892aba0d612281f1b88903c8dd396c7b430bac0f01bfb01a298a2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb162ba1c25892aba0d612281f1b88903c8dd396c7b430bac0f01bfb01a298a2"}
{"level":"debug","ts":"2026-07-07T00:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb162ba1c25892aba0d612281f1b88903c8dd396c7b430bac0f01bfb01a298a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:37:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:37:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb162ba1c25892aba0d612281f1b88903c8dd396c7b430bac0f01bfb01a298a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb162ba1c25892aba0d612281f1b88903c8dd396c7b430bac0f01bfb01a298a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb162ba1c25892aba0d612281f1b88903c8dd396c7b430bac0f01bfb01a298a2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3109b835fffe600e0af87c3d886230a92442724564366799ae54990c6a0b608"}
{"level":"debug","ts":"2026-07-07T00:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cf208211ea0343294a4e6eb28b45acd6c3735af2e1fa8d50d9fb5459380033b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb162ba1c25892aba0d612281f1b88903c8dd396c7b430bac0f01bfb01a298a2"}
{"level":"debug","ts":"2026-07-07T00:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94f4f4b57e09a938a00b7d44a5a50f6ed5768e5535ecfa6f8cdf12a1a33406cd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cf208211ea0343294a4e6eb28b45acd6c3735af2e1fa8d50d9fb5459380033b"}
{"level":"debug","ts":"2026-07-07T00:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bece1303033c8c6c80ca7b83c00aa9e82f5d62692af0cffd1c5e6ae10602309","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94f4f4b57e09a938a00b7d44a5a50f6ed5768e5535ecfa6f8cdf12a1a33406cd"}
{"level":"info","ts":"2026-07-07T00:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bece1303033c8c6c80ca7b83c00aa9e82f5d62692af0cffd1c5e6ae10602309"}
{"level":"debug","ts":"2026-07-07T00:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccf7207c62b2c1f292bbd433e7f4e7bffc5cff1e920ab57d34f344ddf3dc04c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:37:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:37:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccf7207c62b2c1f292bbd433e7f4e7bffc5cff1e920ab57d34f344ddf3dc04c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccf7207c62b2c1f292bbd433e7f4e7bffc5cff1e920ab57d34f344ddf3dc04c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89930111d7925eb7ec61173298e0e3b21192640c8973625bde57210cd07a35a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccf7207c62b2c1f292bbd433e7f4e7bffc5cff1e920ab57d34f344ddf3dc04c1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccf7207c62b2c1f292bbd433e7f4e7bffc5cff1e920ab57d34f344ddf3dc04c1"}
{"level":"debug","ts":"2026-07-07T00:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bdd1cbfa23c89d5898f2844375aa15153d86264dfd03b68d3ed6bbbc7cfcd26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccf7207c62b2c1f292bbd433e7f4e7bffc5cff1e920ab57d34f344ddf3dc04c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:37:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:37:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ccf7207c62b2c1f292bbd433e7f4e7bffc5cff1e920ab57d34f344ddf3dc04c1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89930111d7925eb7ec61173298e0e3b21192640c8973625bde57210cd07a35a9"}
{"level":"info","ts":"2026-07-07T00:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccf7207c62b2c1f292bbd433e7f4e7bffc5cff1e920ab57d34f344ddf3dc04c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4977562fd39254e5d07857591110afa57b26094fbfaf46f710fad9939ff96453","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccf7207c62b2c1f292bbd433e7f4e7bffc5cff1e920ab57d34f344ddf3dc04c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T00:37:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T00:37:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccf7207c62b2c1f292bbd433e7f4e7bffc5cff1e920ab57d34f344ddf3dc04c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99e6a9db3c4e960919e9e307f2a4053ca26445b6de28170f37f2d70aaaf29d77","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccf7207c62b2c1f292bbd433e7f4e7bffc5cff1e920ab57d34f344ddf3dc04c1"}
{"level":"debug","ts":"2026-07-07T00:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccf7207c62b2c1f292bbd433e7f4e7bffc5cff1e920ab57d34f344ddf3dc04c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:37:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:37:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ccf7207c62b2c1f292bbd433e7f4e7bffc5cff1e920ab57d34f344ddf3dc04c1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T00:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccf7207c62b2c1f292bbd433e7f4e7bffc5cff1e920ab57d34f344ddf3dc04c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccf7207c62b2c1f292bbd433e7f4e7bffc5cff1e920ab57d34f344ddf3dc04c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T00:37:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T00:37:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ccf7207c62b2c1f292bbd433e7f4e7bffc5cff1e920ab57d34f344ddf3dc04c1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T00:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ccf7207c62b2c1f292bbd433e7f4e7bffc5cff1e920ab57d34f344ddf3dc04c1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ccf7207c62b2c1f292bbd433e7f4e7bffc5cff1e920ab57d34f344ddf3dc04c1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T00:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccf7207c62b2c1f292bbd433e7f4e7bffc5cff1e920ab57d34f344ddf3dc04c1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bdd1cbfa23c89d5898f2844375aa15153d86264dfd03b68d3ed6bbbc7cfcd26"}
{"level":"debug","ts":"2026-07-07T00:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccf7207c62b2c1f292bbd433e7f4e7bffc5cff1e920ab57d34f344ddf3dc04c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T00:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d54b11f7315e472f2fe9a3f4250cc17061b2f1f4c830482ac878dc8aaf106539","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T00:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4977562fd39254e5d07857591110afa57b26094fbfaf46f710fad9939ff96453"}
{"level":"info","ts":"2026-07-07T00:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99e6a9db3c4e960919e9e307f2a4053ca26445b6de28170f37f2d70aaaf29d77"}
{"level":"info","ts":"2026-07-07T00:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccf7207c62b2c1f292bbd433e7f4e7bffc5cff1e920ab57d34f344ddf3dc04c1"}
{"level":"info","ts":"2026-07-07T00:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d54b11f7315e472f2fe9a3f4250cc17061b2f1f4c830482ac878dc8aaf106539"}
{"level":"info","ts":"2026-07-07T00:37:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"25da2531-2f87-45a8-9bfb-741608ea7f14","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:33828","PortSpecifier":{"PortValue":33828}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"25da2531-2f87-45a8-9bfb-741608ea7f14","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a8caec.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:37:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"25da2531-2f87-45a8-9bfb-741608ea7f14","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:33828","PortSpecifier":{"PortValue":33828}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384656,"nanos":630593291},"http":{"id":"25da2531-2f87-45a8-9bfb-741608ea7f14","method":"POST","headers":{":authority":"e2e-shared-a-a8caec.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:37:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"25da2531-2f87-45a8-9bfb-741608ea7f14","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:37:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"25da2531-2f87-45a8-9bfb-741608ea7f14","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2e9425a8-e67e-49b7-8794-a9d0dfce4a66","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c3beb7c5-02c8-45b5-85ce-ca53bacd8b61"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/544916f30252"]}}
{"level":"debug","ts":"2026-07-07T00:37:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"25da2531-2f87-45a8-9bfb-741608ea7f14","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/544916f30252"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c3beb7c5-02c8-45b5-85ce-ca53bacd8b61"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2e9425a8-e67e-49b7-8794-a9d0dfce4a66","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"89930111d7925eb7ec61173298e0e3b21192640c8973625bde57210cd07a35a9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a8caec.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:37:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"25da2531-2f87-45a8-9bfb-741608ea7f14","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:37:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"25da2531-2f87-45a8-9bfb-741608ea7f14","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:37:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"25da2531-2f87-45a8-9bfb-741608ea7f14","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a8caec/rate-test-model-a8caec\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:37:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"25da2531-2f87-45a8-9bfb-741608ea7f14","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:37:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"25da2531-2f87-45a8-9bfb-741608ea7f14","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:37:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"25da2531-2f87-45a8-9bfb-741608ea7f14","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:37:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"25da2531-2f87-45a8-9bfb-741608ea7f14","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:37:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"25da2531-2f87-45a8-9bfb-741608ea7f14","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:37:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fcc79c09-d7b8-9222-8968-8bb58023fd51","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:50414","PortSpecifier":{"PortValue":50414}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fcc79c09-d7b8-9222-8968-8bb58023fd51","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-3ee067.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:37:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fcc79c09-d7b8-9222-8968-8bb58023fd51","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:50414","PortSpecifier":{"PortValue":50414}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384656,"nanos":676737790},"http":{"id":"fcc79c09-d7b8-9222-8968-8bb58023fd51","method":"POST","headers":{":authority":"e2e-shared-b-3ee067.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:37:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fcc79c09-d7b8-9222-8968-8bb58023fd51","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:37:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fcc79c09-d7b8-9222-8968-8bb58023fd51","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2e9425a8-e67e-49b7-8794-a9d0dfce4a66","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c3beb7c5-02c8-45b5-85ce-ca53bacd8b61"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/544916f30252"]}}
{"level":"debug","ts":"2026-07-07T00:37:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fcc79c09-d7b8-9222-8968-8bb58023fd51","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/544916f30252"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c3beb7c5-02c8-45b5-85ce-ca53bacd8b61"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2e9425a8-e67e-49b7-8794-a9d0dfce4a66","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"99e6a9db3c4e960919e9e307f2a4053ca26445b6de28170f37f2d70aaaf29d77"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3ee067.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:37:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fcc79c09-d7b8-9222-8968-8bb58023fd51","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:37:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fcc79c09-d7b8-9222-8968-8bb58023fd51","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:37:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fcc79c09-d7b8-9222-8968-8bb58023fd51","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3ee067/rate-test-model-3ee067\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:37:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fcc79c09-d7b8-9222-8968-8bb58023fd51","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:37:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fcc79c09-d7b8-9222-8968-8bb58023fd51","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:37:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fcc79c09-d7b8-9222-8968-8bb58023fd51","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:37:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fcc79c09-d7b8-9222-8968-8bb58023fd51","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:37:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fcc79c09-d7b8-9222-8968-8bb58023fd51","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:37:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"016f1bdd-90d3-4bd0-92c2-935bb6da6a96","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:33830","PortSpecifier":{"PortValue":33830}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"016f1bdd-90d3-4bd0-92c2-935bb6da6a96","method":"POST","path":"/ai-tenant-e2e-shared-a-a8caec/rate-test-model-a8caec/v1/completions","host":"e2e-shared-a-a8caec.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:37:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"016f1bdd-90d3-4bd0-92c2-935bb6da6a96","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:33830","PortSpecifier":{"PortValue":33830}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384656,"nanos":718023897},"http":{"id":"016f1bdd-90d3-4bd0-92c2-935bb6da6a96","method":"POST","headers":{":authority":"e2e-shared-a-a8caec.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a8caec/rate-test-model-a8caec/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:37:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"016f1bdd-90d3-4bd0-92c2-935bb6da6a96","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-x9shfJhbkxQloIiv_BH0T9a1qRHr1tsppeHb9hdfDxrwleEAHnFupAuqxrZq"}
{"level":"debug","ts":"2026-07-07T00:37:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"016f1bdd-90d3-4bd0-92c2-935bb6da6a96","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a8caec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-x9shfJhbkxQloIiv_BH0T9a1qRHr1tsppeHb9hdfDxrwleEAHnFupAuqxrZq\"}"}
{"level":"debug","ts":"2026-07-07T00:37:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"016f1bdd-90d3-4bd0-92c2-935bb6da6a96","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a8caec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6ae01aef-f838-45d2-b884-452b96c0fbb2","keyName":"e2e-rate-a-bff77e","subscription":"e2e-rate-iso-a-bff77e","tenant":"e2e-shared-a-a8caec","userId":"6ae01aef-f838-45d2-b884-452b96c0fbb2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:37:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"016f1bdd-90d3-4bd0-92c2-935bb6da6a96","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a8caec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a8caec/rate-test-model-a8caec\",\"requestedSubscription\":\"e2e-rate-iso-a-bff77e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T00:37:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"016f1bdd-90d3-4bd0-92c2-935bb6da6a96","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a8caec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a8caec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bff77e","namespace":"ai-tenant-e2e-shared-a-a8caec","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T00:37:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"016f1bdd-90d3-4bd0-92c2-935bb6da6a96","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:37:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"016f1bdd-90d3-4bd0-92c2-935bb6da6a96","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:37:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"016f1bdd-90d3-4bd0-92c2-935bb6da6a96","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:37:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"016f1bdd-90d3-4bd0-92c2-935bb6da6a96","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a8caec/rate-test-model-a8caec\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:37:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"016f1bdd-90d3-4bd0-92c2-935bb6da6a96","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:37:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"016f1bdd-90d3-4bd0-92c2-935bb6da6a96","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:37:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"016f1bdd-90d3-4bd0-92c2-935bb6da6a96","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-bff77e"}
{"level":"debug","ts":"2026-07-07T00:37:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"016f1bdd-90d3-4bd0-92c2-935bb6da6a96","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:37:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"016f1bdd-90d3-4bd0-92c2-935bb6da6a96","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6ae01aef-f838-45d2-b884-452b96c0fbb2","keyName":"e2e-rate-a-bff77e","selected_subscription":"e2e-rate-iso-a-bff77e","selected_subscription_key":"ai-tenant-e2e-shared-a-a8caec/e2e-rate-iso-a-bff77e@ai-tenant-e2e-shared-a-a8caec/rate-test-model-a8caec","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a8caec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bff77e","namespace":"ai-tenant-e2e-shared-a-a8caec","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T00:37:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"016f1bdd-90d3-4bd0-92c2-935bb6da6a96","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:37:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"016f1bdd-90d3-4bd0-92c2-935bb6da6a96","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:37:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5393a1e1-0d01-4644-9cf5-d0d7d5788fae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:33836","PortSpecifier":{"PortValue":33836}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5393a1e1-0d01-4644-9cf5-d0d7d5788fae","method":"POST","path":"/ai-tenant-e2e-shared-a-a8caec/rate-test-model-a8caec/v1/completions","host":"e2e-shared-a-a8caec.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:37:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5393a1e1-0d01-4644-9cf5-d0d7d5788fae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:33836","PortSpecifier":{"PortValue":33836}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384657,"nanos":781282930},"http":{"id":"5393a1e1-0d01-4644-9cf5-d0d7d5788fae","method":"POST","headers":{":authority":"e2e-shared-a-a8caec.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a8caec/rate-test-model-a8caec/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:37:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5393a1e1-0d01-4644-9cf5-d0d7d5788fae","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-x9shfJhbkxQloIiv_BH0T9a1qRHr1tsppeHb9hdfDxrwleEAHnFupAuqxrZq"}
{"level":"debug","ts":"2026-07-07T00:37:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5393a1e1-0d01-4644-9cf5-d0d7d5788fae","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a8caec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-x9shfJhbkxQloIiv_BH0T9a1qRHr1tsppeHb9hdfDxrwleEAHnFupAuqxrZq\"}"}
{"level":"debug","ts":"2026-07-07T00:37:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5393a1e1-0d01-4644-9cf5-d0d7d5788fae","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a8caec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6ae01aef-f838-45d2-b884-452b96c0fbb2","keyName":"e2e-rate-a-bff77e","subscription":"e2e-rate-iso-a-bff77e","tenant":"e2e-shared-a-a8caec","userId":"6ae01aef-f838-45d2-b884-452b96c0fbb2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:37:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5393a1e1-0d01-4644-9cf5-d0d7d5788fae","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a8caec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a8caec/rate-test-model-a8caec\",\"requestedSubscription\":\"e2e-rate-iso-a-bff77e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T00:37:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5393a1e1-0d01-4644-9cf5-d0d7d5788fae","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a8caec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a8caec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bff77e","namespace":"ai-tenant-e2e-shared-a-a8caec","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T00:37:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5393a1e1-0d01-4644-9cf5-d0d7d5788fae","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:37:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5393a1e1-0d01-4644-9cf5-d0d7d5788fae","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:37:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5393a1e1-0d01-4644-9cf5-d0d7d5788fae","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:37:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5393a1e1-0d01-4644-9cf5-d0d7d5788fae","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a8caec/rate-test-model-a8caec\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:37:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5393a1e1-0d01-4644-9cf5-d0d7d5788fae","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:37:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5393a1e1-0d01-4644-9cf5-d0d7d5788fae","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:37:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5393a1e1-0d01-4644-9cf5-d0d7d5788fae","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-bff77e"}
{"level":"debug","ts":"2026-07-07T00:37:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5393a1e1-0d01-4644-9cf5-d0d7d5788fae","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:37:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5393a1e1-0d01-4644-9cf5-d0d7d5788fae","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6ae01aef-f838-45d2-b884-452b96c0fbb2","keyName":"e2e-rate-a-bff77e","selected_subscription":"e2e-rate-iso-a-bff77e","selected_subscription_key":"ai-tenant-e2e-shared-a-a8caec/e2e-rate-iso-a-bff77e@ai-tenant-e2e-shared-a-a8caec/rate-test-model-a8caec","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a8caec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bff77e","namespace":"ai-tenant-e2e-shared-a-a8caec","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T00:37:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5393a1e1-0d01-4644-9cf5-d0d7d5788fae","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:37:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5393a1e1-0d01-4644-9cf5-d0d7d5788fae","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:37:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3a13e573-89e4-4d96-a1d7-f9efe5a4de29","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:33852","PortSpecifier":{"PortValue":33852}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3a13e573-89e4-4d96-a1d7-f9efe5a4de29","method":"POST","path":"/ai-tenant-e2e-shared-a-a8caec/rate-test-model-a8caec/v1/completions","host":"e2e-shared-a-a8caec.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:37:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3a13e573-89e4-4d96-a1d7-f9efe5a4de29","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:33852","PortSpecifier":{"PortValue":33852}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384658,"nanos":822717899},"http":{"id":"3a13e573-89e4-4d96-a1d7-f9efe5a4de29","method":"POST","headers":{":authority":"e2e-shared-a-a8caec.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a8caec/rate-test-model-a8caec/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:37:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3a13e573-89e4-4d96-a1d7-f9efe5a4de29","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-x9shfJhbkxQloIiv_BH0T9a1qRHr1tsppeHb9hdfDxrwleEAHnFupAuqxrZq"}
{"level":"debug","ts":"2026-07-07T00:37:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3a13e573-89e4-4d96-a1d7-f9efe5a4de29","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a8caec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-x9shfJhbkxQloIiv_BH0T9a1qRHr1tsppeHb9hdfDxrwleEAHnFupAuqxrZq\"}"}
{"level":"debug","ts":"2026-07-07T00:37:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3a13e573-89e4-4d96-a1d7-f9efe5a4de29","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a8caec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6ae01aef-f838-45d2-b884-452b96c0fbb2","keyName":"e2e-rate-a-bff77e","subscription":"e2e-rate-iso-a-bff77e","tenant":"e2e-shared-a-a8caec","userId":"6ae01aef-f838-45d2-b884-452b96c0fbb2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:37:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3a13e573-89e4-4d96-a1d7-f9efe5a4de29","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a8caec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a8caec/rate-test-model-a8caec\",\"requestedSubscription\":\"e2e-rate-iso-a-bff77e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T00:37:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3a13e573-89e4-4d96-a1d7-f9efe5a4de29","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a8caec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a8caec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bff77e","namespace":"ai-tenant-e2e-shared-a-a8caec","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T00:37:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3a13e573-89e4-4d96-a1d7-f9efe5a4de29","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:37:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a13e573-89e4-4d96-a1d7-f9efe5a4de29","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:37:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a13e573-89e4-4d96-a1d7-f9efe5a4de29","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:37:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a13e573-89e4-4d96-a1d7-f9efe5a4de29","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:37:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a13e573-89e4-4d96-a1d7-f9efe5a4de29","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a8caec/rate-test-model-a8caec\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:37:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a13e573-89e4-4d96-a1d7-f9efe5a4de29","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:37:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a13e573-89e4-4d96-a1d7-f9efe5a4de29","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:37:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a13e573-89e4-4d96-a1d7-f9efe5a4de29","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-bff77e"}
{"level":"debug","ts":"2026-07-07T00:37:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a13e573-89e4-4d96-a1d7-f9efe5a4de29","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6ae01aef-f838-45d2-b884-452b96c0fbb2","keyName":"e2e-rate-a-bff77e","selected_subscription":"e2e-rate-iso-a-bff77e","selected_subscription_key":"ai-tenant-e2e-shared-a-a8caec/e2e-rate-iso-a-bff77e@ai-tenant-e2e-shared-a-a8caec/rate-test-model-a8caec","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a8caec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bff77e","namespace":"ai-tenant-e2e-shared-a-a8caec","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T00:37:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3a13e573-89e4-4d96-a1d7-f9efe5a4de29","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:37:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3a13e573-89e4-4d96-a1d7-f9efe5a4de29","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:37:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"50228372-7e8a-472c-a54b-0dc8c1ec0a02","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:46188","PortSpecifier":{"PortValue":46188}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"50228372-7e8a-472c-a54b-0dc8c1ec0a02","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a8caec.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:37:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"50228372-7e8a-472c-a54b-0dc8c1ec0a02","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:46188","PortSpecifier":{"PortValue":46188}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384669,"nanos":768440914},"http":{"id":"50228372-7e8a-472c-a54b-0dc8c1ec0a02","method":"POST","headers":{":authority":"e2e-shared-a-a8caec.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:37:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"50228372-7e8a-472c-a54b-0dc8c1ec0a02","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:37:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"50228372-7e8a-472c-a54b-0dc8c1ec0a02","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2e9425a8-e67e-49b7-8794-a9d0dfce4a66","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c3beb7c5-02c8-45b5-85ce-ca53bacd8b61"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/544916f30252"]}}
{"level":"debug","ts":"2026-07-07T00:37:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"50228372-7e8a-472c-a54b-0dc8c1ec0a02","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/544916f30252"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c3beb7c5-02c8-45b5-85ce-ca53bacd8b61"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2e9425a8-e67e-49b7-8794-a9d0dfce4a66","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"89930111d7925eb7ec61173298e0e3b21192640c8973625bde57210cd07a35a9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a8caec.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:37:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50228372-7e8a-472c-a54b-0dc8c1ec0a02","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:37:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50228372-7e8a-472c-a54b-0dc8c1ec0a02","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:37:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50228372-7e8a-472c-a54b-0dc8c1ec0a02","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a8caec/rate-test-model-a8caec\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:37:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"50228372-7e8a-472c-a54b-0dc8c1ec0a02","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:37:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50228372-7e8a-472c-a54b-0dc8c1ec0a02","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:37:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50228372-7e8a-472c-a54b-0dc8c1ec0a02","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T00:37:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"50228372-7e8a-472c-a54b-0dc8c1ec0a02","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:37:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"50228372-7e8a-472c-a54b-0dc8c1ec0a02","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:37:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b1edfa46-0100-41c6-b797-8fd4fa9e358b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:45794","PortSpecifier":{"PortValue":45794}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b1edfa46-0100-41c6-b797-8fd4fa9e358b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-3ee067.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:37:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b1edfa46-0100-41c6-b797-8fd4fa9e358b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:45794","PortSpecifier":{"PortValue":45794}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384669,"nanos":808973099},"http":{"id":"b1edfa46-0100-41c6-b797-8fd4fa9e358b","method":"POST","headers":{":authority":"e2e-shared-b-3ee067.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:37:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b1edfa46-0100-41c6-b797-8fd4fa9e358b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T00:37:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b1edfa46-0100-41c6-b797-8fd4fa9e358b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2e9425a8-e67e-49b7-8794-a9d0dfce4a66","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c3beb7c5-02c8-45b5-85ce-ca53bacd8b61"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/544916f30252"]}}
{"level":"debug","ts":"2026-07-07T00:37:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b1edfa46-0100-41c6-b797-8fd4fa9e358b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/544916f30252"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c3beb7c5-02c8-45b5-85ce-ca53bacd8b61"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2e9425a8-e67e-49b7-8794-a9d0dfce4a66","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"99e6a9db3c4e960919e9e307f2a4053ca26445b6de28170f37f2d70aaaf29d77"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-3ee067.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:37:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1edfa46-0100-41c6-b797-8fd4fa9e358b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:37:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1edfa46-0100-41c6-b797-8fd4fa9e358b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:37:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1edfa46-0100-41c6-b797-8fd4fa9e358b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3ee067/rate-test-model-3ee067\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:37:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b1edfa46-0100-41c6-b797-8fd4fa9e358b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T00:37:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b1edfa46-0100-41c6-b797-8fd4fa9e358b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:37:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b1edfa46-0100-41c6-b797-8fd4fa9e358b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T00:37:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b1edfa46-0100-41c6-b797-8fd4fa9e358b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:37:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b1edfa46-0100-41c6-b797-8fd4fa9e358b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:37:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0193e42a-5118-4a5a-a1bd-194c088b4aa6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:46202","PortSpecifier":{"PortValue":46202}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0193e42a-5118-4a5a-a1bd-194c088b4aa6","method":"POST","path":"/ai-tenant-e2e-shared-a-a8caec/rate-test-model-a8caec/v1/completions","host":"e2e-shared-a-a8caec.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:37:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0193e42a-5118-4a5a-a1bd-194c088b4aa6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:46202","PortSpecifier":{"PortValue":46202}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384669,"nanos":848681809},"http":{"id":"0193e42a-5118-4a5a-a1bd-194c088b4aa6","method":"POST","headers":{":authority":"e2e-shared-a-a8caec.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a8caec/rate-test-model-a8caec/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:37:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0193e42a-5118-4a5a-a1bd-194c088b4aa6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-kQzLbhY8dGtKha6x_4wJrkKz7FhwN8SjnOQWf9imO3ivu4YRL4wHHYRykSze"}
{"level":"debug","ts":"2026-07-07T00:37:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0193e42a-5118-4a5a-a1bd-194c088b4aa6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a8caec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-kQzLbhY8dGtKha6x_4wJrkKz7FhwN8SjnOQWf9imO3ivu4YRL4wHHYRykSze\"}"}
{"level":"debug","ts":"2026-07-07T00:37:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0193e42a-5118-4a5a-a1bd-194c088b4aa6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a8caec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"bb16f049-257d-4379-ad11-1d572f2bc120","keyName":"e2e-rate-a-0a64de","subscription":"e2e-rate-iso-a-0a64de","tenant":"e2e-shared-a-a8caec","userId":"bb16f049-257d-4379-ad11-1d572f2bc120","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:37:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0193e42a-5118-4a5a-a1bd-194c088b4aa6","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a8caec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a8caec/rate-test-model-a8caec\",\"requestedSubscription\":\"e2e-rate-iso-a-0a64de\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T00:37:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0193e42a-5118-4a5a-a1bd-194c088b4aa6","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a8caec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a8caec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0a64de","namespace":"ai-tenant-e2e-shared-a-a8caec","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T00:37:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0193e42a-5118-4a5a-a1bd-194c088b4aa6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:37:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0193e42a-5118-4a5a-a1bd-194c088b4aa6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:37:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0193e42a-5118-4a5a-a1bd-194c088b4aa6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:37:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0193e42a-5118-4a5a-a1bd-194c088b4aa6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a8caec/rate-test-model-a8caec\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:37:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0193e42a-5118-4a5a-a1bd-194c088b4aa6","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:37:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0193e42a-5118-4a5a-a1bd-194c088b4aa6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:37:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0193e42a-5118-4a5a-a1bd-194c088b4aa6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-0a64de"}
{"level":"debug","ts":"2026-07-07T00:37:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0193e42a-5118-4a5a-a1bd-194c088b4aa6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:37:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0193e42a-5118-4a5a-a1bd-194c088b4aa6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"bb16f049-257d-4379-ad11-1d572f2bc120","keyName":"e2e-rate-a-0a64de","selected_subscription":"e2e-rate-iso-a-0a64de","selected_subscription_key":"ai-tenant-e2e-shared-a-a8caec/e2e-rate-iso-a-0a64de@ai-tenant-e2e-shared-a-a8caec/rate-test-model-a8caec","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a8caec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0a64de","namespace":"ai-tenant-e2e-shared-a-a8caec","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T00:37:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0193e42a-5118-4a5a-a1bd-194c088b4aa6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:37:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0193e42a-5118-4a5a-a1bd-194c088b4aa6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:37:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"616db0eb-6b40-4bfd-beb6-9bf4939379f9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:46218","PortSpecifier":{"PortValue":46218}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"616db0eb-6b40-4bfd-beb6-9bf4939379f9","method":"POST","path":"/ai-tenant-e2e-shared-a-a8caec/rate-test-model-a8caec/v1/completions","host":"e2e-shared-a-a8caec.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:37:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"616db0eb-6b40-4bfd-beb6-9bf4939379f9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:46218","PortSpecifier":{"PortValue":46218}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384670,"nanos":890112018},"http":{"id":"616db0eb-6b40-4bfd-beb6-9bf4939379f9","method":"POST","headers":{":authority":"e2e-shared-a-a8caec.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a8caec/rate-test-model-a8caec/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:37:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"616db0eb-6b40-4bfd-beb6-9bf4939379f9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-kQzLbhY8dGtKha6x_4wJrkKz7FhwN8SjnOQWf9imO3ivu4YRL4wHHYRykSze"}
{"level":"debug","ts":"2026-07-07T00:37:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"616db0eb-6b40-4bfd-beb6-9bf4939379f9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a8caec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-kQzLbhY8dGtKha6x_4wJrkKz7FhwN8SjnOQWf9imO3ivu4YRL4wHHYRykSze\"}"}
{"level":"debug","ts":"2026-07-07T00:37:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"616db0eb-6b40-4bfd-beb6-9bf4939379f9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a8caec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"bb16f049-257d-4379-ad11-1d572f2bc120","keyName":"e2e-rate-a-0a64de","subscription":"e2e-rate-iso-a-0a64de","tenant":"e2e-shared-a-a8caec","userId":"bb16f049-257d-4379-ad11-1d572f2bc120","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:37:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"616db0eb-6b40-4bfd-beb6-9bf4939379f9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a8caec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a8caec/rate-test-model-a8caec\",\"requestedSubscription\":\"e2e-rate-iso-a-0a64de\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T00:37:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"616db0eb-6b40-4bfd-beb6-9bf4939379f9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a8caec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a8caec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0a64de","namespace":"ai-tenant-e2e-shared-a-a8caec","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T00:37:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"616db0eb-6b40-4bfd-beb6-9bf4939379f9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:37:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"616db0eb-6b40-4bfd-beb6-9bf4939379f9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:37:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"616db0eb-6b40-4bfd-beb6-9bf4939379f9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:37:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"616db0eb-6b40-4bfd-beb6-9bf4939379f9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a8caec/rate-test-model-a8caec\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:37:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"616db0eb-6b40-4bfd-beb6-9bf4939379f9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:37:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"616db0eb-6b40-4bfd-beb6-9bf4939379f9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:37:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"616db0eb-6b40-4bfd-beb6-9bf4939379f9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-0a64de"}
{"level":"debug","ts":"2026-07-07T00:37:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"616db0eb-6b40-4bfd-beb6-9bf4939379f9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:37:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"616db0eb-6b40-4bfd-beb6-9bf4939379f9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"bb16f049-257d-4379-ad11-1d572f2bc120","keyName":"e2e-rate-a-0a64de","selected_subscription":"e2e-rate-iso-a-0a64de","selected_subscription_key":"ai-tenant-e2e-shared-a-a8caec/e2e-rate-iso-a-0a64de@ai-tenant-e2e-shared-a-a8caec/rate-test-model-a8caec","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a8caec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0a64de","namespace":"ai-tenant-e2e-shared-a-a8caec","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T00:37:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"616db0eb-6b40-4bfd-beb6-9bf4939379f9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:37:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"616db0eb-6b40-4bfd-beb6-9bf4939379f9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:37:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"14aa33ce-7ad4-45e9-8f7a-6aa6bca53f44","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:46228","PortSpecifier":{"PortValue":46228}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"14aa33ce-7ad4-45e9-8f7a-6aa6bca53f44","method":"POST","path":"/ai-tenant-e2e-shared-a-a8caec/rate-test-model-a8caec/v1/completions","host":"e2e-shared-a-a8caec.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:37:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"14aa33ce-7ad4-45e9-8f7a-6aa6bca53f44","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:46228","PortSpecifier":{"PortValue":46228}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384671,"nanos":929404644},"http":{"id":"14aa33ce-7ad4-45e9-8f7a-6aa6bca53f44","method":"POST","headers":{":authority":"e2e-shared-a-a8caec.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a8caec/rate-test-model-a8caec/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:37:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"14aa33ce-7ad4-45e9-8f7a-6aa6bca53f44","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-kQzLbhY8dGtKha6x_4wJrkKz7FhwN8SjnOQWf9imO3ivu4YRL4wHHYRykSze"}
{"level":"debug","ts":"2026-07-07T00:37:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"14aa33ce-7ad4-45e9-8f7a-6aa6bca53f44","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a8caec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-kQzLbhY8dGtKha6x_4wJrkKz7FhwN8SjnOQWf9imO3ivu4YRL4wHHYRykSze\"}"}
{"level":"debug","ts":"2026-07-07T00:37:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"14aa33ce-7ad4-45e9-8f7a-6aa6bca53f44","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a8caec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"bb16f049-257d-4379-ad11-1d572f2bc120","keyName":"e2e-rate-a-0a64de","subscription":"e2e-rate-iso-a-0a64de","tenant":"e2e-shared-a-a8caec","userId":"bb16f049-257d-4379-ad11-1d572f2bc120","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:37:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"14aa33ce-7ad4-45e9-8f7a-6aa6bca53f44","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a8caec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a8caec/rate-test-model-a8caec\",\"requestedSubscription\":\"e2e-rate-iso-a-0a64de\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T00:37:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"14aa33ce-7ad4-45e9-8f7a-6aa6bca53f44","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a8caec.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a8caec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0a64de","namespace":"ai-tenant-e2e-shared-a-a8caec","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T00:37:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"14aa33ce-7ad4-45e9-8f7a-6aa6bca53f44","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:37:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"14aa33ce-7ad4-45e9-8f7a-6aa6bca53f44","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:37:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"14aa33ce-7ad4-45e9-8f7a-6aa6bca53f44","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:37:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"14aa33ce-7ad4-45e9-8f7a-6aa6bca53f44","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a8caec/rate-test-model-a8caec\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:37:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"14aa33ce-7ad4-45e9-8f7a-6aa6bca53f44","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:37:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"14aa33ce-7ad4-45e9-8f7a-6aa6bca53f44","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:37:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"14aa33ce-7ad4-45e9-8f7a-6aa6bca53f44","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-0a64de"}
{"level":"debug","ts":"2026-07-07T00:37:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"14aa33ce-7ad4-45e9-8f7a-6aa6bca53f44","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:37:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"14aa33ce-7ad4-45e9-8f7a-6aa6bca53f44","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"bb16f049-257d-4379-ad11-1d572f2bc120","keyName":"e2e-rate-a-0a64de","selected_subscription":"e2e-rate-iso-a-0a64de","selected_subscription_key":"ai-tenant-e2e-shared-a-a8caec/e2e-rate-iso-a-0a64de@ai-tenant-e2e-shared-a-a8caec/rate-test-model-a8caec","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a8caec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0a64de","namespace":"ai-tenant-e2e-shared-a-a8caec","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T00:37:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"14aa33ce-7ad4-45e9-8f7a-6aa6bca53f44","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:37:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"14aa33ce-7ad4-45e9-8f7a-6aa6bca53f44","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:37:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3bb6420f-3525-4c85-aae2-1a4b15c955e4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:45796","PortSpecifier":{"PortValue":45796}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3bb6420f-3525-4c85-aae2-1a4b15c955e4","method":"POST","path":"/ai-tenant-e2e-shared-b-3ee067/rate-test-model-3ee067/v1/completions","host":"e2e-shared-b-3ee067.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T00:37:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3bb6420f-3525-4c85-aae2-1a4b15c955e4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:45796","PortSpecifier":{"PortValue":45796}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783384671,"nanos":966600536},"http":{"id":"3bb6420f-3525-4c85-aae2-1a4b15c955e4","method":"POST","headers":{":authority":"e2e-shared-b-3ee067.apps.1686d338-f59e-446e-85fe-544916f30252.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-3ee067/rate-test-model-3ee067/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:37:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3bb6420f-3525-4c85-aae2-1a4b15c955e4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1HlWWl4DAZ1hIx811_2vGHPmqhblC45omCsVe7WZ88I6LEcaZ9uCfUuJzzjqx"}
{"level":"debug","ts":"2026-07-07T00:37:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3bb6420f-3525-4c85-aae2-1a4b15c955e4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-3ee067.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1HlWWl4DAZ1hIx811_2vGHPmqhblC45omCsVe7WZ88I6LEcaZ9uCfUuJzzjqx\"}"}
{"level":"debug","ts":"2026-07-07T00:37:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3bb6420f-3525-4c85-aae2-1a4b15c955e4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-3ee067.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9d6d3bb3-5ec3-4691-9fe7-6c5b843a74f5","keyName":"e2e-rate-b-0a64de","subscription":"e2e-rate-iso-b-0a64de","tenant":"e2e-shared-b-3ee067","userId":"9d6d3bb3-5ec3-4691-9fe7-6c5b843a74f5","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T00:37:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3bb6420f-3525-4c85-aae2-1a4b15c955e4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-3ee067.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-3ee067/rate-test-model-3ee067\",\"requestedSubscription\":\"e2e-rate-iso-b-0a64de\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T00:37:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3bb6420f-3525-4c85-aae2-1a4b15c955e4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-3ee067.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-3ee067","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-0a64de","namespace":"ai-tenant-e2e-shared-b-3ee067","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T00:37:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3bb6420f-3525-4c85-aae2-1a4b15c955e4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T00:37:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3bb6420f-3525-4c85-aae2-1a4b15c955e4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:37:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3bb6420f-3525-4c85-aae2-1a4b15c955e4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:37:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3bb6420f-3525-4c85-aae2-1a4b15c955e4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-3ee067/rate-test-model-3ee067\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:37:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3bb6420f-3525-4c85-aae2-1a4b15c955e4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T00:37:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3bb6420f-3525-4c85-aae2-1a4b15c955e4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T00:37:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3bb6420f-3525-4c85-aae2-1a4b15c955e4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-0a64de"}
{"level":"debug","ts":"2026-07-07T00:37:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3bb6420f-3525-4c85-aae2-1a4b15c955e4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T00:37:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3bb6420f-3525-4c85-aae2-1a4b15c955e4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9d6d3bb3-5ec3-4691-9fe7-6c5b843a74f5","keyName":"e2e-rate-b-0a64de","selected_subscription":"e2e-rate-iso-b-0a64de","selected_subscription_key":"ai-tenant-e2e-shared-b-3ee067/e2e-rate-iso-b-0a64de@ai-tenant-e2e-shared-b-3ee067/rate-test-model-3ee067","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-3ee067","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-0a64de","namespace":"ai-tenant-e2e-shared-b-3ee067","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T00:37:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3bb6420f-3525-4c85-aae2-1a4b15c955e4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T00:37:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3bb6420f-3525-4c85-aae2-1a4b15c955e4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T00:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/89d0eb184d16fea6083582fbeee94811ce60dcc53506432af7459a71255d98c0"}
{"level":"info","ts":"2026-07-07T00:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/89930111d7925eb7ec61173298e0e3b21192640c8973625bde57210cd07a35a9"}
{"level":"info","ts":"2026-07-07T00:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c3109b835fffe600e0af87c3d886230a92442724564366799ae54990c6a0b608"}
{"level":"info","ts":"2026-07-07T00:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f22c8551dbac80dccd9d447acb679a321092119dad96ff61f7c7692b62f709ca"}
{"level":"info","ts":"2026-07-07T00:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ccf7207c62b2c1f292bbd433e7f4e7bffc5cff1e920ab57d34f344ddf3dc04c1"}
{"level":"info","ts":"2026-07-07T00:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/70059770f7866cccc08674355536c746ad36d68d560a52606e7b915a85e2b2d8"}
{"level":"info","ts":"2026-07-07T00:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/223130b3e13743cec8f5803f7624b4a61cd8c3ea37609851f48ba1e33540c899"}
{"level":"info","ts":"2026-07-07T00:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cb162ba1c25892aba0d612281f1b88903c8dd396c7b430bac0f01bfb01a298a2"}
{"level":"info","ts":"2026-07-07T00:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/22b60e8046452fe4874b56030feb02a4e1de992af369878c8c2c2ee8dc528656"}
{"level":"info","ts":"2026-07-07T00:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8cf208211ea0343294a4e6eb28b45acd6c3735af2e1fa8d50d9fb5459380033b"}
{"level":"info","ts":"2026-07-07T00:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d54b11f7315e472f2fe9a3f4250cc17061b2f1f4c830482ac878dc8aaf106539"}
{"level":"info","ts":"2026-07-07T00:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f468b48b194f3ec6df9df75a506cb7cc7405a53bbc8943bad17cdb73334ad812"}
{"level":"info","ts":"2026-07-07T00:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/94f4f4b57e09a938a00b7d44a5a50f6ed5768e5535ecfa6f8cdf12a1a33406cd"}
{"level":"info","ts":"2026-07-07T00:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a3f40389edae1f4dc3d01b1c7bdfe3362219cb32477d314b07d311032c8a9949"}
{"level":"info","ts":"2026-07-07T00:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9bece1303033c8c6c80ca7b83c00aa9e82f5d62692af0cffd1c5e6ae10602309"}
{"level":"info","ts":"2026-07-07T00:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4977562fd39254e5d07857591110afa57b26094fbfaf46f710fad9939ff96453"}
{"level":"info","ts":"2026-07-07T00:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e09a35908b732685e52c898dbde0ef235d3ca7e5a08bf76e241c7560e04724b2"}
{"level":"info","ts":"2026-07-07T00:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8246e7f5ed655ad8b509a9f7018f25298cda888d194d55d7486b95dad3411e80"}
{"level":"info","ts":"2026-07-07T00:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/99e6a9db3c4e960919e9e307f2a4053ca26445b6de28170f37f2d70aaaf29d77"}
{"level":"info","ts":"2026-07-07T00:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3bdd1cbfa23c89d5898f2844375aa15153d86264dfd03b68d3ed6bbbc7cfcd26"}