--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"debug","ts":"2026-07-27T17:02:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1cbd45aa-803b-4cc5-99be-3cedabe7c92b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f1b699/auth-test-model-f1b699\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-f1b699/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:02:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1cbd45aa-803b-4cc5-99be-3cedabe7c92b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-27T17:02:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1cbd45aa-803b-4cc5-99be-3cedabe7c92b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T17:02:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1cbd45aa-803b-4cc5-99be-3cedabe7c92b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-27T17:02:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1cbd45aa-803b-4cc5-99be-3cedabe7c92b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T17:02:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1cbd45aa-803b-4cc5-99be-3cedabe7c92b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T17:02:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"816306cb-f4f1-4dde-a040-f6bffa2b3688","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:59738","PortSpecifier":{"PortValue":59738}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"816306cb-f4f1-4dde-a040-f6bffa2b3688","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-d4529a.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T17:02:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"816306cb-f4f1-4dde-a040-f6bffa2b3688","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:59738","PortSpecifier":{"PortValue":59738}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785171750,"nanos":619467016},"http":{"id":"816306cb-f4f1-4dde-a040-f6bffa2b3688","method":"POST","headers":{":authority":"e2e-shared-b-d4529a.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T17:02:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"816306cb-f4f1-4dde-a040-f6bffa2b3688","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-27T17:02:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"816306cb-f4f1-4dde-a040-f6bffa2b3688","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"19d4fba8-6c28-4c2a-aa40-edbdeb6a848c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=809080bc-3172-467d-b414-ed0fcd1808a3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5e36e679cd16"]}}
{"level":"debug","ts":"2026-07-27T17:02:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"816306cb-f4f1-4dde-a040-f6bffa2b3688","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5e36e679cd16"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=809080bc-3172-467d-b414-ed0fcd1808a3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"19d4fba8-6c28-4c2a-aa40-edbdeb6a848c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"499f2ee74b79bef8d9452062eb130b9959f1fb529e1c3b7066cb35607df99b2d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d4529a.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T17:02:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"816306cb-f4f1-4dde-a040-f6bffa2b3688","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:02:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"816306cb-f4f1-4dde-a040-f6bffa2b3688","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:02:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"816306cb-f4f1-4dde-a040-f6bffa2b3688","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d4529a/auth-test-model-d4529a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-d4529a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:02:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"816306cb-f4f1-4dde-a040-f6bffa2b3688","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-27T17:02:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"816306cb-f4f1-4dde-a040-f6bffa2b3688","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T17:02:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"816306cb-f4f1-4dde-a040-f6bffa2b3688","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-27T17:02:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"816306cb-f4f1-4dde-a040-f6bffa2b3688","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T17:02:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"816306cb-f4f1-4dde-a040-f6bffa2b3688","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T17:02:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a65273b3-4501-4313-bbe2-06b4cffb9ebe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:59754","PortSpecifier":{"PortValue":59754}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a65273b3-4501-4313-bbe2-06b4cffb9ebe","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-d4529a.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T17:02:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a65273b3-4501-4313-bbe2-06b4cffb9ebe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:59754","PortSpecifier":{"PortValue":59754}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785171750,"nanos":666337202},"http":{"id":"a65273b3-4501-4313-bbe2-06b4cffb9ebe","method":"GET","headers":{":authority":"e2e-shared-b-d4529a.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T17:02:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a65273b3-4501-4313-bbe2-06b4cffb9ebe","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ZPO4K53c4mtLNtxi_P5Tr3liI3ebbWKVoDCCiiHQKBKFdUb9UJGyK4M4HOZ9"}
{"level":"debug","ts":"2026-07-27T17:02:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a65273b3-4501-4313-bbe2-06b4cffb9ebe","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-d4529a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ZPO4K53c4mtLNtxi_P5Tr3liI3ebbWKVoDCCiiHQKBKFdUb9UJGyK4M4HOZ9\"}"}
{"level":"debug","ts":"2026-07-27T17:02:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a65273b3-4501-4313-bbe2-06b4cffb9ebe","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-d4529a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-27T17:02:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a65273b3-4501-4313-bbe2-06b4cffb9ebe","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"499f2ee74b79bef8d9452062eb130b9959f1fb529e1c3b7066cb35607df99b2d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d4529a.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T17:02:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a65273b3-4501-4313-bbe2-06b4cffb9ebe","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:02:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"a65273b3-4501-4313-bbe2-06b4cffb9ebe","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-27T17:02:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a65273b3-4501-4313-bbe2-06b4cffb9ebe","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-27T17:02:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a65273b3-4501-4313-bbe2-06b4cffb9ebe","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"x-ext-auth-reason":""},{"content-type":"text/plain"}]}}
{"level":"info","ts":"2026-07-27T17:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f4937a3f26dbd4ac44363da7a6610ae91fc5e1f9a02434705fff780ed778f1c0"}
{"level":"info","ts":"2026-07-27T17:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/49e979b0a7c7ba943d34ae3f80cd32f215db61266847799e55ae9b0d9330fe28"}
{"level":"info","ts":"2026-07-27T17:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9c3848364f129ff21a9ddee34c2405a44c5f46dd4a1aed8fbb849b2701d4455d"}
{"level":"info","ts":"2026-07-27T17:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dc160882741e7df2edc8c31f6b1818ad7797a9e92c8b8ffc34362cdba4724cc0"}
{"level":"info","ts":"2026-07-27T17:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dd4d5099d1dfd5f0bce059bee08748d75c018ceae08e61dfb8b929ac5733afc4"}
{"level":"info","ts":"2026-07-27T17:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013"}
{"level":"info","ts":"2026-07-27T17:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/53b062b53441a9c411fabd8ffe2bea89c73a97f7966e8cff9991276a6b43bdea"}
{"level":"info","ts":"2026-07-27T17:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/499f2ee74b79bef8d9452062eb130b9959f1fb529e1c3b7066cb35607df99b2d"}
{"level":"info","ts":"2026-07-27T17:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8493644d5e83215ae93a0bc7d04a9790458959dab4dd084beb007820ea21f4e2"}
{"level":"info","ts":"2026-07-27T17:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0f48f3e73a729179c6e50116cf8432c855b2ac350aa016de73197d8818f8d87b"}
{"level":"info","ts":"2026-07-27T17:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/392b90ef044ae0089d62eff20809fe3a080f40934880656fcd30d746c09b2802"}
{"level":"info","ts":"2026-07-27T17:02:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/07d150e7e8aac5b7e16bfaf880332d3f71c8f9bec1ce0e95d3f93ad12a5f55a4"}
{"level":"debug","ts":"2026-07-27T17:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f48f3e73a729179c6e50116cf8432c855b2ac350aa016de73197d8818f8d87b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:02:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:02:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f48f3e73a729179c6e50116cf8432c855b2ac350aa016de73197d8818f8d87b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f48f3e73a729179c6e50116cf8432c855b2ac350aa016de73197d8818f8d87b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f48f3e73a729179c6e50116cf8432c855b2ac350aa016de73197d8818f8d87b"}
{"level":"debug","ts":"2026-07-27T17:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f48f3e73a729179c6e50116cf8432c855b2ac350aa016de73197d8818f8d87b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f48f3e73a729179c6e50116cf8432c855b2ac350aa016de73197d8818f8d87b"}
{"level":"debug","ts":"2026-07-27T17:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f48f3e73a729179c6e50116cf8432c855b2ac350aa016de73197d8818f8d87b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:02:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:02:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f48f3e73a729179c6e50116cf8432c855b2ac350aa016de73197d8818f8d87b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f48f3e73a729179c6e50116cf8432c855b2ac350aa016de73197d8818f8d87b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f48f3e73a729179c6e50116cf8432c855b2ac350aa016de73197d8818f8d87b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f48f3e73a729179c6e50116cf8432c855b2ac350aa016de73197d8818f8d87b"}
{"level":"debug","ts":"2026-07-27T17:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:02:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:02:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013"}
{"level":"debug","ts":"2026-07-27T17:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013"}
{"level":"debug","ts":"2026-07-27T17:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:02:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:02:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:02:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:02:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013"}
{"level":"debug","ts":"2026-07-27T17:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc160882741e7df2edc8c31f6b1818ad7797a9e92c8b8ffc34362cdba4724cc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:02:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:02:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013"}
{"level":"info","ts":"2026-07-27T17:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc160882741e7df2edc8c31f6b1818ad7797a9e92c8b8ffc34362cdba4724cc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:02:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:02:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc160882741e7df2edc8c31f6b1818ad7797a9e92c8b8ffc34362cdba4724cc0"}
{"level":"info","ts":"2026-07-27T17:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc160882741e7df2edc8c31f6b1818ad7797a9e92c8b8ffc34362cdba4724cc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:02:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:02:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc160882741e7df2edc8c31f6b1818ad7797a9e92c8b8ffc34362cdba4724cc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc160882741e7df2edc8c31f6b1818ad7797a9e92c8b8ffc34362cdba4724cc0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc160882741e7df2edc8c31f6b1818ad7797a9e92c8b8ffc34362cdba4724cc0"}
{"level":"debug","ts":"2026-07-27T17:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc160882741e7df2edc8c31f6b1818ad7797a9e92c8b8ffc34362cdba4724cc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:02:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:02:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc160882741e7df2edc8c31f6b1818ad7797a9e92c8b8ffc34362cdba4724cc0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013"}
{"level":"info","ts":"2026-07-27T17:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc160882741e7df2edc8c31f6b1818ad7797a9e92c8b8ffc34362cdba4724cc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc160882741e7df2edc8c31f6b1818ad7797a9e92c8b8ffc34362cdba4724cc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:02:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:02:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc160882741e7df2edc8c31f6b1818ad7797a9e92c8b8ffc34362cdba4724cc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc160882741e7df2edc8c31f6b1818ad7797a9e92c8b8ffc34362cdba4724cc0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc160882741e7df2edc8c31f6b1818ad7797a9e92c8b8ffc34362cdba4724cc0"}
{"level":"debug","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc160882741e7df2edc8c31f6b1818ad7797a9e92c8b8ffc34362cdba4724cc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8493644d5e83215ae93a0bc7d04a9790458959dab4dd084beb007820ea21f4e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:02:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:02:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc160882741e7df2edc8c31f6b1818ad7797a9e92c8b8ffc34362cdba4724cc0"}
{"level":"info","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8493644d5e83215ae93a0bc7d04a9790458959dab4dd084beb007820ea21f4e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc160882741e7df2edc8c31f6b1818ad7797a9e92c8b8ffc34362cdba4724cc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:02:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:02:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc160882741e7df2edc8c31f6b1818ad7797a9e92c8b8ffc34362cdba4724cc0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc160882741e7df2edc8c31f6b1818ad7797a9e92c8b8ffc34362cdba4724cc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8493644d5e83215ae93a0bc7d04a9790458959dab4dd084beb007820ea21f4e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:02:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:02:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8493644d5e83215ae93a0bc7d04a9790458959dab4dd084beb007820ea21f4e2"}
{"level":"info","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8493644d5e83215ae93a0bc7d04a9790458959dab4dd084beb007820ea21f4e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc160882741e7df2edc8c31f6b1818ad7797a9e92c8b8ffc34362cdba4724cc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:02:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:02:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc160882741e7df2edc8c31f6b1818ad7797a9e92c8b8ffc34362cdba4724cc0"}
{"level":"info","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc160882741e7df2edc8c31f6b1818ad7797a9e92c8b8ffc34362cdba4724cc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8493644d5e83215ae93a0bc7d04a9790458959dab4dd084beb007820ea21f4e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc160882741e7df2edc8c31f6b1818ad7797a9e92c8b8ffc34362cdba4724cc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:02:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:02:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc160882741e7df2edc8c31f6b1818ad7797a9e92c8b8ffc34362cdba4724cc0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc160882741e7df2edc8c31f6b1818ad7797a9e92c8b8ffc34362cdba4724cc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc160882741e7df2edc8c31f6b1818ad7797a9e92c8b8ffc34362cdba4724cc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc160882741e7df2edc8c31f6b1818ad7797a9e92c8b8ffc34362cdba4724cc0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8493644d5e83215ae93a0bc7d04a9790458959dab4dd084beb007820ea21f4e2"}
{"level":"debug","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8493644d5e83215ae93a0bc7d04a9790458959dab4dd084beb007820ea21f4e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:02:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:02:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8493644d5e83215ae93a0bc7d04a9790458959dab4dd084beb007820ea21f4e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8493644d5e83215ae93a0bc7d04a9790458959dab4dd084beb007820ea21f4e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8493644d5e83215ae93a0bc7d04a9790458959dab4dd084beb007820ea21f4e2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc160882741e7df2edc8c31f6b1818ad7797a9e92c8b8ffc34362cdba4724cc0"}
{"level":"debug","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49e979b0a7c7ba943d34ae3f80cd32f215db61266847799e55ae9b0d9330fe28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:02:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:02:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49e979b0a7c7ba943d34ae3f80cd32f215db61266847799e55ae9b0d9330fe28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49e979b0a7c7ba943d34ae3f80cd32f215db61266847799e55ae9b0d9330fe28","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8493644d5e83215ae93a0bc7d04a9790458959dab4dd084beb007820ea21f4e2"}
{"level":"debug","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49e979b0a7c7ba943d34ae3f80cd32f215db61266847799e55ae9b0d9330fe28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:02:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:02:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49e979b0a7c7ba943d34ae3f80cd32f215db61266847799e55ae9b0d9330fe28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49e979b0a7c7ba943d34ae3f80cd32f215db61266847799e55ae9b0d9330fe28","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49e979b0a7c7ba943d34ae3f80cd32f215db61266847799e55ae9b0d9330fe28"}
{"level":"debug","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49e979b0a7c7ba943d34ae3f80cd32f215db61266847799e55ae9b0d9330fe28","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49e979b0a7c7ba943d34ae3f80cd32f215db61266847799e55ae9b0d9330fe28"}
{"level":"debug","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49e979b0a7c7ba943d34ae3f80cd32f215db61266847799e55ae9b0d9330fe28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:02:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:02:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["49e979b0a7c7ba943d34ae3f80cd32f215db61266847799e55ae9b0d9330fe28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49e979b0a7c7ba943d34ae3f80cd32f215db61266847799e55ae9b0d9330fe28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49e979b0a7c7ba943d34ae3f80cd32f215db61266847799e55ae9b0d9330fe28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:02:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:02:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49e979b0a7c7ba943d34ae3f80cd32f215db61266847799e55ae9b0d9330fe28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49e979b0a7c7ba943d34ae3f80cd32f215db61266847799e55ae9b0d9330fe28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49e979b0a7c7ba943d34ae3f80cd32f215db61266847799e55ae9b0d9330fe28","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49e979b0a7c7ba943d34ae3f80cd32f215db61266847799e55ae9b0d9330fe28"}
{"level":"debug","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd4d5099d1dfd5f0bce059bee08748d75c018ceae08e61dfb8b929ac5733afc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:02:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:02:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49e979b0a7c7ba943d34ae3f80cd32f215db61266847799e55ae9b0d9330fe28"}
{"level":"info","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd4d5099d1dfd5f0bce059bee08748d75c018ceae08e61dfb8b929ac5733afc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49e979b0a7c7ba943d34ae3f80cd32f215db61266847799e55ae9b0d9330fe28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:02:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:02:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["49e979b0a7c7ba943d34ae3f80cd32f215db61266847799e55ae9b0d9330fe28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd4d5099d1dfd5f0bce059bee08748d75c018ceae08e61dfb8b929ac5733afc4"}
{"level":"info","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49e979b0a7c7ba943d34ae3f80cd32f215db61266847799e55ae9b0d9330fe28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd4d5099d1dfd5f0bce059bee08748d75c018ceae08e61dfb8b929ac5733afc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:02:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:02:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd4d5099d1dfd5f0bce059bee08748d75c018ceae08e61dfb8b929ac5733afc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49e979b0a7c7ba943d34ae3f80cd32f215db61266847799e55ae9b0d9330fe28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd4d5099d1dfd5f0bce059bee08748d75c018ceae08e61dfb8b929ac5733afc4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd4d5099d1dfd5f0bce059bee08748d75c018ceae08e61dfb8b929ac5733afc4"}
{"level":"debug","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd4d5099d1dfd5f0bce059bee08748d75c018ceae08e61dfb8b929ac5733afc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:02:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:02:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd4d5099d1dfd5f0bce059bee08748d75c018ceae08e61dfb8b929ac5733afc4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49e979b0a7c7ba943d34ae3f80cd32f215db61266847799e55ae9b0d9330fe28"}
{"level":"info","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd4d5099d1dfd5f0bce059bee08748d75c018ceae08e61dfb8b929ac5733afc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd4d5099d1dfd5f0bce059bee08748d75c018ceae08e61dfb8b929ac5733afc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:02:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:02:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd4d5099d1dfd5f0bce059bee08748d75c018ceae08e61dfb8b929ac5733afc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd4d5099d1dfd5f0bce059bee08748d75c018ceae08e61dfb8b929ac5733afc4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd4d5099d1dfd5f0bce059bee08748d75c018ceae08e61dfb8b929ac5733afc4"}
{"level":"debug","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd4d5099d1dfd5f0bce059bee08748d75c018ceae08e61dfb8b929ac5733afc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"392b90ef044ae0089d62eff20809fe3a080f40934880656fcd30d746c09b2802","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:02:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:02:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd4d5099d1dfd5f0bce059bee08748d75c018ceae08e61dfb8b929ac5733afc4"}
{"level":"info","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"392b90ef044ae0089d62eff20809fe3a080f40934880656fcd30d746c09b2802","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd4d5099d1dfd5f0bce059bee08748d75c018ceae08e61dfb8b929ac5733afc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:02:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:02:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd4d5099d1dfd5f0bce059bee08748d75c018ceae08e61dfb8b929ac5733afc4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/392b90ef044ae0089d62eff20809fe3a080f40934880656fcd30d746c09b2802"}
{"level":"info","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd4d5099d1dfd5f0bce059bee08748d75c018ceae08e61dfb8b929ac5733afc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c3848364f129ff21a9ddee34c2405a44c5f46dd4a1aed8fbb849b2701d4455d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:02:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:02:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c3848364f129ff21a9ddee34c2405a44c5f46dd4a1aed8fbb849b2701d4455d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"392b90ef044ae0089d62eff20809fe3a080f40934880656fcd30d746c09b2802","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:02:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:02:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["392b90ef044ae0089d62eff20809fe3a080f40934880656fcd30d746c09b2802"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c3848364f129ff21a9ddee34c2405a44c5f46dd4a1aed8fbb849b2701d4455d"}
{"level":"info","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"392b90ef044ae0089d62eff20809fe3a080f40934880656fcd30d746c09b2802","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53b062b53441a9c411fabd8ffe2bea89c73a97f7966e8cff9991276a6b43bdea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:02:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:02:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53b062b53441a9c411fabd8ffe2bea89c73a97f7966e8cff9991276a6b43bdea"}
{"level":"info","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53b062b53441a9c411fabd8ffe2bea89c73a97f7966e8cff9991276a6b43bdea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd4d5099d1dfd5f0bce059bee08748d75c018ceae08e61dfb8b929ac5733afc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c3848364f129ff21a9ddee34c2405a44c5f46dd4a1aed8fbb849b2701d4455d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:02:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:02:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c3848364f129ff21a9ddee34c2405a44c5f46dd4a1aed8fbb849b2701d4455d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c3848364f129ff21a9ddee34c2405a44c5f46dd4a1aed8fbb849b2701d4455d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"392b90ef044ae0089d62eff20809fe3a080f40934880656fcd30d746c09b2802","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:02:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:02:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"392b90ef044ae0089d62eff20809fe3a080f40934880656fcd30d746c09b2802","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53b062b53441a9c411fabd8ffe2bea89c73a97f7966e8cff9991276a6b43bdea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:02:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:02:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53b062b53441a9c411fabd8ffe2bea89c73a97f7966e8cff9991276a6b43bdea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/392b90ef044ae0089d62eff20809fe3a080f40934880656fcd30d746c09b2802"}
{"level":"info","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53b062b53441a9c411fabd8ffe2bea89c73a97f7966e8cff9991276a6b43bdea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c3848364f129ff21a9ddee34c2405a44c5f46dd4a1aed8fbb849b2701d4455d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07d150e7e8aac5b7e16bfaf880332d3f71c8f9bec1ce0e95d3f93ad12a5f55a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:02:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:02:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07d150e7e8aac5b7e16bfaf880332d3f71c8f9bec1ce0e95d3f93ad12a5f55a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"392b90ef044ae0089d62eff20809fe3a080f40934880656fcd30d746c09b2802","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:02:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:02:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["392b90ef044ae0089d62eff20809fe3a080f40934880656fcd30d746c09b2802"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"392b90ef044ae0089d62eff20809fe3a080f40934880656fcd30d746c09b2802","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4937a3f26dbd4ac44363da7a6610ae91fc5e1f9a02434705fff780ed778f1c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:02:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:02:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd4d5099d1dfd5f0bce059bee08748d75c018ceae08e61dfb8b929ac5733afc4"}
{"level":"info","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4937a3f26dbd4ac44363da7a6610ae91fc5e1f9a02434705fff780ed778f1c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53b062b53441a9c411fabd8ffe2bea89c73a97f7966e8cff9991276a6b43bdea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07d150e7e8aac5b7e16bfaf880332d3f71c8f9bec1ce0e95d3f93ad12a5f55a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"392b90ef044ae0089d62eff20809fe3a080f40934880656fcd30d746c09b2802","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4937a3f26dbd4ac44363da7a6610ae91fc5e1f9a02434705fff780ed778f1c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4937a3f26dbd4ac44363da7a6610ae91fc5e1f9a02434705fff780ed778f1c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07d150e7e8aac5b7e16bfaf880332d3f71c8f9bec1ce0e95d3f93ad12a5f55a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4937a3f26dbd4ac44363da7a6610ae91fc5e1f9a02434705fff780ed778f1c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"499f2ee74b79bef8d9452062eb130b9959f1fb529e1c3b7066cb35607df99b2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:02:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:02:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c3848364f129ff21a9ddee34c2405a44c5f46dd4a1aed8fbb849b2701d4455d"}
{"level":"info","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"499f2ee74b79bef8d9452062eb130b9959f1fb529e1c3b7066cb35607df99b2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07d150e7e8aac5b7e16bfaf880332d3f71c8f9bec1ce0e95d3f93ad12a5f55a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"499f2ee74b79bef8d9452062eb130b9959f1fb529e1c3b7066cb35607df99b2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"499f2ee74b79bef8d9452062eb130b9959f1fb529e1c3b7066cb35607df99b2d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53b062b53441a9c411fabd8ffe2bea89c73a97f7966e8cff9991276a6b43bdea"}
{"level":"debug","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4937a3f26dbd4ac44363da7a6610ae91fc5e1f9a02434705fff780ed778f1c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"499f2ee74b79bef8d9452062eb130b9959f1fb529e1c3b7066cb35607df99b2d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07d150e7e8aac5b7e16bfaf880332d3f71c8f9bec1ce0e95d3f93ad12a5f55a4"}
{"level":"debug","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07d150e7e8aac5b7e16bfaf880332d3f71c8f9bec1ce0e95d3f93ad12a5f55a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:02:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:02:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07d150e7e8aac5b7e16bfaf880332d3f71c8f9bec1ce0e95d3f93ad12a5f55a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07d150e7e8aac5b7e16bfaf880332d3f71c8f9bec1ce0e95d3f93ad12a5f55a4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4937a3f26dbd4ac44363da7a6610ae91fc5e1f9a02434705fff780ed778f1c0"}
{"level":"debug","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07d150e7e8aac5b7e16bfaf880332d3f71c8f9bec1ce0e95d3f93ad12a5f55a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"499f2ee74b79bef8d9452062eb130b9959f1fb529e1c3b7066cb35607df99b2d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/392b90ef044ae0089d62eff20809fe3a080f40934880656fcd30d746c09b2802"}
{"level":"info","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/499f2ee74b79bef8d9452062eb130b9959f1fb529e1c3b7066cb35607df99b2d"}
{"level":"debug","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4937a3f26dbd4ac44363da7a6610ae91fc5e1f9a02434705fff780ed778f1c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:02:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:02:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4937a3f26dbd4ac44363da7a6610ae91fc5e1f9a02434705fff780ed778f1c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4937a3f26dbd4ac44363da7a6610ae91fc5e1f9a02434705fff780ed778f1c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4937a3f26dbd4ac44363da7a6610ae91fc5e1f9a02434705fff780ed778f1c0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07d150e7e8aac5b7e16bfaf880332d3f71c8f9bec1ce0e95d3f93ad12a5f55a4"}
{"level":"info","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4937a3f26dbd4ac44363da7a6610ae91fc5e1f9a02434705fff780ed778f1c0"}
{"level":"debug","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"499f2ee74b79bef8d9452062eb130b9959f1fb529e1c3b7066cb35607df99b2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:02:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:02:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["499f2ee74b79bef8d9452062eb130b9959f1fb529e1c3b7066cb35607df99b2d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"499f2ee74b79bef8d9452062eb130b9959f1fb529e1c3b7066cb35607df99b2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"499f2ee74b79bef8d9452062eb130b9959f1fb529e1c3b7066cb35607df99b2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:02:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:02:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"499f2ee74b79bef8d9452062eb130b9959f1fb529e1c3b7066cb35607df99b2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"499f2ee74b79bef8d9452062eb130b9959f1fb529e1c3b7066cb35607df99b2d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/499f2ee74b79bef8d9452062eb130b9959f1fb529e1c3b7066cb35607df99b2d"}
{"level":"debug","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"499f2ee74b79bef8d9452062eb130b9959f1fb529e1c3b7066cb35607df99b2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"499f2ee74b79bef8d9452062eb130b9959f1fb529e1c3b7066cb35607df99b2d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/499f2ee74b79bef8d9452062eb130b9959f1fb529e1c3b7066cb35607df99b2d"}
{"level":"debug","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"499f2ee74b79bef8d9452062eb130b9959f1fb529e1c3b7066cb35607df99b2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:02:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:02:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["499f2ee74b79bef8d9452062eb130b9959f1fb529e1c3b7066cb35607df99b2d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"499f2ee74b79bef8d9452062eb130b9959f1fb529e1c3b7066cb35607df99b2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"499f2ee74b79bef8d9452062eb130b9959f1fb529e1c3b7066cb35607df99b2d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:02:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/499f2ee74b79bef8d9452062eb130b9959f1fb529e1c3b7066cb35607df99b2d"}
{"level":"info","ts":"2026-07-27T17:03:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bcf11e5b-fee7-45c7-9807-4ea031ccc95b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:46416","PortSpecifier":{"PortValue":46416}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bcf11e5b-fee7-45c7-9807-4ea031ccc95b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-f1b699.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T17:03:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bcf11e5b-fee7-45c7-9807-4ea031ccc95b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:46416","PortSpecifier":{"PortValue":46416}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785171788,"nanos":667919835},"http":{"id":"bcf11e5b-fee7-45c7-9807-4ea031ccc95b","method":"POST","headers":{":authority":"e2e-shared-a-f1b699.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T17:03:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bcf11e5b-fee7-45c7-9807-4ea031ccc95b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-27T17:03:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bcf11e5b-fee7-45c7-9807-4ea031ccc95b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"19d4fba8-6c28-4c2a-aa40-edbdeb6a848c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=809080bc-3172-467d-b414-ed0fcd1808a3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5e36e679cd16"]}}
{"level":"debug","ts":"2026-07-27T17:03:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bcf11e5b-fee7-45c7-9807-4ea031ccc95b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5e36e679cd16"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=809080bc-3172-467d-b414-ed0fcd1808a3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"19d4fba8-6c28-4c2a-aa40-edbdeb6a848c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a0279726128b5852e1cf0d3d361293726e16445d8edc2dfaeb34f3dfb08d6635"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f1b699.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T17:03:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bcf11e5b-fee7-45c7-9807-4ea031ccc95b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:03:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bcf11e5b-fee7-45c7-9807-4ea031ccc95b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:03:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bcf11e5b-fee7-45c7-9807-4ea031ccc95b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f1b699/auth-test-model-f1b699\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-f1b699/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:03:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bcf11e5b-fee7-45c7-9807-4ea031ccc95b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-27T17:03:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bcf11e5b-fee7-45c7-9807-4ea031ccc95b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T17:03:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bcf11e5b-fee7-45c7-9807-4ea031ccc95b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-27T17:03:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bcf11e5b-fee7-45c7-9807-4ea031ccc95b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T17:03:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bcf11e5b-fee7-45c7-9807-4ea031ccc95b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T17:03:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c948b36b-1524-417d-a95e-9a26b8e155a0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:41096","PortSpecifier":{"PortValue":41096}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c948b36b-1524-417d-a95e-9a26b8e155a0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-d4529a.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T17:03:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c948b36b-1524-417d-a95e-9a26b8e155a0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:41096","PortSpecifier":{"PortValue":41096}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785171788,"nanos":705056335},"http":{"id":"c948b36b-1524-417d-a95e-9a26b8e155a0","method":"POST","headers":{":authority":"e2e-shared-b-d4529a.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T17:03:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c948b36b-1524-417d-a95e-9a26b8e155a0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-27T17:03:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c948b36b-1524-417d-a95e-9a26b8e155a0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"19d4fba8-6c28-4c2a-aa40-edbdeb6a848c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=809080bc-3172-467d-b414-ed0fcd1808a3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5e36e679cd16"]}}
{"level":"debug","ts":"2026-07-27T17:03:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c948b36b-1524-417d-a95e-9a26b8e155a0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5e36e679cd16"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=809080bc-3172-467d-b414-ed0fcd1808a3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"19d4fba8-6c28-4c2a-aa40-edbdeb6a848c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"499f2ee74b79bef8d9452062eb130b9959f1fb529e1c3b7066cb35607df99b2d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d4529a.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T17:03:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c948b36b-1524-417d-a95e-9a26b8e155a0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:03:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c948b36b-1524-417d-a95e-9a26b8e155a0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:03:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c948b36b-1524-417d-a95e-9a26b8e155a0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d4529a/auth-test-model-d4529a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-d4529a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:03:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c948b36b-1524-417d-a95e-9a26b8e155a0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-27T17:03:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c948b36b-1524-417d-a95e-9a26b8e155a0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T17:03:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c948b36b-1524-417d-a95e-9a26b8e155a0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-27T17:03:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c948b36b-1524-417d-a95e-9a26b8e155a0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T17:03:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c948b36b-1524-417d-a95e-9a26b8e155a0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T17:03:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a8d7cd9a-9283-4472-abf7-0fe330172930","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:58504","PortSpecifier":{"PortValue":58504}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a8d7cd9a-9283-4472-abf7-0fe330172930","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-f1b699.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T17:03:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a8d7cd9a-9283-4472-abf7-0fe330172930","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:58504","PortSpecifier":{"PortValue":58504}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785171788,"nanos":746710707},"http":{"id":"a8d7cd9a-9283-4472-abf7-0fe330172930","method":"POST","headers":{":authority":"e2e-shared-a-f1b699.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T17:03:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a8d7cd9a-9283-4472-abf7-0fe330172930","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-27T17:03:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a8d7cd9a-9283-4472-abf7-0fe330172930","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"19d4fba8-6c28-4c2a-aa40-edbdeb6a848c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=809080bc-3172-467d-b414-ed0fcd1808a3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5e36e679cd16"]}}
{"level":"debug","ts":"2026-07-27T17:03:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a8d7cd9a-9283-4472-abf7-0fe330172930","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5e36e679cd16"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=809080bc-3172-467d-b414-ed0fcd1808a3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"19d4fba8-6c28-4c2a-aa40-edbdeb6a848c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a0279726128b5852e1cf0d3d361293726e16445d8edc2dfaeb34f3dfb08d6635"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f1b699.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T17:03:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a8d7cd9a-9283-4472-abf7-0fe330172930","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:03:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a8d7cd9a-9283-4472-abf7-0fe330172930","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:03:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a8d7cd9a-9283-4472-abf7-0fe330172930","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f1b699/auth-test-model-f1b699\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-f1b699/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:03:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a8d7cd9a-9283-4472-abf7-0fe330172930","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-27T17:03:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a8d7cd9a-9283-4472-abf7-0fe330172930","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T17:03:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a8d7cd9a-9283-4472-abf7-0fe330172930","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-27T17:03:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a8d7cd9a-9283-4472-abf7-0fe330172930","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T17:03:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a8d7cd9a-9283-4472-abf7-0fe330172930","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T17:03:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"850a93ed-106a-437d-82e1-871096682aa3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:41112","PortSpecifier":{"PortValue":41112}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"850a93ed-106a-437d-82e1-871096682aa3","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-d4529a.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T17:03:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"850a93ed-106a-437d-82e1-871096682aa3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:41112","PortSpecifier":{"PortValue":41112}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785171788,"nanos":784952105},"http":{"id":"850a93ed-106a-437d-82e1-871096682aa3","method":"POST","headers":{":authority":"e2e-shared-b-d4529a.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T17:03:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"850a93ed-106a-437d-82e1-871096682aa3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-27T17:03:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"850a93ed-106a-437d-82e1-871096682aa3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"19d4fba8-6c28-4c2a-aa40-edbdeb6a848c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=809080bc-3172-467d-b414-ed0fcd1808a3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5e36e679cd16"]}}
{"level":"debug","ts":"2026-07-27T17:03:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"850a93ed-106a-437d-82e1-871096682aa3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5e36e679cd16"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=809080bc-3172-467d-b414-ed0fcd1808a3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"19d4fba8-6c28-4c2a-aa40-edbdeb6a848c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"499f2ee74b79bef8d9452062eb130b9959f1fb529e1c3b7066cb35607df99b2d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d4529a.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T17:03:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"850a93ed-106a-437d-82e1-871096682aa3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:03:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"850a93ed-106a-437d-82e1-871096682aa3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:03:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"850a93ed-106a-437d-82e1-871096682aa3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d4529a/auth-test-model-d4529a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-d4529a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:03:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"850a93ed-106a-437d-82e1-871096682aa3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-27T17:03:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"850a93ed-106a-437d-82e1-871096682aa3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T17:03:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"850a93ed-106a-437d-82e1-871096682aa3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-27T17:03:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"850a93ed-106a-437d-82e1-871096682aa3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T17:03:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"850a93ed-106a-437d-82e1-871096682aa3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T17:03:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/392b90ef044ae0089d62eff20809fe3a080f40934880656fcd30d746c09b2802"}
{"level":"info","ts":"2026-07-27T17:03:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/499f2ee74b79bef8d9452062eb130b9959f1fb529e1c3b7066cb35607df99b2d"}
{"level":"info","ts":"2026-07-27T17:03:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/53b062b53441a9c411fabd8ffe2bea89c73a97f7966e8cff9991276a6b43bdea"}
{"level":"info","ts":"2026-07-27T17:03:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9c3848364f129ff21a9ddee34c2405a44c5f46dd4a1aed8fbb849b2701d4455d"}
{"level":"info","ts":"2026-07-27T17:03:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/49e979b0a7c7ba943d34ae3f80cd32f215db61266847799e55ae9b0d9330fe28"}
{"level":"info","ts":"2026-07-27T17:03:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0f48f3e73a729179c6e50116cf8432c855b2ac350aa016de73197d8818f8d87b"}
{"level":"info","ts":"2026-07-27T17:03:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dd4d5099d1dfd5f0bce059bee08748d75c018ceae08e61dfb8b929ac5733afc4"}
{"level":"info","ts":"2026-07-27T17:03:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f4937a3f26dbd4ac44363da7a6610ae91fc5e1f9a02434705fff780ed778f1c0"}
{"level":"info","ts":"2026-07-27T17:03:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013"}
{"level":"info","ts":"2026-07-27T17:03:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dc160882741e7df2edc8c31f6b1818ad7797a9e92c8b8ffc34362cdba4724cc0"}
{"level":"info","ts":"2026-07-27T17:03:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8493644d5e83215ae93a0bc7d04a9790458959dab4dd084beb007820ea21f4e2"}
{"level":"info","ts":"2026-07-27T17:03:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/07d150e7e8aac5b7e16bfaf880332d3f71c8f9bec1ce0e95d3f93ad12a5f55a4"}
{"level":"debug","ts":"2026-07-27T17:03:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07d150e7e8aac5b7e16bfaf880332d3f71c8f9bec1ce0e95d3f93ad12a5f55a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:03:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:03:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:03:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07d150e7e8aac5b7e16bfaf880332d3f71c8f9bec1ce0e95d3f93ad12a5f55a4"}
{"level":"info","ts":"2026-07-27T17:03:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07d150e7e8aac5b7e16bfaf880332d3f71c8f9bec1ce0e95d3f93ad12a5f55a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:03:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07d150e7e8aac5b7e16bfaf880332d3f71c8f9bec1ce0e95d3f93ad12a5f55a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:03:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07d150e7e8aac5b7e16bfaf880332d3f71c8f9bec1ce0e95d3f93ad12a5f55a4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:03:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07d150e7e8aac5b7e16bfaf880332d3f71c8f9bec1ce0e95d3f93ad12a5f55a4"}
{"level":"debug","ts":"2026-07-27T17:03:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07d150e7e8aac5b7e16bfaf880332d3f71c8f9bec1ce0e95d3f93ad12a5f55a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:03:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:03:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07d150e7e8aac5b7e16bfaf880332d3f71c8f9bec1ce0e95d3f93ad12a5f55a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07d150e7e8aac5b7e16bfaf880332d3f71c8f9bec1ce0e95d3f93ad12a5f55a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07d150e7e8aac5b7e16bfaf880332d3f71c8f9bec1ce0e95d3f93ad12a5f55a4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07d150e7e8aac5b7e16bfaf880332d3f71c8f9bec1ce0e95d3f93ad12a5f55a4"}
{"level":"debug","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:03:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:03:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013"}
{"level":"debug","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013"}
{"level":"debug","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:03:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:03:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:03:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:03:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"392b90ef044ae0089d62eff20809fe3a080f40934880656fcd30d746c09b2802","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:03:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:03:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013"}
{"level":"info","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"392b90ef044ae0089d62eff20809fe3a080f40934880656fcd30d746c09b2802","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:03:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:03:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/392b90ef044ae0089d62eff20809fe3a080f40934880656fcd30d746c09b2802"}
{"level":"info","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"392b90ef044ae0089d62eff20809fe3a080f40934880656fcd30d746c09b2802","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:03:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:03:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["392b90ef044ae0089d62eff20809fe3a080f40934880656fcd30d746c09b2802"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"392b90ef044ae0089d62eff20809fe3a080f40934880656fcd30d746c09b2802","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013"}
{"level":"debug","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:03:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:03:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"392b90ef044ae0089d62eff20809fe3a080f40934880656fcd30d746c09b2802","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:03:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:03:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/392b90ef044ae0089d62eff20809fe3a080f40934880656fcd30d746c09b2802"}
{"level":"info","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"392b90ef044ae0089d62eff20809fe3a080f40934880656fcd30d746c09b2802","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"392b90ef044ae0089d62eff20809fe3a080f40934880656fcd30d746c09b2802","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:03:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:03:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["392b90ef044ae0089d62eff20809fe3a080f40934880656fcd30d746c09b2802"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013"}
{"level":"info","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"392b90ef044ae0089d62eff20809fe3a080f40934880656fcd30d746c09b2802","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:03:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:03:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"392b90ef044ae0089d62eff20809fe3a080f40934880656fcd30d746c09b2802","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:03:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:03:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/392b90ef044ae0089d62eff20809fe3a080f40934880656fcd30d746c09b2802"}
{"level":"info","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"392b90ef044ae0089d62eff20809fe3a080f40934880656fcd30d746c09b2802","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:03:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:03:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013"}
{"level":"info","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"392b90ef044ae0089d62eff20809fe3a080f40934880656fcd30d746c09b2802","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:03:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:03:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/392b90ef044ae0089d62eff20809fe3a080f40934880656fcd30d746c09b2802"}
{"level":"info","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"392b90ef044ae0089d62eff20809fe3a080f40934880656fcd30d746c09b2802","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:03:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:03:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["392b90ef044ae0089d62eff20809fe3a080f40934880656fcd30d746c09b2802"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"392b90ef044ae0089d62eff20809fe3a080f40934880656fcd30d746c09b2802","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:03:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:03:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013"}
{"level":"info","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"392b90ef044ae0089d62eff20809fe3a080f40934880656fcd30d746c09b2802","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:03:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:03:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/392b90ef044ae0089d62eff20809fe3a080f40934880656fcd30d746c09b2802"}
{"level":"info","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"392b90ef044ae0089d62eff20809fe3a080f40934880656fcd30d746c09b2802","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc160882741e7df2edc8c31f6b1818ad7797a9e92c8b8ffc34362cdba4724cc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:03:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:03:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc160882741e7df2edc8c31f6b1818ad7797a9e92c8b8ffc34362cdba4724cc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"392b90ef044ae0089d62eff20809fe3a080f40934880656fcd30d746c09b2802","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:03:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:03:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["392b90ef044ae0089d62eff20809fe3a080f40934880656fcd30d746c09b2802"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013"}
{"level":"info","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"392b90ef044ae0089d62eff20809fe3a080f40934880656fcd30d746c09b2802","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc160882741e7df2edc8c31f6b1818ad7797a9e92c8b8ffc34362cdba4724cc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:03:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:03:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc160882741e7df2edc8c31f6b1818ad7797a9e92c8b8ffc34362cdba4724cc0"}
{"level":"info","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/392b90ef044ae0089d62eff20809fe3a080f40934880656fcd30d746c09b2802"}
{"level":"info","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc160882741e7df2edc8c31f6b1818ad7797a9e92c8b8ffc34362cdba4724cc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:03:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:03:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc160882741e7df2edc8c31f6b1818ad7797a9e92c8b8ffc34362cdba4724cc0"}
{"level":"info","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc160882741e7df2edc8c31f6b1818ad7797a9e92c8b8ffc34362cdba4724cc0"}
{"level":"info","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"392b90ef044ae0089d62eff20809fe3a080f40934880656fcd30d746c09b2802","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc160882741e7df2edc8c31f6b1818ad7797a9e92c8b8ffc34362cdba4724cc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:03:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:03:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc160882741e7df2edc8c31f6b1818ad7797a9e92c8b8ffc34362cdba4724cc0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/499f2ee74b79bef8d9452062eb130b9959f1fb529e1c3b7066cb35607df99b2d"}
{"level":"info","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013"}
{"level":"info","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc160882741e7df2edc8c31f6b1818ad7797a9e92c8b8ffc34362cdba4724cc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"499f2ee74b79bef8d9452062eb130b9959f1fb529e1c3b7066cb35607df99b2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:03:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:03:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["499f2ee74b79bef8d9452062eb130b9959f1fb529e1c3b7066cb35607df99b2d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc160882741e7df2edc8c31f6b1818ad7797a9e92c8b8ffc34362cdba4724cc0"}
{"level":"info","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"499f2ee74b79bef8d9452062eb130b9959f1fb529e1c3b7066cb35607df99b2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc160882741e7df2edc8c31f6b1818ad7797a9e92c8b8ffc34362cdba4724cc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"499f2ee74b79bef8d9452062eb130b9959f1fb529e1c3b7066cb35607df99b2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53b062b53441a9c411fabd8ffe2bea89c73a97f7966e8cff9991276a6b43bdea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:03:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:03:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/499f2ee74b79bef8d9452062eb130b9959f1fb529e1c3b7066cb35607df99b2d"}
{"level":"info","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53b062b53441a9c411fabd8ffe2bea89c73a97f7966e8cff9991276a6b43bdea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53b062b53441a9c411fabd8ffe2bea89c73a97f7966e8cff9991276a6b43bdea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:03:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:03:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53b062b53441a9c411fabd8ffe2bea89c73a97f7966e8cff9991276a6b43bdea"}
{"level":"info","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53b062b53441a9c411fabd8ffe2bea89c73a97f7966e8cff9991276a6b43bdea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53b062b53441a9c411fabd8ffe2bea89c73a97f7966e8cff9991276a6b43bdea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:03:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:03:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"53b062b53441a9c411fabd8ffe2bea89c73a97f7966e8cff9991276a6b43bdea","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"53b062b53441a9c411fabd8ffe2bea89c73a97f7966e8cff9991276a6b43bdea\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53b062b53441a9c411fabd8ffe2bea89c73a97f7966e8cff9991276a6b43bdea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53b062b53441a9c411fabd8ffe2bea89c73a97f7966e8cff9991276a6b43bdea"}
{"level":"debug","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53b062b53441a9c411fabd8ffe2bea89c73a97f7966e8cff9991276a6b43bdea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53b062b53441a9c411fabd8ffe2bea89c73a97f7966e8cff9991276a6b43bdea"}
{"level":"debug","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8493644d5e83215ae93a0bc7d04a9790458959dab4dd084beb007820ea21f4e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:03:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:03:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8493644d5e83215ae93a0bc7d04a9790458959dab4dd084beb007820ea21f4e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8493644d5e83215ae93a0bc7d04a9790458959dab4dd084beb007820ea21f4e2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8493644d5e83215ae93a0bc7d04a9790458959dab4dd084beb007820ea21f4e2"}
{"level":"debug","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8493644d5e83215ae93a0bc7d04a9790458959dab4dd084beb007820ea21f4e2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8493644d5e83215ae93a0bc7d04a9790458959dab4dd084beb007820ea21f4e2"}
{"level":"debug","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8493644d5e83215ae93a0bc7d04a9790458959dab4dd084beb007820ea21f4e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:03:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:03:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8493644d5e83215ae93a0bc7d04a9790458959dab4dd084beb007820ea21f4e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8493644d5e83215ae93a0bc7d04a9790458959dab4dd084beb007820ea21f4e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53b062b53441a9c411fabd8ffe2bea89c73a97f7966e8cff9991276a6b43bdea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:03:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:03:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53b062b53441a9c411fabd8ffe2bea89c73a97f7966e8cff9991276a6b43bdea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53b062b53441a9c411fabd8ffe2bea89c73a97f7966e8cff9991276a6b43bdea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8493644d5e83215ae93a0bc7d04a9790458959dab4dd084beb007820ea21f4e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:03:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:03:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8493644d5e83215ae93a0bc7d04a9790458959dab4dd084beb007820ea21f4e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53b062b53441a9c411fabd8ffe2bea89c73a97f7966e8cff9991276a6b43bdea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8493644d5e83215ae93a0bc7d04a9790458959dab4dd084beb007820ea21f4e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8493644d5e83215ae93a0bc7d04a9790458959dab4dd084beb007820ea21f4e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49e979b0a7c7ba943d34ae3f80cd32f215db61266847799e55ae9b0d9330fe28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:03:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:03:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8493644d5e83215ae93a0bc7d04a9790458959dab4dd084beb007820ea21f4e2"}
{"level":"info","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49e979b0a7c7ba943d34ae3f80cd32f215db61266847799e55ae9b0d9330fe28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49e979b0a7c7ba943d34ae3f80cd32f215db61266847799e55ae9b0d9330fe28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8493644d5e83215ae93a0bc7d04a9790458959dab4dd084beb007820ea21f4e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:03:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:03:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8493644d5e83215ae93a0bc7d04a9790458959dab4dd084beb007820ea21f4e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8493644d5e83215ae93a0bc7d04a9790458959dab4dd084beb007820ea21f4e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49e979b0a7c7ba943d34ae3f80cd32f215db61266847799e55ae9b0d9330fe28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8493644d5e83215ae93a0bc7d04a9790458959dab4dd084beb007820ea21f4e2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53b062b53441a9c411fabd8ffe2bea89c73a97f7966e8cff9991276a6b43bdea"}
{"level":"debug","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49e979b0a7c7ba943d34ae3f80cd32f215db61266847799e55ae9b0d9330fe28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:03:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:03:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49e979b0a7c7ba943d34ae3f80cd32f215db61266847799e55ae9b0d9330fe28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49e979b0a7c7ba943d34ae3f80cd32f215db61266847799e55ae9b0d9330fe28","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49e979b0a7c7ba943d34ae3f80cd32f215db61266847799e55ae9b0d9330fe28"}
{"level":"info","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8493644d5e83215ae93a0bc7d04a9790458959dab4dd084beb007820ea21f4e2"}
{"level":"debug","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd4d5099d1dfd5f0bce059bee08748d75c018ceae08e61dfb8b929ac5733afc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:03:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:03:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49e979b0a7c7ba943d34ae3f80cd32f215db61266847799e55ae9b0d9330fe28"}
{"level":"info","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd4d5099d1dfd5f0bce059bee08748d75c018ceae08e61dfb8b929ac5733afc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49e979b0a7c7ba943d34ae3f80cd32f215db61266847799e55ae9b0d9330fe28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:03:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:03:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["49e979b0a7c7ba943d34ae3f80cd32f215db61266847799e55ae9b0d9330fe28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd4d5099d1dfd5f0bce059bee08748d75c018ceae08e61dfb8b929ac5733afc4"}
{"level":"info","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49e979b0a7c7ba943d34ae3f80cd32f215db61266847799e55ae9b0d9330fe28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd4d5099d1dfd5f0bce059bee08748d75c018ceae08e61dfb8b929ac5733afc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:03:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:03:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd4d5099d1dfd5f0bce059bee08748d75c018ceae08e61dfb8b929ac5733afc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49e979b0a7c7ba943d34ae3f80cd32f215db61266847799e55ae9b0d9330fe28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd4d5099d1dfd5f0bce059bee08748d75c018ceae08e61dfb8b929ac5733afc4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd4d5099d1dfd5f0bce059bee08748d75c018ceae08e61dfb8b929ac5733afc4"}
{"level":"debug","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd4d5099d1dfd5f0bce059bee08748d75c018ceae08e61dfb8b929ac5733afc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:03:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:03:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd4d5099d1dfd5f0bce059bee08748d75c018ceae08e61dfb8b929ac5733afc4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49e979b0a7c7ba943d34ae3f80cd32f215db61266847799e55ae9b0d9330fe28"}
{"level":"info","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd4d5099d1dfd5f0bce059bee08748d75c018ceae08e61dfb8b929ac5733afc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:03:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd4d5099d1dfd5f0bce059bee08748d75c018ceae08e61dfb8b929ac5733afc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:03:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:03:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd4d5099d1dfd5f0bce059bee08748d75c018ceae08e61dfb8b929ac5733afc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f48f3e73a729179c6e50116cf8432c855b2ac350aa016de73197d8818f8d87b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:03:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:03:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd4d5099d1dfd5f0bce059bee08748d75c018ceae08e61dfb8b929ac5733afc4"}
{"level":"info","ts":"2026-07-27T17:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f48f3e73a729179c6e50116cf8432c855b2ac350aa016de73197d8818f8d87b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd4d5099d1dfd5f0bce059bee08748d75c018ceae08e61dfb8b929ac5733afc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:03:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:03:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd4d5099d1dfd5f0bce059bee08748d75c018ceae08e61dfb8b929ac5733afc4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f48f3e73a729179c6e50116cf8432c855b2ac350aa016de73197d8818f8d87b"}
{"level":"info","ts":"2026-07-27T17:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd4d5099d1dfd5f0bce059bee08748d75c018ceae08e61dfb8b929ac5733afc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f48f3e73a729179c6e50116cf8432c855b2ac350aa016de73197d8818f8d87b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:03:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:03:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f48f3e73a729179c6e50116cf8432c855b2ac350aa016de73197d8818f8d87b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd4d5099d1dfd5f0bce059bee08748d75c018ceae08e61dfb8b929ac5733afc4"}
{"level":"info","ts":"2026-07-27T17:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f48f3e73a729179c6e50116cf8432c855b2ac350aa016de73197d8818f8d87b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4937a3f26dbd4ac44363da7a6610ae91fc5e1f9a02434705fff780ed778f1c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:03:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:03:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4937a3f26dbd4ac44363da7a6610ae91fc5e1f9a02434705fff780ed778f1c0"}
{"level":"info","ts":"2026-07-27T17:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4937a3f26dbd4ac44363da7a6610ae91fc5e1f9a02434705fff780ed778f1c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd4d5099d1dfd5f0bce059bee08748d75c018ceae08e61dfb8b929ac5733afc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c3848364f129ff21a9ddee34c2405a44c5f46dd4a1aed8fbb849b2701d4455d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:03:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:03:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c3848364f129ff21a9ddee34c2405a44c5f46dd4a1aed8fbb849b2701d4455d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f48f3e73a729179c6e50116cf8432c855b2ac350aa016de73197d8818f8d87b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:03:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:03:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f48f3e73a729179c6e50116cf8432c855b2ac350aa016de73197d8818f8d87b"}
{"level":"info","ts":"2026-07-27T17:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f48f3e73a729179c6e50116cf8432c855b2ac350aa016de73197d8818f8d87b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4937a3f26dbd4ac44363da7a6610ae91fc5e1f9a02434705fff780ed778f1c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:03:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:03:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4937a3f26dbd4ac44363da7a6610ae91fc5e1f9a02434705fff780ed778f1c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c3848364f129ff21a9ddee34c2405a44c5f46dd4a1aed8fbb849b2701d4455d"}
{"level":"info","ts":"2026-07-27T17:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4937a3f26dbd4ac44363da7a6610ae91fc5e1f9a02434705fff780ed778f1c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c3848364f129ff21a9ddee34c2405a44c5f46dd4a1aed8fbb849b2701d4455d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:03:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:03:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c3848364f129ff21a9ddee34c2405a44c5f46dd4a1aed8fbb849b2701d4455d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c3848364f129ff21a9ddee34c2405a44c5f46dd4a1aed8fbb849b2701d4455d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f48f3e73a729179c6e50116cf8432c855b2ac350aa016de73197d8818f8d87b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:03:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:03:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f48f3e73a729179c6e50116cf8432c855b2ac350aa016de73197d8818f8d87b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd4d5099d1dfd5f0bce059bee08748d75c018ceae08e61dfb8b929ac5733afc4"}
{"level":"info","ts":"2026-07-27T17:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f48f3e73a729179c6e50116cf8432c855b2ac350aa016de73197d8818f8d87b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4937a3f26dbd4ac44363da7a6610ae91fc5e1f9a02434705fff780ed778f1c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:03:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:03:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4937a3f26dbd4ac44363da7a6610ae91fc5e1f9a02434705fff780ed778f1c0"}
{"level":"info","ts":"2026-07-27T17:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4937a3f26dbd4ac44363da7a6610ae91fc5e1f9a02434705fff780ed778f1c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c3848364f129ff21a9ddee34c2405a44c5f46dd4a1aed8fbb849b2701d4455d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f48f3e73a729179c6e50116cf8432c855b2ac350aa016de73197d8818f8d87b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:03:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:03:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f48f3e73a729179c6e50116cf8432c855b2ac350aa016de73197d8818f8d87b"}
{"level":"info","ts":"2026-07-27T17:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f48f3e73a729179c6e50116cf8432c855b2ac350aa016de73197d8818f8d87b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4937a3f26dbd4ac44363da7a6610ae91fc5e1f9a02434705fff780ed778f1c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:03:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:03:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4937a3f26dbd4ac44363da7a6610ae91fc5e1f9a02434705fff780ed778f1c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4937a3f26dbd4ac44363da7a6610ae91fc5e1f9a02434705fff780ed778f1c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f48f3e73a729179c6e50116cf8432c855b2ac350aa016de73197d8818f8d87b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:03:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:03:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f48f3e73a729179c6e50116cf8432c855b2ac350aa016de73197d8818f8d87b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c3848364f129ff21a9ddee34c2405a44c5f46dd4a1aed8fbb849b2701d4455d"}
{"level":"info","ts":"2026-07-27T17:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f48f3e73a729179c6e50116cf8432c855b2ac350aa016de73197d8818f8d87b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4937a3f26dbd4ac44363da7a6610ae91fc5e1f9a02434705fff780ed778f1c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:03:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:03:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4937a3f26dbd4ac44363da7a6610ae91fc5e1f9a02434705fff780ed778f1c0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4937a3f26dbd4ac44363da7a6610ae91fc5e1f9a02434705fff780ed778f1c0"}
{"level":"debug","ts":"2026-07-27T17:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f48f3e73a729179c6e50116cf8432c855b2ac350aa016de73197d8818f8d87b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4937a3f26dbd4ac44363da7a6610ae91fc5e1f9a02434705fff780ed778f1c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:03:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:03:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4937a3f26dbd4ac44363da7a6610ae91fc5e1f9a02434705fff780ed778f1c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f48f3e73a729179c6e50116cf8432c855b2ac350aa016de73197d8818f8d87b"}
{"level":"info","ts":"2026-07-27T17:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4937a3f26dbd4ac44363da7a6610ae91fc5e1f9a02434705fff780ed778f1c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4937a3f26dbd4ac44363da7a6610ae91fc5e1f9a02434705fff780ed778f1c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4937a3f26dbd4ac44363da7a6610ae91fc5e1f9a02434705fff780ed778f1c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:03:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:03:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4937a3f26dbd4ac44363da7a6610ae91fc5e1f9a02434705fff780ed778f1c0"}
{"level":"info","ts":"2026-07-27T17:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4937a3f26dbd4ac44363da7a6610ae91fc5e1f9a02434705fff780ed778f1c0"}
{"level":"info","ts":"2026-07-27T17:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4937a3f26dbd4ac44363da7a6610ae91fc5e1f9a02434705fff780ed778f1c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4937a3f26dbd4ac44363da7a6610ae91fc5e1f9a02434705fff780ed778f1c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4937a3f26dbd4ac44363da7a6610ae91fc5e1f9a02434705fff780ed778f1c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4937a3f26dbd4ac44363da7a6610ae91fc5e1f9a02434705fff780ed778f1c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4937a3f26dbd4ac44363da7a6610ae91fc5e1f9a02434705fff780ed778f1c0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4937a3f26dbd4ac44363da7a6610ae91fc5e1f9a02434705fff780ed778f1c0"}
{"level":"debug","ts":"2026-07-27T17:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4937a3f26dbd4ac44363da7a6610ae91fc5e1f9a02434705fff780ed778f1c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:03:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:03:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4937a3f26dbd4ac44363da7a6610ae91fc5e1f9a02434705fff780ed778f1c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4937a3f26dbd4ac44363da7a6610ae91fc5e1f9a02434705fff780ed778f1c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4937a3f26dbd4ac44363da7a6610ae91fc5e1f9a02434705fff780ed778f1c0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4937a3f26dbd4ac44363da7a6610ae91fc5e1f9a02434705fff780ed778f1c0"}
{"level":"info","ts":"2026-07-27T17:03:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7d28947f-7c7a-4489-8766-a376b0901b5e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:49224","PortSpecifier":{"PortValue":49224}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7d28947f-7c7a-4489-8766-a376b0901b5e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-f1b699.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T17:03:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7d28947f-7c7a-4489-8766-a376b0901b5e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:49224","PortSpecifier":{"PortValue":49224}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785171833,"nanos":942760589},"http":{"id":"7d28947f-7c7a-4489-8766-a376b0901b5e","method":"POST","headers":{":authority":"e2e-shared-a-f1b699.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T17:03:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7d28947f-7c7a-4489-8766-a376b0901b5e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-27T17:03:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7d28947f-7c7a-4489-8766-a376b0901b5e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"19d4fba8-6c28-4c2a-aa40-edbdeb6a848c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=809080bc-3172-467d-b414-ed0fcd1808a3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5e36e679cd16"]}}
{"level":"debug","ts":"2026-07-27T17:03:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7d28947f-7c7a-4489-8766-a376b0901b5e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5e36e679cd16"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=809080bc-3172-467d-b414-ed0fcd1808a3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"19d4fba8-6c28-4c2a-aa40-edbdeb6a848c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a0279726128b5852e1cf0d3d361293726e16445d8edc2dfaeb34f3dfb08d6635"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f1b699.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T17:03:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d28947f-7c7a-4489-8766-a376b0901b5e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:03:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d28947f-7c7a-4489-8766-a376b0901b5e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:03:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d28947f-7c7a-4489-8766-a376b0901b5e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f1b699/auth-test-model-f1b699\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-f1b699/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:03:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7d28947f-7c7a-4489-8766-a376b0901b5e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-27T17:03:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7d28947f-7c7a-4489-8766-a376b0901b5e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T17:03:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7d28947f-7c7a-4489-8766-a376b0901b5e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-27T17:03:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7d28947f-7c7a-4489-8766-a376b0901b5e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T17:03:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7d28947f-7c7a-4489-8766-a376b0901b5e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T17:03:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9fdc67e6-ab8a-48de-a48c-ef986f515470","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:46042","PortSpecifier":{"PortValue":46042}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9fdc67e6-ab8a-48de-a48c-ef986f515470","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-d4529a.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T17:03:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9fdc67e6-ab8a-48de-a48c-ef986f515470","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:46042","PortSpecifier":{"PortValue":46042}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785171833,"nanos":984904813},"http":{"id":"9fdc67e6-ab8a-48de-a48c-ef986f515470","method":"POST","headers":{":authority":"e2e-shared-b-d4529a.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T17:03:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9fdc67e6-ab8a-48de-a48c-ef986f515470","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-27T17:03:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9fdc67e6-ab8a-48de-a48c-ef986f515470","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"19d4fba8-6c28-4c2a-aa40-edbdeb6a848c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=809080bc-3172-467d-b414-ed0fcd1808a3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5e36e679cd16"]}}
{"level":"debug","ts":"2026-07-27T17:03:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9fdc67e6-ab8a-48de-a48c-ef986f515470","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5e36e679cd16"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=809080bc-3172-467d-b414-ed0fcd1808a3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"19d4fba8-6c28-4c2a-aa40-edbdeb6a848c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"499f2ee74b79bef8d9452062eb130b9959f1fb529e1c3b7066cb35607df99b2d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d4529a.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T17:03:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9fdc67e6-ab8a-48de-a48c-ef986f515470","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:03:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9fdc67e6-ab8a-48de-a48c-ef986f515470","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:03:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9fdc67e6-ab8a-48de-a48c-ef986f515470","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d4529a/auth-test-model-d4529a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-d4529a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:03:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9fdc67e6-ab8a-48de-a48c-ef986f515470","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-27T17:03:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9fdc67e6-ab8a-48de-a48c-ef986f515470","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T17:03:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9fdc67e6-ab8a-48de-a48c-ef986f515470","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-27T17:03:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9fdc67e6-ab8a-48de-a48c-ef986f515470","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T17:03:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9fdc67e6-ab8a-48de-a48c-ef986f515470","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T17:03:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"caeecec7-9c7f-4502-be40-de53724059a1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:46048","PortSpecifier":{"PortValue":46048}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"caeecec7-9c7f-4502-be40-de53724059a1","method":"GET","path":"/maas-api/v1/api-keys/e5a7fa25-391d-410b-9451-1c457c205e34","host":"e2e-shared-b-d4529a.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T17:03:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"caeecec7-9c7f-4502-be40-de53724059a1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:46048","PortSpecifier":{"PortValue":46048}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785171834,"nanos":28747684},"http":{"id":"caeecec7-9c7f-4502-be40-de53724059a1","method":"GET","headers":{":authority":"e2e-shared-b-d4529a.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/e5a7fa25-391d-410b-9451-1c457c205e34",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T17:03:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"caeecec7-9c7f-4502-be40-de53724059a1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-27T17:03:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"caeecec7-9c7f-4502-be40-de53724059a1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"19d4fba8-6c28-4c2a-aa40-edbdeb6a848c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=809080bc-3172-467d-b414-ed0fcd1808a3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5e36e679cd16"]}}
{"level":"debug","ts":"2026-07-27T17:03:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"caeecec7-9c7f-4502-be40-de53724059a1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5e36e679cd16"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=809080bc-3172-467d-b414-ed0fcd1808a3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"19d4fba8-6c28-4c2a-aa40-edbdeb6a848c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"499f2ee74b79bef8d9452062eb130b9959f1fb529e1c3b7066cb35607df99b2d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d4529a.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/e5a7fa25-391d-410b-9451-1c457c205e34",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T17:03:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"caeecec7-9c7f-4502-be40-de53724059a1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:03:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"caeecec7-9c7f-4502-be40-de53724059a1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:03:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"caeecec7-9c7f-4502-be40-de53724059a1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d4529a/auth-test-model-d4529a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-d4529a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:03:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"caeecec7-9c7f-4502-be40-de53724059a1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-27T17:03:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"caeecec7-9c7f-4502-be40-de53724059a1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T17:03:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"caeecec7-9c7f-4502-be40-de53724059a1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-27T17:03:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"caeecec7-9c7f-4502-be40-de53724059a1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T17:03:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"caeecec7-9c7f-4502-be40-de53724059a1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T17:03:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fc53a350-d5ed-4c0e-8f38-ce88ef892a97","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:49228","PortSpecifier":{"PortValue":49228}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fc53a350-d5ed-4c0e-8f38-ce88ef892a97","method":"GET","path":"/maas-api/v1/api-keys/e5a7fa25-391d-410b-9451-1c457c205e34","host":"e2e-shared-a-f1b699.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T17:03:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fc53a350-d5ed-4c0e-8f38-ce88ef892a97","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:49228","PortSpecifier":{"PortValue":49228}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785171834,"nanos":65365530},"http":{"id":"fc53a350-d5ed-4c0e-8f38-ce88ef892a97","method":"GET","headers":{":authority":"e2e-shared-a-f1b699.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/e5a7fa25-391d-410b-9451-1c457c205e34",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T17:03:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fc53a350-d5ed-4c0e-8f38-ce88ef892a97","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-27T17:03:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fc53a350-d5ed-4c0e-8f38-ce88ef892a97","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"19d4fba8-6c28-4c2a-aa40-edbdeb6a848c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=809080bc-3172-467d-b414-ed0fcd1808a3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5e36e679cd16"]}}
{"level":"debug","ts":"2026-07-27T17:03:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fc53a350-d5ed-4c0e-8f38-ce88ef892a97","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5e36e679cd16"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=809080bc-3172-467d-b414-ed0fcd1808a3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"19d4fba8-6c28-4c2a-aa40-edbdeb6a848c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a0279726128b5852e1cf0d3d361293726e16445d8edc2dfaeb34f3dfb08d6635"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f1b699.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/e5a7fa25-391d-410b-9451-1c457c205e34",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T17:03:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc53a350-d5ed-4c0e-8f38-ce88ef892a97","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:03:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc53a350-d5ed-4c0e-8f38-ce88ef892a97","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:03:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc53a350-d5ed-4c0e-8f38-ce88ef892a97","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f1b699/auth-test-model-f1b699\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-f1b699/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:03:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fc53a350-d5ed-4c0e-8f38-ce88ef892a97","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-27T17:03:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fc53a350-d5ed-4c0e-8f38-ce88ef892a97","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-27T17:03:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fc53a350-d5ed-4c0e-8f38-ce88ef892a97","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-27T17:03:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fc53a350-d5ed-4c0e-8f38-ce88ef892a97","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T17:03:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fc53a350-d5ed-4c0e-8f38-ce88ef892a97","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T17:03:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0f48f3e73a729179c6e50116cf8432c855b2ac350aa016de73197d8818f8d87b"}
{"level":"info","ts":"2026-07-27T17:03:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/53b062b53441a9c411fabd8ffe2bea89c73a97f7966e8cff9991276a6b43bdea"}
{"level":"info","ts":"2026-07-27T17:03:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/07d150e7e8aac5b7e16bfaf880332d3f71c8f9bec1ce0e95d3f93ad12a5f55a4"}
{"level":"info","ts":"2026-07-27T17:03:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/392b90ef044ae0089d62eff20809fe3a080f40934880656fcd30d746c09b2802"}
{"level":"info","ts":"2026-07-27T17:03:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/499f2ee74b79bef8d9452062eb130b9959f1fb529e1c3b7066cb35607df99b2d"}
{"level":"info","ts":"2026-07-27T17:03:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dc160882741e7df2edc8c31f6b1818ad7797a9e92c8b8ffc34362cdba4724cc0"}
{"level":"info","ts":"2026-07-27T17:03:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/49e979b0a7c7ba943d34ae3f80cd32f215db61266847799e55ae9b0d9330fe28"}
{"level":"info","ts":"2026-07-27T17:03:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013"}
{"level":"info","ts":"2026-07-27T17:03:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9c3848364f129ff21a9ddee34c2405a44c5f46dd4a1aed8fbb849b2701d4455d"}
{"level":"info","ts":"2026-07-27T17:03:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8493644d5e83215ae93a0bc7d04a9790458959dab4dd084beb007820ea21f4e2"}
{"level":"info","ts":"2026-07-27T17:03:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dd4d5099d1dfd5f0bce059bee08748d75c018ceae08e61dfb8b929ac5733afc4"}
{"level":"info","ts":"2026-07-27T17:03:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f4937a3f26dbd4ac44363da7a6610ae91fc5e1f9a02434705fff780ed778f1c0"}
{"level":"debug","ts":"2026-07-27T17:04:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:04:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:04:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:04:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:04:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:04:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:04:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013"}
{"level":"debug","ts":"2026-07-27T17:04:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:04:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013"}
{"level":"debug","ts":"2026-07-27T17:04:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:04:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:04:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:04:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:04:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:04:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:04:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:04:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:04:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4937a3f26dbd4ac44363da7a6610ae91fc5e1f9a02434705fff780ed778f1c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:04:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:04:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:04:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013"}
{"level":"info","ts":"2026-07-27T17:04:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4937a3f26dbd4ac44363da7a6610ae91fc5e1f9a02434705fff780ed778f1c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:04:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:04:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:04:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:04:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4937a3f26dbd4ac44363da7a6610ae91fc5e1f9a02434705fff780ed778f1c0"}
{"level":"info","ts":"2026-07-27T17:04:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:04:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4937a3f26dbd4ac44363da7a6610ae91fc5e1f9a02434705fff780ed778f1c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:04:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:04:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4937a3f26dbd4ac44363da7a6610ae91fc5e1f9a02434705fff780ed778f1c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:04:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4937a3f26dbd4ac44363da7a6610ae91fc5e1f9a02434705fff780ed778f1c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:04:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:04:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:04:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:04:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013"}
{"level":"info","ts":"2026-07-27T17:04:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:04:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4937a3f26dbd4ac44363da7a6610ae91fc5e1f9a02434705fff780ed778f1c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:04:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:04:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:04:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4937a3f26dbd4ac44363da7a6610ae91fc5e1f9a02434705fff780ed778f1c0"}
{"level":"info","ts":"2026-07-27T17:04:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4937a3f26dbd4ac44363da7a6610ae91fc5e1f9a02434705fff780ed778f1c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:04:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:04:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4937a3f26dbd4ac44363da7a6610ae91fc5e1f9a02434705fff780ed778f1c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:04:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:04:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4937a3f26dbd4ac44363da7a6610ae91fc5e1f9a02434705fff780ed778f1c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:04:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4937a3f26dbd4ac44363da7a6610ae91fc5e1f9a02434705fff780ed778f1c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:04:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:04:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4937a3f26dbd4ac44363da7a6610ae91fc5e1f9a02434705fff780ed778f1c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:04:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:04:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4937a3f26dbd4ac44363da7a6610ae91fc5e1f9a02434705fff780ed778f1c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:04:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013"}
{"level":"error","ts":"2026-07-27T17:04:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f4937a3f26dbd4ac44363da7a6610ae91fc5e1f9a02434705fff780ed778f1c0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f4937a3f26dbd4ac44363da7a6610ae91fc5e1f9a02434705fff780ed778f1c0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-27T17:04:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4937a3f26dbd4ac44363da7a6610ae91fc5e1f9a02434705fff780ed778f1c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:04:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:04:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:04:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4937a3f26dbd4ac44363da7a6610ae91fc5e1f9a02434705fff780ed778f1c0"}
{"level":"info","ts":"2026-07-27T17:04:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4937a3f26dbd4ac44363da7a6610ae91fc5e1f9a02434705fff780ed778f1c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:04:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:04:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:04:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:04:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:04:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4937a3f26dbd4ac44363da7a6610ae91fc5e1f9a02434705fff780ed778f1c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:04:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:04:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4937a3f26dbd4ac44363da7a6610ae91fc5e1f9a02434705fff780ed778f1c0"}
{"level":"debug","ts":"2026-07-27T17:04:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4937a3f26dbd4ac44363da7a6610ae91fc5e1f9a02434705fff780ed778f1c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:04:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:04:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4937a3f26dbd4ac44363da7a6610ae91fc5e1f9a02434705fff780ed778f1c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:04:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013"}
{"level":"info","ts":"2026-07-27T17:04:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4937a3f26dbd4ac44363da7a6610ae91fc5e1f9a02434705fff780ed778f1c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:04:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4937a3f26dbd4ac44363da7a6610ae91fc5e1f9a02434705fff780ed778f1c0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4937a3f26dbd4ac44363da7a6610ae91fc5e1f9a02434705fff780ed778f1c0"}
{"level":"debug","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd4d5099d1dfd5f0bce059bee08748d75c018ceae08e61dfb8b929ac5733afc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:04:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:04:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd4d5099d1dfd5f0bce059bee08748d75c018ceae08e61dfb8b929ac5733afc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd4d5099d1dfd5f0bce059bee08748d75c018ceae08e61dfb8b929ac5733afc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd4d5099d1dfd5f0bce059bee08748d75c018ceae08e61dfb8b929ac5733afc4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd4d5099d1dfd5f0bce059bee08748d75c018ceae08e61dfb8b929ac5733afc4"}
{"level":"debug","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd4d5099d1dfd5f0bce059bee08748d75c018ceae08e61dfb8b929ac5733afc4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd4d5099d1dfd5f0bce059bee08748d75c018ceae08e61dfb8b929ac5733afc4"}
{"level":"debug","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd4d5099d1dfd5f0bce059bee08748d75c018ceae08e61dfb8b929ac5733afc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:04:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:04:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd4d5099d1dfd5f0bce059bee08748d75c018ceae08e61dfb8b929ac5733afc4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd4d5099d1dfd5f0bce059bee08748d75c018ceae08e61dfb8b929ac5733afc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd4d5099d1dfd5f0bce059bee08748d75c018ceae08e61dfb8b929ac5733afc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:04:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:04:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd4d5099d1dfd5f0bce059bee08748d75c018ceae08e61dfb8b929ac5733afc4"}
{"level":"info","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd4d5099d1dfd5f0bce059bee08748d75c018ceae08e61dfb8b929ac5733afc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8493644d5e83215ae93a0bc7d04a9790458959dab4dd084beb007820ea21f4e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:04:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:04:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8493644d5e83215ae93a0bc7d04a9790458959dab4dd084beb007820ea21f4e2"}
{"level":"info","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd4d5099d1dfd5f0bce059bee08748d75c018ceae08e61dfb8b929ac5733afc4"}
{"level":"info","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8493644d5e83215ae93a0bc7d04a9790458959dab4dd084beb007820ea21f4e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd4d5099d1dfd5f0bce059bee08748d75c018ceae08e61dfb8b929ac5733afc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:04:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:04:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd4d5099d1dfd5f0bce059bee08748d75c018ceae08e61dfb8b929ac5733afc4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8493644d5e83215ae93a0bc7d04a9790458959dab4dd084beb007820ea21f4e2"}
{"level":"info","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd4d5099d1dfd5f0bce059bee08748d75c018ceae08e61dfb8b929ac5733afc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8493644d5e83215ae93a0bc7d04a9790458959dab4dd084beb007820ea21f4e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:04:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:04:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8493644d5e83215ae93a0bc7d04a9790458959dab4dd084beb007820ea21f4e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8493644d5e83215ae93a0bc7d04a9790458959dab4dd084beb007820ea21f4e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd4d5099d1dfd5f0bce059bee08748d75c018ceae08e61dfb8b929ac5733afc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:04:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:04:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd4d5099d1dfd5f0bce059bee08748d75c018ceae08e61dfb8b929ac5733afc4"}
{"level":"info","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd4d5099d1dfd5f0bce059bee08748d75c018ceae08e61dfb8b929ac5733afc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8493644d5e83215ae93a0bc7d04a9790458959dab4dd084beb007820ea21f4e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:04:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:04:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8493644d5e83215ae93a0bc7d04a9790458959dab4dd084beb007820ea21f4e2"}
{"level":"info","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8493644d5e83215ae93a0bc7d04a9790458959dab4dd084beb007820ea21f4e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd4d5099d1dfd5f0bce059bee08748d75c018ceae08e61dfb8b929ac5733afc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8493644d5e83215ae93a0bc7d04a9790458959dab4dd084beb007820ea21f4e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:04:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:04:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8493644d5e83215ae93a0bc7d04a9790458959dab4dd084beb007820ea21f4e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd4d5099d1dfd5f0bce059bee08748d75c018ceae08e61dfb8b929ac5733afc4"}
{"level":"info","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8493644d5e83215ae93a0bc7d04a9790458959dab4dd084beb007820ea21f4e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd4d5099d1dfd5f0bce059bee08748d75c018ceae08e61dfb8b929ac5733afc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:04:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:04:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd4d5099d1dfd5f0bce059bee08748d75c018ceae08e61dfb8b929ac5733afc4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd4d5099d1dfd5f0bce059bee08748d75c018ceae08e61dfb8b929ac5733afc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49e979b0a7c7ba943d34ae3f80cd32f215db61266847799e55ae9b0d9330fe28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:04:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:04:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8493644d5e83215ae93a0bc7d04a9790458959dab4dd084beb007820ea21f4e2"}
{"level":"info","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49e979b0a7c7ba943d34ae3f80cd32f215db61266847799e55ae9b0d9330fe28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8493644d5e83215ae93a0bc7d04a9790458959dab4dd084beb007820ea21f4e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd4d5099d1dfd5f0bce059bee08748d75c018ceae08e61dfb8b929ac5733afc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49e979b0a7c7ba943d34ae3f80cd32f215db61266847799e55ae9b0d9330fe28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:04:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:04:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49e979b0a7c7ba943d34ae3f80cd32f215db61266847799e55ae9b0d9330fe28"}
{"level":"info","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49e979b0a7c7ba943d34ae3f80cd32f215db61266847799e55ae9b0d9330fe28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49e979b0a7c7ba943d34ae3f80cd32f215db61266847799e55ae9b0d9330fe28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:04:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:04:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["49e979b0a7c7ba943d34ae3f80cd32f215db61266847799e55ae9b0d9330fe28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"49e979b0a7c7ba943d34ae3f80cd32f215db61266847799e55ae9b0d9330fe28","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"49e979b0a7c7ba943d34ae3f80cd32f215db61266847799e55ae9b0d9330fe28\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49e979b0a7c7ba943d34ae3f80cd32f215db61266847799e55ae9b0d9330fe28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:04:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:04:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["49e979b0a7c7ba943d34ae3f80cd32f215db61266847799e55ae9b0d9330fe28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49e979b0a7c7ba943d34ae3f80cd32f215db61266847799e55ae9b0d9330fe28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49e979b0a7c7ba943d34ae3f80cd32f215db61266847799e55ae9b0d9330fe28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:04:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:04:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["49e979b0a7c7ba943d34ae3f80cd32f215db61266847799e55ae9b0d9330fe28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd4d5099d1dfd5f0bce059bee08748d75c018ceae08e61dfb8b929ac5733afc4"}
{"level":"error","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"49e979b0a7c7ba943d34ae3f80cd32f215db61266847799e55ae9b0d9330fe28","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"49e979b0a7c7ba943d34ae3f80cd32f215db61266847799e55ae9b0d9330fe28\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49e979b0a7c7ba943d34ae3f80cd32f215db61266847799e55ae9b0d9330fe28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49e979b0a7c7ba943d34ae3f80cd32f215db61266847799e55ae9b0d9330fe28","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8493644d5e83215ae93a0bc7d04a9790458959dab4dd084beb007820ea21f4e2"}
{"level":"info","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49e979b0a7c7ba943d34ae3f80cd32f215db61266847799e55ae9b0d9330fe28"}
{"level":"debug","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07d150e7e8aac5b7e16bfaf880332d3f71c8f9bec1ce0e95d3f93ad12a5f55a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:04:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:04:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07d150e7e8aac5b7e16bfaf880332d3f71c8f9bec1ce0e95d3f93ad12a5f55a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07d150e7e8aac5b7e16bfaf880332d3f71c8f9bec1ce0e95d3f93ad12a5f55a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07d150e7e8aac5b7e16bfaf880332d3f71c8f9bec1ce0e95d3f93ad12a5f55a4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07d150e7e8aac5b7e16bfaf880332d3f71c8f9bec1ce0e95d3f93ad12a5f55a4"}
{"level":"debug","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07d150e7e8aac5b7e16bfaf880332d3f71c8f9bec1ce0e95d3f93ad12a5f55a4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07d150e7e8aac5b7e16bfaf880332d3f71c8f9bec1ce0e95d3f93ad12a5f55a4"}
{"level":"debug","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07d150e7e8aac5b7e16bfaf880332d3f71c8f9bec1ce0e95d3f93ad12a5f55a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:04:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:04:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07d150e7e8aac5b7e16bfaf880332d3f71c8f9bec1ce0e95d3f93ad12a5f55a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07d150e7e8aac5b7e16bfaf880332d3f71c8f9bec1ce0e95d3f93ad12a5f55a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07d150e7e8aac5b7e16bfaf880332d3f71c8f9bec1ce0e95d3f93ad12a5f55a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:04:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:04:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07d150e7e8aac5b7e16bfaf880332d3f71c8f9bec1ce0e95d3f93ad12a5f55a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c3848364f129ff21a9ddee34c2405a44c5f46dd4a1aed8fbb849b2701d4455d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:04:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:04:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07d150e7e8aac5b7e16bfaf880332d3f71c8f9bec1ce0e95d3f93ad12a5f55a4"}
{"level":"info","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c3848364f129ff21a9ddee34c2405a44c5f46dd4a1aed8fbb849b2701d4455d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07d150e7e8aac5b7e16bfaf880332d3f71c8f9bec1ce0e95d3f93ad12a5f55a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:04:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:04:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07d150e7e8aac5b7e16bfaf880332d3f71c8f9bec1ce0e95d3f93ad12a5f55a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07d150e7e8aac5b7e16bfaf880332d3f71c8f9bec1ce0e95d3f93ad12a5f55a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c3848364f129ff21a9ddee34c2405a44c5f46dd4a1aed8fbb849b2701d4455d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:04:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:04:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c3848364f129ff21a9ddee34c2405a44c5f46dd4a1aed8fbb849b2701d4455d"}
{"level":"info","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c3848364f129ff21a9ddee34c2405a44c5f46dd4a1aed8fbb849b2701d4455d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07d150e7e8aac5b7e16bfaf880332d3f71c8f9bec1ce0e95d3f93ad12a5f55a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:04:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:04:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07d150e7e8aac5b7e16bfaf880332d3f71c8f9bec1ce0e95d3f93ad12a5f55a4"}
{"level":"info","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07d150e7e8aac5b7e16bfaf880332d3f71c8f9bec1ce0e95d3f93ad12a5f55a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c3848364f129ff21a9ddee34c2405a44c5f46dd4a1aed8fbb849b2701d4455d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07d150e7e8aac5b7e16bfaf880332d3f71c8f9bec1ce0e95d3f93ad12a5f55a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:04:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:04:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07d150e7e8aac5b7e16bfaf880332d3f71c8f9bec1ce0e95d3f93ad12a5f55a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07d150e7e8aac5b7e16bfaf880332d3f71c8f9bec1ce0e95d3f93ad12a5f55a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07d150e7e8aac5b7e16bfaf880332d3f71c8f9bec1ce0e95d3f93ad12a5f55a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:04:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:04:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07d150e7e8aac5b7e16bfaf880332d3f71c8f9bec1ce0e95d3f93ad12a5f55a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c3848364f129ff21a9ddee34c2405a44c5f46dd4a1aed8fbb849b2701d4455d"}
{"level":"error","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"07d150e7e8aac5b7e16bfaf880332d3f71c8f9bec1ce0e95d3f93ad12a5f55a4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"07d150e7e8aac5b7e16bfaf880332d3f71c8f9bec1ce0e95d3f93ad12a5f55a4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c3848364f129ff21a9ddee34c2405a44c5f46dd4a1aed8fbb849b2701d4455d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:04:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:04:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c3848364f129ff21a9ddee34c2405a44c5f46dd4a1aed8fbb849b2701d4455d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c3848364f129ff21a9ddee34c2405a44c5f46dd4a1aed8fbb849b2701d4455d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07d150e7e8aac5b7e16bfaf880332d3f71c8f9bec1ce0e95d3f93ad12a5f55a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:04:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:04:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07d150e7e8aac5b7e16bfaf880332d3f71c8f9bec1ce0e95d3f93ad12a5f55a4"}
{"level":"info","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07d150e7e8aac5b7e16bfaf880332d3f71c8f9bec1ce0e95d3f93ad12a5f55a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c3848364f129ff21a9ddee34c2405a44c5f46dd4a1aed8fbb849b2701d4455d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:04:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:04:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c3848364f129ff21a9ddee34c2405a44c5f46dd4a1aed8fbb849b2701d4455d"}
{"level":"info","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c3848364f129ff21a9ddee34c2405a44c5f46dd4a1aed8fbb849b2701d4455d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53b062b53441a9c411fabd8ffe2bea89c73a97f7966e8cff9991276a6b43bdea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:04:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:04:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53b062b53441a9c411fabd8ffe2bea89c73a97f7966e8cff9991276a6b43bdea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07d150e7e8aac5b7e16bfaf880332d3f71c8f9bec1ce0e95d3f93ad12a5f55a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:04:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:04:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07d150e7e8aac5b7e16bfaf880332d3f71c8f9bec1ce0e95d3f93ad12a5f55a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53b062b53441a9c411fabd8ffe2bea89c73a97f7966e8cff9991276a6b43bdea"}
{"level":"info","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07d150e7e8aac5b7e16bfaf880332d3f71c8f9bec1ce0e95d3f93ad12a5f55a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c3848364f129ff21a9ddee34c2405a44c5f46dd4a1aed8fbb849b2701d4455d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:04:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:04:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c3848364f129ff21a9ddee34c2405a44c5f46dd4a1aed8fbb849b2701d4455d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07d150e7e8aac5b7e16bfaf880332d3f71c8f9bec1ce0e95d3f93ad12a5f55a4"}
{"level":"info","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c3848364f129ff21a9ddee34c2405a44c5f46dd4a1aed8fbb849b2701d4455d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53b062b53441a9c411fabd8ffe2bea89c73a97f7966e8cff9991276a6b43bdea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:04:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:04:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53b062b53441a9c411fabd8ffe2bea89c73a97f7966e8cff9991276a6b43bdea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53b062b53441a9c411fabd8ffe2bea89c73a97f7966e8cff9991276a6b43bdea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07d150e7e8aac5b7e16bfaf880332d3f71c8f9bec1ce0e95d3f93ad12a5f55a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c3848364f129ff21a9ddee34c2405a44c5f46dd4a1aed8fbb849b2701d4455d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:04:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:04:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c3848364f129ff21a9ddee34c2405a44c5f46dd4a1aed8fbb849b2701d4455d"}
{"level":"info","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c3848364f129ff21a9ddee34c2405a44c5f46dd4a1aed8fbb849b2701d4455d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53b062b53441a9c411fabd8ffe2bea89c73a97f7966e8cff9991276a6b43bdea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:04:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:04:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53b062b53441a9c411fabd8ffe2bea89c73a97f7966e8cff9991276a6b43bdea"}
{"level":"info","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53b062b53441a9c411fabd8ffe2bea89c73a97f7966e8cff9991276a6b43bdea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c3848364f129ff21a9ddee34c2405a44c5f46dd4a1aed8fbb849b2701d4455d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:04:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:04:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c3848364f129ff21a9ddee34c2405a44c5f46dd4a1aed8fbb849b2701d4455d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c3848364f129ff21a9ddee34c2405a44c5f46dd4a1aed8fbb849b2701d4455d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"392b90ef044ae0089d62eff20809fe3a080f40934880656fcd30d746c09b2802","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:04:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:04:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07d150e7e8aac5b7e16bfaf880332d3f71c8f9bec1ce0e95d3f93ad12a5f55a4"}
{"level":"info","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"392b90ef044ae0089d62eff20809fe3a080f40934880656fcd30d746c09b2802","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"499f2ee74b79bef8d9452062eb130b9959f1fb529e1c3b7066cb35607df99b2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:04:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:04:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c3848364f129ff21a9ddee34c2405a44c5f46dd4a1aed8fbb849b2701d4455d"}
{"level":"info","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"499f2ee74b79bef8d9452062eb130b9959f1fb529e1c3b7066cb35607df99b2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53b062b53441a9c411fabd8ffe2bea89c73a97f7966e8cff9991276a6b43bdea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:04:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:04:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53b062b53441a9c411fabd8ffe2bea89c73a97f7966e8cff9991276a6b43bdea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53b062b53441a9c411fabd8ffe2bea89c73a97f7966e8cff9991276a6b43bdea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c3848364f129ff21a9ddee34c2405a44c5f46dd4a1aed8fbb849b2701d4455d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"392b90ef044ae0089d62eff20809fe3a080f40934880656fcd30d746c09b2802","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:04:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:04:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/392b90ef044ae0089d62eff20809fe3a080f40934880656fcd30d746c09b2802"}
{"level":"info","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"392b90ef044ae0089d62eff20809fe3a080f40934880656fcd30d746c09b2802","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:04:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"499f2ee74b79bef8d9452062eb130b9959f1fb529e1c3b7066cb35607df99b2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:04:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:04:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/499f2ee74b79bef8d9452062eb130b9959f1fb529e1c3b7066cb35607df99b2d"}
{"level":"info","ts":"2026-07-27T17:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"499f2ee74b79bef8d9452062eb130b9959f1fb529e1c3b7066cb35607df99b2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53b062b53441a9c411fabd8ffe2bea89c73a97f7966e8cff9991276a6b43bdea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:04:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:04:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53b062b53441a9c411fabd8ffe2bea89c73a97f7966e8cff9991276a6b43bdea"}
{"level":"info","ts":"2026-07-27T17:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53b062b53441a9c411fabd8ffe2bea89c73a97f7966e8cff9991276a6b43bdea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"392b90ef044ae0089d62eff20809fe3a080f40934880656fcd30d746c09b2802","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc160882741e7df2edc8c31f6b1818ad7797a9e92c8b8ffc34362cdba4724cc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:04:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:04:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc160882741e7df2edc8c31f6b1818ad7797a9e92c8b8ffc34362cdba4724cc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"499f2ee74b79bef8d9452062eb130b9959f1fb529e1c3b7066cb35607df99b2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:04:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:04:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["499f2ee74b79bef8d9452062eb130b9959f1fb529e1c3b7066cb35607df99b2d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/392b90ef044ae0089d62eff20809fe3a080f40934880656fcd30d746c09b2802"}
{"level":"info","ts":"2026-07-27T17:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"499f2ee74b79bef8d9452062eb130b9959f1fb529e1c3b7066cb35607df99b2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f48f3e73a729179c6e50116cf8432c855b2ac350aa016de73197d8818f8d87b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:04:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:04:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc160882741e7df2edc8c31f6b1818ad7797a9e92c8b8ffc34362cdba4724cc0"}
{"level":"info","ts":"2026-07-27T17:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f48f3e73a729179c6e50116cf8432c855b2ac350aa016de73197d8818f8d87b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53b062b53441a9c411fabd8ffe2bea89c73a97f7966e8cff9991276a6b43bdea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:04:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:04:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53b062b53441a9c411fabd8ffe2bea89c73a97f7966e8cff9991276a6b43bdea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/499f2ee74b79bef8d9452062eb130b9959f1fb529e1c3b7066cb35607df99b2d"}
{"level":"info","ts":"2026-07-27T17:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f48f3e73a729179c6e50116cf8432c855b2ac350aa016de73197d8818f8d87b"}
{"level":"info","ts":"2026-07-27T17:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53b062b53441a9c411fabd8ffe2bea89c73a97f7966e8cff9991276a6b43bdea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc160882741e7df2edc8c31f6b1818ad7797a9e92c8b8ffc34362cdba4724cc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:04:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:04:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc160882741e7df2edc8c31f6b1818ad7797a9e92c8b8ffc34362cdba4724cc0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53b062b53441a9c411fabd8ffe2bea89c73a97f7966e8cff9991276a6b43bdea"}
{"level":"info","ts":"2026-07-27T17:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53b062b53441a9c411fabd8ffe2bea89c73a97f7966e8cff9991276a6b43bdea"}
{"level":"info","ts":"2026-07-27T17:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc160882741e7df2edc8c31f6b1818ad7797a9e92c8b8ffc34362cdba4724cc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"392b90ef044ae0089d62eff20809fe3a080f40934880656fcd30d746c09b2802","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:04:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:04:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["392b90ef044ae0089d62eff20809fe3a080f40934880656fcd30d746c09b2802"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc160882741e7df2edc8c31f6b1818ad7797a9e92c8b8ffc34362cdba4724cc0"}
{"level":"info","ts":"2026-07-27T17:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"392b90ef044ae0089d62eff20809fe3a080f40934880656fcd30d746c09b2802","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"499f2ee74b79bef8d9452062eb130b9959f1fb529e1c3b7066cb35607df99b2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f48f3e73a729179c6e50116cf8432c855b2ac350aa016de73197d8818f8d87b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:04:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:04:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f48f3e73a729179c6e50116cf8432c855b2ac350aa016de73197d8818f8d87b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/392b90ef044ae0089d62eff20809fe3a080f40934880656fcd30d746c09b2802"}
{"level":"info","ts":"2026-07-27T17:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f48f3e73a729179c6e50116cf8432c855b2ac350aa016de73197d8818f8d87b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53b062b53441a9c411fabd8ffe2bea89c73a97f7966e8cff9991276a6b43bdea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc160882741e7df2edc8c31f6b1818ad7797a9e92c8b8ffc34362cdba4724cc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"392b90ef044ae0089d62eff20809fe3a080f40934880656fcd30d746c09b2802","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f48f3e73a729179c6e50116cf8432c855b2ac350aa016de73197d8818f8d87b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f48f3e73a729179c6e50116cf8432c855b2ac350aa016de73197d8818f8d87b"}
{"level":"info","ts":"2026-07-27T17:04:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cae641cd-927c-4975-b0b2-49e88ed50a6a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:55728","PortSpecifier":{"PortValue":55728}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cae641cd-927c-4975-b0b2-49e88ed50a6a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-f1b699.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T17:04:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cae641cd-927c-4975-b0b2-49e88ed50a6a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:55728","PortSpecifier":{"PortValue":55728}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785171877,"nanos":959417910},"http":{"id":"cae641cd-927c-4975-b0b2-49e88ed50a6a","method":"POST","headers":{":authority":"e2e-shared-a-f1b699.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T17:04:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cae641cd-927c-4975-b0b2-49e88ed50a6a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-27T17:04:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cae641cd-927c-4975-b0b2-49e88ed50a6a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"19d4fba8-6c28-4c2a-aa40-edbdeb6a848c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=809080bc-3172-467d-b414-ed0fcd1808a3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5e36e679cd16"]}}
{"level":"debug","ts":"2026-07-27T17:04:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cae641cd-927c-4975-b0b2-49e88ed50a6a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5e36e679cd16"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=809080bc-3172-467d-b414-ed0fcd1808a3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"19d4fba8-6c28-4c2a-aa40-edbdeb6a848c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a0279726128b5852e1cf0d3d361293726e16445d8edc2dfaeb34f3dfb08d6635"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f1b699.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T17:04:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cae641cd-927c-4975-b0b2-49e88ed50a6a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:04:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cae641cd-927c-4975-b0b2-49e88ed50a6a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:04:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cae641cd-927c-4975-b0b2-49e88ed50a6a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f1b699/auth-test-model-f1b699\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-f1b699/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:04:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cae641cd-927c-4975-b0b2-49e88ed50a6a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-27T17:04:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cae641cd-927c-4975-b0b2-49e88ed50a6a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T17:04:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cae641cd-927c-4975-b0b2-49e88ed50a6a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-27T17:04:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cae641cd-927c-4975-b0b2-49e88ed50a6a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T17:04:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cae641cd-927c-4975-b0b2-49e88ed50a6a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T17:04:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8f1f1ca1-823f-4cd5-8ba8-7923d923f275","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:44354","PortSpecifier":{"PortValue":44354}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8f1f1ca1-823f-4cd5-8ba8-7923d923f275","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-d4529a.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T17:04:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8f1f1ca1-823f-4cd5-8ba8-7923d923f275","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:44354","PortSpecifier":{"PortValue":44354}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785171878,"nanos":2277050},"http":{"id":"8f1f1ca1-823f-4cd5-8ba8-7923d923f275","method":"POST","headers":{":authority":"e2e-shared-b-d4529a.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T17:04:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8f1f1ca1-823f-4cd5-8ba8-7923d923f275","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-27T17:04:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8f1f1ca1-823f-4cd5-8ba8-7923d923f275","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"19d4fba8-6c28-4c2a-aa40-edbdeb6a848c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=809080bc-3172-467d-b414-ed0fcd1808a3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5e36e679cd16"]}}
{"level":"debug","ts":"2026-07-27T17:04:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8f1f1ca1-823f-4cd5-8ba8-7923d923f275","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5e36e679cd16"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=809080bc-3172-467d-b414-ed0fcd1808a3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"19d4fba8-6c28-4c2a-aa40-edbdeb6a848c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"499f2ee74b79bef8d9452062eb130b9959f1fb529e1c3b7066cb35607df99b2d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d4529a.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T17:04:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f1f1ca1-823f-4cd5-8ba8-7923d923f275","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:04:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f1f1ca1-823f-4cd5-8ba8-7923d923f275","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:04:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f1f1ca1-823f-4cd5-8ba8-7923d923f275","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d4529a/auth-test-model-d4529a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-d4529a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:04:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8f1f1ca1-823f-4cd5-8ba8-7923d923f275","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-27T17:04:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f1f1ca1-823f-4cd5-8ba8-7923d923f275","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T17:04:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f1f1ca1-823f-4cd5-8ba8-7923d923f275","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-27T17:04:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8f1f1ca1-823f-4cd5-8ba8-7923d923f275","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T17:04:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8f1f1ca1-823f-4cd5-8ba8-7923d923f275","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T17:04:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"34e09e00-4dbd-4e5c-a8e5-ed505d4e8524","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:55736","PortSpecifier":{"PortValue":55736}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"34e09e00-4dbd-4e5c-a8e5-ed505d4e8524","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-f1b699.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T17:04:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"34e09e00-4dbd-4e5c-a8e5-ed505d4e8524","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:55736","PortSpecifier":{"PortValue":55736}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785171878,"nanos":47897040},"http":{"id":"34e09e00-4dbd-4e5c-a8e5-ed505d4e8524","method":"POST","headers":{":authority":"e2e-shared-a-f1b699.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T17:04:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"34e09e00-4dbd-4e5c-a8e5-ed505d4e8524","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-WhPAcs8MNVXMYdWX_QZBu4Cy68jTScNVMJzklJzFhOgkbIE0KJOzZq5avlRm"}
{"level":"debug","ts":"2026-07-27T17:04:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"34e09e00-4dbd-4e5c-a8e5-ed505d4e8524","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f1b699.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-WhPAcs8MNVXMYdWX_QZBu4Cy68jTScNVMJzklJzFhOgkbIE0KJOzZq5avlRm\"}"}
{"level":"debug","ts":"2026-07-27T17:04:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"34e09e00-4dbd-4e5c-a8e5-ed505d4e8524","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f1b699.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8f0bf001-f42d-4bde-84f5-b1aa77cd2ddc","keyName":"e2e-auth-iso-a-7a4763","subscription":"e2e-auth-iso-f0678e","tenant":"e2e-shared-a-f1b699","userId":"8f0bf001-f42d-4bde-84f5-b1aa77cd2ddc","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-27T17:04:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"34e09e00-4dbd-4e5c-a8e5-ed505d4e8524","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T17:04:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"34e09e00-4dbd-4e5c-a8e5-ed505d4e8524","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:04:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"34e09e00-4dbd-4e5c-a8e5-ed505d4e8524","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:04:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"34e09e00-4dbd-4e5c-a8e5-ed505d4e8524","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f1b699/auth-test-model-f1b699\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-f1b699/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:04:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"34e09e00-4dbd-4e5c-a8e5-ed505d4e8524","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T17:04:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"34e09e00-4dbd-4e5c-a8e5-ed505d4e8524","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-27T17:04:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"34e09e00-4dbd-4e5c-a8e5-ed505d4e8524","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-27T17:04:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"34e09e00-4dbd-4e5c-a8e5-ed505d4e8524","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-f0678e"}
{"level":"info","ts":"2026-07-27T17:04:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"34e09e00-4dbd-4e5c-a8e5-ed505d4e8524","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T17:04:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"34e09e00-4dbd-4e5c-a8e5-ed505d4e8524","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T17:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e6ce66892332a2d9e7dabb92a53fdeb23407163b184da504397a2fab599eaeae"}
{"level":"info","ts":"2026-07-27T17:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/618ab97d5cdc980f75e28944291b7d5c8422f6ac9b6cd6b2f929a19265d55218"}
{"level":"info","ts":"2026-07-27T17:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8493644d5e83215ae93a0bc7d04a9790458959dab4dd084beb007820ea21f4e2"}
{"level":"info","ts":"2026-07-27T17:04:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f4937a3f26dbd4ac44363da7a6610ae91fc5e1f9a02434705fff780ed778f1c0"}
{"level":"info","ts":"2026-07-27T17:04:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/452367f17b7f5cd252b50629a680e21d43e00e37a419833d4dde99ab469e0525"}
{"level":"info","ts":"2026-07-27T17:04:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/720b810f84ff74803fb9dd7228b4d532266e9b8e5e0f5e3067405d6ac173a182"}
{"level":"info","ts":"2026-07-27T17:04:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0f48f3e73a729179c6e50116cf8432c855b2ac350aa016de73197d8818f8d87b"}
{"level":"info","ts":"2026-07-27T17:04:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/53b062b53441a9c411fabd8ffe2bea89c73a97f7966e8cff9991276a6b43bdea"}
{"level":"info","ts":"2026-07-27T17:04:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/309cceebf18946318aa76ba5a0a6959e52b1f5ba502ce3815b80172cfc032b90"}
{"level":"info","ts":"2026-07-27T17:04:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a29e26e4481140dedca42e162ddeb9fc17fe83ebdff92288fb22142077200322"}
{"level":"info","ts":"2026-07-27T17:04:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9c3848364f129ff21a9ddee34c2405a44c5f46dd4a1aed8fbb849b2701d4455d"}
{"level":"info","ts":"2026-07-27T17:04:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/499f2ee74b79bef8d9452062eb130b9959f1fb529e1c3b7066cb35607df99b2d"}
{"level":"info","ts":"2026-07-27T17:04:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/49e979b0a7c7ba943d34ae3f80cd32f215db61266847799e55ae9b0d9330fe28"}
{"level":"info","ts":"2026-07-27T17:04:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0ec936112dc045a3ca3bde5c059cc96604008ad5fa778f76142163e37be8abd3"}
{"level":"info","ts":"2026-07-27T17:04:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dd4d5099d1dfd5f0bce059bee08748d75c018ceae08e61dfb8b929ac5733afc4"}
{"level":"info","ts":"2026-07-27T17:04:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1e7c46685b82071ba8f67f7594a825dc45fdc0dd6028c175944ee8c2ea3d51d4"}
{"level":"info","ts":"2026-07-27T17:04:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/392b90ef044ae0089d62eff20809fe3a080f40934880656fcd30d746c09b2802"}
{"level":"info","ts":"2026-07-27T17:04:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dc160882741e7df2edc8c31f6b1818ad7797a9e92c8b8ffc34362cdba4724cc0"}
{"level":"info","ts":"2026-07-27T17:04:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a0279726128b5852e1cf0d3d361293726e16445d8edc2dfaeb34f3dfb08d6635"}
{"level":"info","ts":"2026-07-27T17:04:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8d468cb3104694eba3306b371cb4d32aba92ff127c921cea5d3a4b8263d1c964"}
{"level":"info","ts":"2026-07-27T17:04:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/07d150e7e8aac5b7e16bfaf880332d3f71c8f9bec1ce0e95d3f93ad12a5f55a4"}
{"level":"info","ts":"2026-07-27T17:04:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013"}
{"level":"info","ts":"2026-07-27T17:04:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d9bd63721daaf82c791cffe93581618c9a41f29b2c35ee071695e1e6f2a72f47"}
{"level":"info","ts":"2026-07-27T17:04:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d1ecc8fb90cd306880792ca77b6a41c2a00d82e4bdc685b154f3d162c9c6c054"}
{"level":"debug","ts":"2026-07-27T17:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67354eb6a1632a1f6c93df47528f9725c1aa8ba3f79398eb3603831a9ce9f374","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:05:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:05:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67354eb6a1632a1f6c93df47528f9725c1aa8ba3f79398eb3603831a9ce9f374"}
{"level":"info","ts":"2026-07-27T17:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67354eb6a1632a1f6c93df47528f9725c1aa8ba3f79398eb3603831a9ce9f374","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67354eb6a1632a1f6c93df47528f9725c1aa8ba3f79398eb3603831a9ce9f374","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:05:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:05:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67354eb6a1632a1f6c93df47528f9725c1aa8ba3f79398eb3603831a9ce9f374"}
{"level":"info","ts":"2026-07-27T17:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67354eb6a1632a1f6c93df47528f9725c1aa8ba3f79398eb3603831a9ce9f374","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03fde0a852c9adf9a291b15b0960b1696fabf27770f33ca6ec66d3cc17c6a7ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:05:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:05:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03fde0a852c9adf9a291b15b0960b1696fabf27770f33ca6ec66d3cc17c6a7ff"}
{"level":"info","ts":"2026-07-27T17:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03fde0a852c9adf9a291b15b0960b1696fabf27770f33ca6ec66d3cc17c6a7ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67354eb6a1632a1f6c93df47528f9725c1aa8ba3f79398eb3603831a9ce9f374","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03fde0a852c9adf9a291b15b0960b1696fabf27770f33ca6ec66d3cc17c6a7ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:05:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:05:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["03fde0a852c9adf9a291b15b0960b1696fabf27770f33ca6ec66d3cc17c6a7ff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67354eb6a1632a1f6c93df47528f9725c1aa8ba3f79398eb3603831a9ce9f374"}
{"level":"info","ts":"2026-07-27T17:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03fde0a852c9adf9a291b15b0960b1696fabf27770f33ca6ec66d3cc17c6a7ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67354eb6a1632a1f6c93df47528f9725c1aa8ba3f79398eb3603831a9ce9f374","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:05:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:05:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67354eb6a1632a1f6c93df47528f9725c1aa8ba3f79398eb3603831a9ce9f374"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03fde0a852c9adf9a291b15b0960b1696fabf27770f33ca6ec66d3cc17c6a7ff"}
{"level":"info","ts":"2026-07-27T17:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67354eb6a1632a1f6c93df47528f9725c1aa8ba3f79398eb3603831a9ce9f374","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03fde0a852c9adf9a291b15b0960b1696fabf27770f33ca6ec66d3cc17c6a7ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:05:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:05:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03fde0a852c9adf9a291b15b0960b1696fabf27770f33ca6ec66d3cc17c6a7ff"}
{"level":"info","ts":"2026-07-27T17:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67354eb6a1632a1f6c93df47528f9725c1aa8ba3f79398eb3603831a9ce9f374"}
{"level":"info","ts":"2026-07-27T17:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03fde0a852c9adf9a291b15b0960b1696fabf27770f33ca6ec66d3cc17c6a7ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67354eb6a1632a1f6c93df47528f9725c1aa8ba3f79398eb3603831a9ce9f374","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03fde0a852c9adf9a291b15b0960b1696fabf27770f33ca6ec66d3cc17c6a7ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03fde0a852c9adf9a291b15b0960b1696fabf27770f33ca6ec66d3cc17c6a7ff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03fde0a852c9adf9a291b15b0960b1696fabf27770f33ca6ec66d3cc17c6a7ff"}
{"level":"debug","ts":"2026-07-27T17:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03fde0a852c9adf9a291b15b0960b1696fabf27770f33ca6ec66d3cc17c6a7ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:05:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:05:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["03fde0a852c9adf9a291b15b0960b1696fabf27770f33ca6ec66d3cc17c6a7ff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de9bcb2731cc4b83813f7c9696279ecb79dd22dedaaebc86fba2f2d8ff60482b"}
{"level":"info","ts":"2026-07-27T17:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03fde0a852c9adf9a291b15b0960b1696fabf27770f33ca6ec66d3cc17c6a7ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de9bcb2731cc4b83813f7c9696279ecb79dd22dedaaebc86fba2f2d8ff60482b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:05:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:05:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de9bcb2731cc4b83813f7c9696279ecb79dd22dedaaebc86fba2f2d8ff60482b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03fde0a852c9adf9a291b15b0960b1696fabf27770f33ca6ec66d3cc17c6a7ff"}
{"level":"info","ts":"2026-07-27T17:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de9bcb2731cc4b83813f7c9696279ecb79dd22dedaaebc86fba2f2d8ff60482b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03fde0a852c9adf9a291b15b0960b1696fabf27770f33ca6ec66d3cc17c6a7ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de9bcb2731cc4b83813f7c9696279ecb79dd22dedaaebc86fba2f2d8ff60482b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:05:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:05:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de9bcb2731cc4b83813f7c9696279ecb79dd22dedaaebc86fba2f2d8ff60482b"}
{"level":"info","ts":"2026-07-27T17:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de9bcb2731cc4b83813f7c9696279ecb79dd22dedaaebc86fba2f2d8ff60482b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2240a590ff8aaff2704e817a172b0fc2ecd569fb4b42d2641c677ce7e4d187f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:05:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:05:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2240a590ff8aaff2704e817a172b0fc2ecd569fb4b42d2641c677ce7e4d187f"}
{"level":"info","ts":"2026-07-27T17:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2240a590ff8aaff2704e817a172b0fc2ecd569fb4b42d2641c677ce7e4d187f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de9bcb2731cc4b83813f7c9696279ecb79dd22dedaaebc86fba2f2d8ff60482b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2240a590ff8aaff2704e817a172b0fc2ecd569fb4b42d2641c677ce7e4d187f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:05:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:05:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f2240a590ff8aaff2704e817a172b0fc2ecd569fb4b42d2641c677ce7e4d187f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de9bcb2731cc4b83813f7c9696279ecb79dd22dedaaebc86fba2f2d8ff60482b"}
{"level":"info","ts":"2026-07-27T17:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2240a590ff8aaff2704e817a172b0fc2ecd569fb4b42d2641c677ce7e4d187f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de9bcb2731cc4b83813f7c9696279ecb79dd22dedaaebc86fba2f2d8ff60482b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:05:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:05:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de9bcb2731cc4b83813f7c9696279ecb79dd22dedaaebc86fba2f2d8ff60482b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2240a590ff8aaff2704e817a172b0fc2ecd569fb4b42d2641c677ce7e4d187f"}
{"level":"info","ts":"2026-07-27T17:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2240a590ff8aaff2704e817a172b0fc2ecd569fb4b42d2641c677ce7e4d187f"}
{"level":"info","ts":"2026-07-27T17:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de9bcb2731cc4b83813f7c9696279ecb79dd22dedaaebc86fba2f2d8ff60482b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2240a590ff8aaff2704e817a172b0fc2ecd569fb4b42d2641c677ce7e4d187f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de9bcb2731cc4b83813f7c9696279ecb79dd22dedaaebc86fba2f2d8ff60482b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:05:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:05:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de9bcb2731cc4b83813f7c9696279ecb79dd22dedaaebc86fba2f2d8ff60482b"}
{"level":"info","ts":"2026-07-27T17:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de9bcb2731cc4b83813f7c9696279ecb79dd22dedaaebc86fba2f2d8ff60482b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de9bcb2731cc4b83813f7c9696279ecb79dd22dedaaebc86fba2f2d8ff60482b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de9bcb2731cc4b83813f7c9696279ecb79dd22dedaaebc86fba2f2d8ff60482b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de9bcb2731cc4b83813f7c9696279ecb79dd22dedaaebc86fba2f2d8ff60482b"}
{"level":"debug","ts":"2026-07-27T17:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de9bcb2731cc4b83813f7c9696279ecb79dd22dedaaebc86fba2f2d8ff60482b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:05:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:05:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de9bcb2731cc4b83813f7c9696279ecb79dd22dedaaebc86fba2f2d8ff60482b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de9bcb2731cc4b83813f7c9696279ecb79dd22dedaaebc86fba2f2d8ff60482b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de9bcb2731cc4b83813f7c9696279ecb79dd22dedaaebc86fba2f2d8ff60482b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:05:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:05:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de9bcb2731cc4b83813f7c9696279ecb79dd22dedaaebc86fba2f2d8ff60482b"}
{"level":"info","ts":"2026-07-27T17:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de9bcb2731cc4b83813f7c9696279ecb79dd22dedaaebc86fba2f2d8ff60482b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de9bcb2731cc4b83813f7c9696279ecb79dd22dedaaebc86fba2f2d8ff60482b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac501feebd33c2a1f318b114758cc80aa8f936bb33b517332006ede59c10cd47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:05:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:05:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac501feebd33c2a1f318b114758cc80aa8f936bb33b517332006ede59c10cd47"}
{"level":"info","ts":"2026-07-27T17:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac501feebd33c2a1f318b114758cc80aa8f936bb33b517332006ede59c10cd47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de9bcb2731cc4b83813f7c9696279ecb79dd22dedaaebc86fba2f2d8ff60482b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac501feebd33c2a1f318b114758cc80aa8f936bb33b517332006ede59c10cd47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:05:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:05:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac501feebd33c2a1f318b114758cc80aa8f936bb33b517332006ede59c10cd47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de9bcb2731cc4b83813f7c9696279ecb79dd22dedaaebc86fba2f2d8ff60482b"}
{"level":"info","ts":"2026-07-27T17:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac501feebd33c2a1f318b114758cc80aa8f936bb33b517332006ede59c10cd47"}
{"level":"info","ts":"2026-07-27T17:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac501feebd33c2a1f318b114758cc80aa8f936bb33b517332006ede59c10cd47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de9bcb2731cc4b83813f7c9696279ecb79dd22dedaaebc86fba2f2d8ff60482b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:05:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:05:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de9bcb2731cc4b83813f7c9696279ecb79dd22dedaaebc86fba2f2d8ff60482b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac501feebd33c2a1f318b114758cc80aa8f936bb33b517332006ede59c10cd47"}
{"level":"info","ts":"2026-07-27T17:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de9bcb2731cc4b83813f7c9696279ecb79dd22dedaaebc86fba2f2d8ff60482b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac501feebd33c2a1f318b114758cc80aa8f936bb33b517332006ede59c10cd47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"598386e570e34b28eb3fcdb180fbcec72be026716ddcfedb5796871a5da2b358","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:05:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:05:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/598386e570e34b28eb3fcdb180fbcec72be026716ddcfedb5796871a5da2b358"}
{"level":"info","ts":"2026-07-27T17:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"598386e570e34b28eb3fcdb180fbcec72be026716ddcfedb5796871a5da2b358","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de9bcb2731cc4b83813f7c9696279ecb79dd22dedaaebc86fba2f2d8ff60482b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:05:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:05:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de9bcb2731cc4b83813f7c9696279ecb79dd22dedaaebc86fba2f2d8ff60482b"}
{"level":"info","ts":"2026-07-27T17:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/598386e570e34b28eb3fcdb180fbcec72be026716ddcfedb5796871a5da2b358"}
{"level":"info","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de9bcb2731cc4b83813f7c9696279ecb79dd22dedaaebc86fba2f2d8ff60482b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"598386e570e34b28eb3fcdb180fbcec72be026716ddcfedb5796871a5da2b358","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:05:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:05:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["598386e570e34b28eb3fcdb180fbcec72be026716ddcfedb5796871a5da2b358"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de9bcb2731cc4b83813f7c9696279ecb79dd22dedaaebc86fba2f2d8ff60482b"}
{"level":"info","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"598386e570e34b28eb3fcdb180fbcec72be026716ddcfedb5796871a5da2b358","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de9bcb2731cc4b83813f7c9696279ecb79dd22dedaaebc86fba2f2d8ff60482b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:05:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:05:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de9bcb2731cc4b83813f7c9696279ecb79dd22dedaaebc86fba2f2d8ff60482b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2883373d9d4251bb227e0c62138b68bd11b6e41721acdbaf91e8c5e66ed73f30"}
{"level":"info","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/598386e570e34b28eb3fcdb180fbcec72be026716ddcfedb5796871a5da2b358"}
{"level":"info","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de9bcb2731cc4b83813f7c9696279ecb79dd22dedaaebc86fba2f2d8ff60482b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2883373d9d4251bb227e0c62138b68bd11b6e41721acdbaf91e8c5e66ed73f30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:05:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:05:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2883373d9d4251bb227e0c62138b68bd11b6e41721acdbaf91e8c5e66ed73f30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de9bcb2731cc4b83813f7c9696279ecb79dd22dedaaebc86fba2f2d8ff60482b"}
{"level":"info","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2883373d9d4251bb227e0c62138b68bd11b6e41721acdbaf91e8c5e66ed73f30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"598386e570e34b28eb3fcdb180fbcec72be026716ddcfedb5796871a5da2b358","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de9bcb2731cc4b83813f7c9696279ecb79dd22dedaaebc86fba2f2d8ff60482b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2883373d9d4251bb227e0c62138b68bd11b6e41721acdbaf91e8c5e66ed73f30","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2883373d9d4251bb227e0c62138b68bd11b6e41721acdbaf91e8c5e66ed73f30"}
{"level":"debug","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"866a740a797c1036a9201f5576ad77f878553eff24592de387d01aee703b7c5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:05:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:05:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/866a740a797c1036a9201f5576ad77f878553eff24592de387d01aee703b7c5a"}
{"level":"info","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"866a740a797c1036a9201f5576ad77f878553eff24592de387d01aee703b7c5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"866a740a797c1036a9201f5576ad77f878553eff24592de387d01aee703b7c5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"866a740a797c1036a9201f5576ad77f878553eff24592de387d01aee703b7c5a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/866a740a797c1036a9201f5576ad77f878553eff24592de387d01aee703b7c5a"}
{"level":"debug","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"866a740a797c1036a9201f5576ad77f878553eff24592de387d01aee703b7c5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:05:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:05:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["866a740a797c1036a9201f5576ad77f878553eff24592de387d01aee703b7c5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"866a740a797c1036a9201f5576ad77f878553eff24592de387d01aee703b7c5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"866a740a797c1036a9201f5576ad77f878553eff24592de387d01aee703b7c5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07d150e7e8aac5b7e16bfaf880332d3f71c8f9bec1ce0e95d3f93ad12a5f55a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:05:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:05:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/866a740a797c1036a9201f5576ad77f878553eff24592de387d01aee703b7c5a"}
{"level":"info","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07d150e7e8aac5b7e16bfaf880332d3f71c8f9bec1ce0e95d3f93ad12a5f55a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0279726128b5852e1cf0d3d361293726e16445d8edc2dfaeb34f3dfb08d6635","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:05:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:05:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07d150e7e8aac5b7e16bfaf880332d3f71c8f9bec1ce0e95d3f93ad12a5f55a4"}
{"level":"info","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0279726128b5852e1cf0d3d361293726e16445d8edc2dfaeb34f3dfb08d6635","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07d150e7e8aac5b7e16bfaf880332d3f71c8f9bec1ce0e95d3f93ad12a5f55a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:05:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:05:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07d150e7e8aac5b7e16bfaf880332d3f71c8f9bec1ce0e95d3f93ad12a5f55a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0279726128b5852e1cf0d3d361293726e16445d8edc2dfaeb34f3dfb08d6635"}
{"level":"info","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07d150e7e8aac5b7e16bfaf880332d3f71c8f9bec1ce0e95d3f93ad12a5f55a4"}
{"level":"info","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07d150e7e8aac5b7e16bfaf880332d3f71c8f9bec1ce0e95d3f93ad12a5f55a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0279726128b5852e1cf0d3d361293726e16445d8edc2dfaeb34f3dfb08d6635","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:05:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:05:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0279726128b5852e1cf0d3d361293726e16445d8edc2dfaeb34f3dfb08d6635"}
{"level":"info","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0279726128b5852e1cf0d3d361293726e16445d8edc2dfaeb34f3dfb08d6635","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07d150e7e8aac5b7e16bfaf880332d3f71c8f9bec1ce0e95d3f93ad12a5f55a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:05:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:05:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07d150e7e8aac5b7e16bfaf880332d3f71c8f9bec1ce0e95d3f93ad12a5f55a4"}
{"level":"info","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07d150e7e8aac5b7e16bfaf880332d3f71c8f9bec1ce0e95d3f93ad12a5f55a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0279726128b5852e1cf0d3d361293726e16445d8edc2dfaeb34f3dfb08d6635","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"279d20b6f82c2b40bf665fe4132c5f1a14e348216cf460f533264021d14a6da8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:05:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:05:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0279726128b5852e1cf0d3d361293726e16445d8edc2dfaeb34f3dfb08d6635"}
{"level":"info","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"279d20b6f82c2b40bf665fe4132c5f1a14e348216cf460f533264021d14a6da8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07d150e7e8aac5b7e16bfaf880332d3f71c8f9bec1ce0e95d3f93ad12a5f55a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:05:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:05:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07d150e7e8aac5b7e16bfaf880332d3f71c8f9bec1ce0e95d3f93ad12a5f55a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/279d20b6f82c2b40bf665fe4132c5f1a14e348216cf460f533264021d14a6da8"}
{"level":"info","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07d150e7e8aac5b7e16bfaf880332d3f71c8f9bec1ce0e95d3f93ad12a5f55a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0279726128b5852e1cf0d3d361293726e16445d8edc2dfaeb34f3dfb08d6635","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:05:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:05:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0279726128b5852e1cf0d3d361293726e16445d8edc2dfaeb34f3dfb08d6635"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07d150e7e8aac5b7e16bfaf880332d3f71c8f9bec1ce0e95d3f93ad12a5f55a4"}
{"level":"info","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/279d20b6f82c2b40bf665fe4132c5f1a14e348216cf460f533264021d14a6da8"}
{"level":"info","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0279726128b5852e1cf0d3d361293726e16445d8edc2dfaeb34f3dfb08d6635","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"279d20b6f82c2b40bf665fe4132c5f1a14e348216cf460f533264021d14a6da8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:05:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:05:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["279d20b6f82c2b40bf665fe4132c5f1a14e348216cf460f533264021d14a6da8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a48378784b21fd21e1ee23d4288411a08f8d1a839e818f931a9535211e81d75"}
{"level":"info","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"279d20b6f82c2b40bf665fe4132c5f1a14e348216cf460f533264021d14a6da8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a48378784b21fd21e1ee23d4288411a08f8d1a839e818f931a9535211e81d75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:05:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:05:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a48378784b21fd21e1ee23d4288411a08f8d1a839e818f931a9535211e81d75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07d150e7e8aac5b7e16bfaf880332d3f71c8f9bec1ce0e95d3f93ad12a5f55a4"}
{"level":"info","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a48378784b21fd21e1ee23d4288411a08f8d1a839e818f931a9535211e81d75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07d150e7e8aac5b7e16bfaf880332d3f71c8f9bec1ce0e95d3f93ad12a5f55a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"021f6a83b9086d04d630ef58c691dea6c5a73d9b941c39b9379a86fafb562598","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:05:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:05:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/021f6a83b9086d04d630ef58c691dea6c5a73d9b941c39b9379a86fafb562598"}
{"level":"info","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"021f6a83b9086d04d630ef58c691dea6c5a73d9b941c39b9379a86fafb562598","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0279726128b5852e1cf0d3d361293726e16445d8edc2dfaeb34f3dfb08d6635","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:05:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:05:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0279726128b5852e1cf0d3d361293726e16445d8edc2dfaeb34f3dfb08d6635"}
{"level":"info","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/279d20b6f82c2b40bf665fe4132c5f1a14e348216cf460f533264021d14a6da8"}
{"level":"info","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0279726128b5852e1cf0d3d361293726e16445d8edc2dfaeb34f3dfb08d6635","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"279d20b6f82c2b40bf665fe4132c5f1a14e348216cf460f533264021d14a6da8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a48378784b21fd21e1ee23d4288411a08f8d1a839e818f931a9535211e81d75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:05:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:05:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a48378784b21fd21e1ee23d4288411a08f8d1a839e818f931a9535211e81d75"}
{"level":"info","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a48378784b21fd21e1ee23d4288411a08f8d1a839e818f931a9535211e81d75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c5795abbf08b88ac5012e38ee9bfd2adc09d33bd947f08c2843e91e0e394917","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:05:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:05:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c5795abbf08b88ac5012e38ee9bfd2adc09d33bd947f08c2843e91e0e394917"}
{"level":"info","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c5795abbf08b88ac5012e38ee9bfd2adc09d33bd947f08c2843e91e0e394917","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"021f6a83b9086d04d630ef58c691dea6c5a73d9b941c39b9379a86fafb562598","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0279726128b5852e1cf0d3d361293726e16445d8edc2dfaeb34f3dfb08d6635","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:05:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:05:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0279726128b5852e1cf0d3d361293726e16445d8edc2dfaeb34f3dfb08d6635"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/021f6a83b9086d04d630ef58c691dea6c5a73d9b941c39b9379a86fafb562598"}
{"level":"info","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0279726128b5852e1cf0d3d361293726e16445d8edc2dfaeb34f3dfb08d6635","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53b062b53441a9c411fabd8ffe2bea89c73a97f7966e8cff9991276a6b43bdea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:05:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:05:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0279726128b5852e1cf0d3d361293726e16445d8edc2dfaeb34f3dfb08d6635"}
{"level":"info","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53b062b53441a9c411fabd8ffe2bea89c73a97f7966e8cff9991276a6b43bdea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a48378784b21fd21e1ee23d4288411a08f8d1a839e818f931a9535211e81d75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:05:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:05:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a48378784b21fd21e1ee23d4288411a08f8d1a839e818f931a9535211e81d75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53b062b53441a9c411fabd8ffe2bea89c73a97f7966e8cff9991276a6b43bdea"}
{"level":"info","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a48378784b21fd21e1ee23d4288411a08f8d1a839e818f931a9535211e81d75"}
{"level":"info","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a48378784b21fd21e1ee23d4288411a08f8d1a839e818f931a9535211e81d75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d468cb3104694eba3306b371cb4d32aba92ff127c921cea5d3a4b8263d1c964","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:05:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:05:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d468cb3104694eba3306b371cb4d32aba92ff127c921cea5d3a4b8263d1c964"}
{"level":"info","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c5795abbf08b88ac5012e38ee9bfd2adc09d33bd947f08c2843e91e0e394917"}
{"level":"info","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d468cb3104694eba3306b371cb4d32aba92ff127c921cea5d3a4b8263d1c964","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c5795abbf08b88ac5012e38ee9bfd2adc09d33bd947f08c2843e91e0e394917","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:05:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:05:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c5795abbf08b88ac5012e38ee9bfd2adc09d33bd947f08c2843e91e0e394917"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/452367f17b7f5cd252b50629a680e21d43e00e37a419833d4dde99ab469e0525"}
{"level":"info","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c5795abbf08b88ac5012e38ee9bfd2adc09d33bd947f08c2843e91e0e394917","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"021f6a83b9086d04d630ef58c691dea6c5a73d9b941c39b9379a86fafb562598","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:05:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:05:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["021f6a83b9086d04d630ef58c691dea6c5a73d9b941c39b9379a86fafb562598"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0279726128b5852e1cf0d3d361293726e16445d8edc2dfaeb34f3dfb08d6635"}
{"level":"info","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"021f6a83b9086d04d630ef58c691dea6c5a73d9b941c39b9379a86fafb562598","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"452367f17b7f5cd252b50629a680e21d43e00e37a419833d4dde99ab469e0525","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:05:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:05:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["452367f17b7f5cd252b50629a680e21d43e00e37a419833d4dde99ab469e0525"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6068d3abcac946800cb8e2ac6222988c523adbac3778dc997c093e00e7b199d"}
{"level":"info","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53b062b53441a9c411fabd8ffe2bea89c73a97f7966e8cff9991276a6b43bdea"}
{"level":"info","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"452367f17b7f5cd252b50629a680e21d43e00e37a419833d4dde99ab469e0525","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0279726128b5852e1cf0d3d361293726e16445d8edc2dfaeb34f3dfb08d6635","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6068d3abcac946800cb8e2ac6222988c523adbac3778dc997c093e00e7b199d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:05:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:05:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d6068d3abcac946800cb8e2ac6222988c523adbac3778dc997c093e00e7b199d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da89a2171393818fe91d6b0cca52647cbf3b55af1da629e29b1d99e7f649f818"}
{"level":"info","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d6068d3abcac946800cb8e2ac6222988c523adbac3778dc997c093e00e7b199d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53b062b53441a9c411fabd8ffe2bea89c73a97f7966e8cff9991276a6b43bdea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:05:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:05:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53b062b53441a9c411fabd8ffe2bea89c73a97f7966e8cff9991276a6b43bdea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a48378784b21fd21e1ee23d4288411a08f8d1a839e818f931a9535211e81d75"}
{"level":"info","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013"}
{"level":"info","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53b062b53441a9c411fabd8ffe2bea89c73a97f7966e8cff9991276a6b43bdea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da89a2171393818fe91d6b0cca52647cbf3b55af1da629e29b1d99e7f649f818","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:05:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:05:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da89a2171393818fe91d6b0cca52647cbf3b55af1da629e29b1d99e7f649f818"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d468cb3104694eba3306b371cb4d32aba92ff127c921cea5d3a4b8263d1c964"}
{"level":"info","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da89a2171393818fe91d6b0cca52647cbf3b55af1da629e29b1d99e7f649f818","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a48378784b21fd21e1ee23d4288411a08f8d1a839e818f931a9535211e81d75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:05:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:05:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/720b810f84ff74803fb9dd7228b4d532266e9b8e5e0f5e3067405d6ac173a182"}
{"level":"info","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d468cb3104694eba3306b371cb4d32aba92ff127c921cea5d3a4b8263d1c964","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:05:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:05:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d468cb3104694eba3306b371cb4d32aba92ff127c921cea5d3a4b8263d1c964"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7324f2a6d30a2ae60ea1b7d2f9ac11fd283c7a63fc6931464a90ca8f02ad369a"}
{"level":"info","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d468cb3104694eba3306b371cb4d32aba92ff127c921cea5d3a4b8263d1c964","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"720b810f84ff74803fb9dd7228b4d532266e9b8e5e0f5e3067405d6ac173a182","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:05:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:05:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["720b810f84ff74803fb9dd7228b4d532266e9b8e5e0f5e3067405d6ac173a182"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c5795abbf08b88ac5012e38ee9bfd2adc09d33bd947f08c2843e91e0e394917"}
{"level":"info","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"720b810f84ff74803fb9dd7228b4d532266e9b8e5e0f5e3067405d6ac173a182","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7324f2a6d30a2ae60ea1b7d2f9ac11fd283c7a63fc6931464a90ca8f02ad369a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:05:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:05:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7324f2a6d30a2ae60ea1b7d2f9ac11fd283c7a63fc6931464a90ca8f02ad369a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86747dff70a4dff2a79100d23ac5d1b2dcaa762b1b7105503eae1275dc3fa26d"}
{"level":"info","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7324f2a6d30a2ae60ea1b7d2f9ac11fd283c7a63fc6931464a90ca8f02ad369a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c5795abbf08b88ac5012e38ee9bfd2adc09d33bd947f08c2843e91e0e394917","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86747dff70a4dff2a79100d23ac5d1b2dcaa762b1b7105503eae1275dc3fa26d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:05:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:05:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86747dff70a4dff2a79100d23ac5d1b2dcaa762b1b7105503eae1275dc3fa26d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86747dff70a4dff2a79100d23ac5d1b2dcaa762b1b7105503eae1275dc3fa26d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"021f6a83b9086d04d630ef58c691dea6c5a73d9b941c39b9379a86fafb562598","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:05:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:05:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/021f6a83b9086d04d630ef58c691dea6c5a73d9b941c39b9379a86fafb562598"}
{"level":"info","ts":"2026-07-27T17:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"021f6a83b9086d04d630ef58c691dea6c5a73d9b941c39b9379a86fafb562598","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"499f2ee74b79bef8d9452062eb130b9959f1fb529e1c3b7066cb35607df99b2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:05:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:05:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/499f2ee74b79bef8d9452062eb130b9959f1fb529e1c3b7066cb35607df99b2d"}
{"level":"info","ts":"2026-07-27T17:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"499f2ee74b79bef8d9452062eb130b9959f1fb529e1c3b7066cb35607df99b2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"452367f17b7f5cd252b50629a680e21d43e00e37a419833d4dde99ab469e0525","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:05:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:05:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/452367f17b7f5cd252b50629a680e21d43e00e37a419833d4dde99ab469e0525"}
{"level":"info","ts":"2026-07-27T17:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"452367f17b7f5cd252b50629a680e21d43e00e37a419833d4dde99ab469e0525","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6068d3abcac946800cb8e2ac6222988c523adbac3778dc997c093e00e7b199d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:05:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:05:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d6068d3abcac946800cb8e2ac6222988c523adbac3778dc997c093e00e7b199d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53b062b53441a9c411fabd8ffe2bea89c73a97f7966e8cff9991276a6b43bdea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da89a2171393818fe91d6b0cca52647cbf3b55af1da629e29b1d99e7f649f818","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d468cb3104694eba3306b371cb4d32aba92ff127c921cea5d3a4b8263d1c964","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"720b810f84ff74803fb9dd7228b4d532266e9b8e5e0f5e3067405d6ac173a182","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7324f2a6d30a2ae60ea1b7d2f9ac11fd283c7a63fc6931464a90ca8f02ad369a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86747dff70a4dff2a79100d23ac5d1b2dcaa762b1b7105503eae1275dc3fa26d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"021f6a83b9086d04d630ef58c691dea6c5a73d9b941c39b9379a86fafb562598","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:05:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:05:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["021f6a83b9086d04d630ef58c691dea6c5a73d9b941c39b9379a86fafb562598"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6068d3abcac946800cb8e2ac6222988c523adbac3778dc997c093e00e7b199d"}
{"level":"info","ts":"2026-07-27T17:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"021f6a83b9086d04d630ef58c691dea6c5a73d9b941c39b9379a86fafb562598","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"499f2ee74b79bef8d9452062eb130b9959f1fb529e1c3b7066cb35607df99b2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:05:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:05:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["499f2ee74b79bef8d9452062eb130b9959f1fb529e1c3b7066cb35607df99b2d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53b062b53441a9c411fabd8ffe2bea89c73a97f7966e8cff9991276a6b43bdea"}
{"level":"info","ts":"2026-07-27T17:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"499f2ee74b79bef8d9452062eb130b9959f1fb529e1c3b7066cb35607df99b2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"452367f17b7f5cd252b50629a680e21d43e00e37a419833d4dde99ab469e0525","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:05:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:05:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["452367f17b7f5cd252b50629a680e21d43e00e37a419833d4dde99ab469e0525"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da89a2171393818fe91d6b0cca52647cbf3b55af1da629e29b1d99e7f649f818"}
{"level":"info","ts":"2026-07-27T17:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"452367f17b7f5cd252b50629a680e21d43e00e37a419833d4dde99ab469e0525","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6068d3abcac946800cb8e2ac6222988c523adbac3778dc997c093e00e7b199d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:05:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:05:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d6068d3abcac946800cb8e2ac6222988c523adbac3778dc997c093e00e7b199d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013"}
{"level":"info","ts":"2026-07-27T17:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d6068d3abcac946800cb8e2ac6222988c523adbac3778dc997c093e00e7b199d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"021f6a83b9086d04d630ef58c691dea6c5a73d9b941c39b9379a86fafb562598","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"499f2ee74b79bef8d9452062eb130b9959f1fb529e1c3b7066cb35607df99b2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"452367f17b7f5cd252b50629a680e21d43e00e37a419833d4dde99ab469e0525","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6068d3abcac946800cb8e2ac6222988c523adbac3778dc997c093e00e7b199d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d468cb3104694eba3306b371cb4d32aba92ff127c921cea5d3a4b8263d1c964"}
{"level":"info","ts":"2026-07-27T17:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/720b810f84ff74803fb9dd7228b4d532266e9b8e5e0f5e3067405d6ac173a182"}
{"level":"info","ts":"2026-07-27T17:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7324f2a6d30a2ae60ea1b7d2f9ac11fd283c7a63fc6931464a90ca8f02ad369a"}
{"level":"info","ts":"2026-07-27T17:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86747dff70a4dff2a79100d23ac5d1b2dcaa762b1b7105503eae1275dc3fa26d"}
{"level":"info","ts":"2026-07-27T17:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/021f6a83b9086d04d630ef58c691dea6c5a73d9b941c39b9379a86fafb562598"}
{"level":"info","ts":"2026-07-27T17:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/499f2ee74b79bef8d9452062eb130b9959f1fb529e1c3b7066cb35607df99b2d"}
{"level":"info","ts":"2026-07-27T17:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/452367f17b7f5cd252b50629a680e21d43e00e37a419833d4dde99ab469e0525"}
{"level":"info","ts":"2026-07-27T17:05:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6068d3abcac946800cb8e2ac6222988c523adbac3778dc997c093e00e7b199d"}
{"level":"info","ts":"2026-07-27T17:06:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1ba531c5-7279-4fd1-a147-374f8fd92cd1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43694","PortSpecifier":{"PortValue":43694}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1ba531c5-7279-4fd1-a147-374f8fd92cd1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-f1b699.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T17:06:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1ba531c5-7279-4fd1-a147-374f8fd92cd1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43694","PortSpecifier":{"PortValue":43694}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785171967,"nanos":791712103},"http":{"id":"1ba531c5-7279-4fd1-a147-374f8fd92cd1","method":"POST","headers":{":authority":"e2e-shared-a-f1b699.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T17:06:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1ba531c5-7279-4fd1-a147-374f8fd92cd1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-27T17:06:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1ba531c5-7279-4fd1-a147-374f8fd92cd1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"19d4fba8-6c28-4c2a-aa40-edbdeb6a848c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=809080bc-3172-467d-b414-ed0fcd1808a3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5e36e679cd16"]}}
{"level":"debug","ts":"2026-07-27T17:06:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1ba531c5-7279-4fd1-a147-374f8fd92cd1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5e36e679cd16"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=809080bc-3172-467d-b414-ed0fcd1808a3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"19d4fba8-6c28-4c2a-aa40-edbdeb6a848c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a0279726128b5852e1cf0d3d361293726e16445d8edc2dfaeb34f3dfb08d6635"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f1b699.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T17:06:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ba531c5-7279-4fd1-a147-374f8fd92cd1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:06:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ba531c5-7279-4fd1-a147-374f8fd92cd1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:06:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ba531c5-7279-4fd1-a147-374f8fd92cd1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f1b699/sub-test-model-f1b699\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-f1b699/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:06:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1ba531c5-7279-4fd1-a147-374f8fd92cd1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-27T17:06:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ba531c5-7279-4fd1-a147-374f8fd92cd1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-27T17:06:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ba531c5-7279-4fd1-a147-374f8fd92cd1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-27T17:06:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1ba531c5-7279-4fd1-a147-374f8fd92cd1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T17:06:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1ba531c5-7279-4fd1-a147-374f8fd92cd1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T17:06:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"90534a82-504a-408d-b3f8-5cb66c2e930a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:52206","PortSpecifier":{"PortValue":52206}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"90534a82-504a-408d-b3f8-5cb66c2e930a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-d4529a.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T17:06:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"90534a82-504a-408d-b3f8-5cb66c2e930a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:52206","PortSpecifier":{"PortValue":52206}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785171967,"nanos":843907838},"http":{"id":"90534a82-504a-408d-b3f8-5cb66c2e930a","method":"POST","headers":{":authority":"e2e-shared-b-d4529a.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T17:06:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"90534a82-504a-408d-b3f8-5cb66c2e930a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-27T17:06:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"90534a82-504a-408d-b3f8-5cb66c2e930a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"19d4fba8-6c28-4c2a-aa40-edbdeb6a848c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=809080bc-3172-467d-b414-ed0fcd1808a3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5e36e679cd16"]}}
{"level":"debug","ts":"2026-07-27T17:06:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"90534a82-504a-408d-b3f8-5cb66c2e930a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5e36e679cd16"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=809080bc-3172-467d-b414-ed0fcd1808a3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"19d4fba8-6c28-4c2a-aa40-edbdeb6a848c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"499f2ee74b79bef8d9452062eb130b9959f1fb529e1c3b7066cb35607df99b2d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d4529a.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T17:06:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"90534a82-504a-408d-b3f8-5cb66c2e930a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:06:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"90534a82-504a-408d-b3f8-5cb66c2e930a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:06:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"90534a82-504a-408d-b3f8-5cb66c2e930a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d4529a/sub-test-model-d4529a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-d4529a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:06:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"90534a82-504a-408d-b3f8-5cb66c2e930a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-27T17:06:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"90534a82-504a-408d-b3f8-5cb66c2e930a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T17:06:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"90534a82-504a-408d-b3f8-5cb66c2e930a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-27T17:06:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"90534a82-504a-408d-b3f8-5cb66c2e930a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T17:06:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"90534a82-504a-408d-b3f8-5cb66c2e930a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T17:06:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f94a9e28-5f19-4c77-8773-c9e8762ea138","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43708","PortSpecifier":{"PortValue":43708}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f94a9e28-5f19-4c77-8773-c9e8762ea138","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-f1b699.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T17:06:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f94a9e28-5f19-4c77-8773-c9e8762ea138","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43708","PortSpecifier":{"PortValue":43708}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785171967,"nanos":898693699},"http":{"id":"f94a9e28-5f19-4c77-8773-c9e8762ea138","method":"GET","headers":{":authority":"e2e-shared-a-f1b699.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T17:06:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f94a9e28-5f19-4c77-8773-c9e8762ea138","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-8MrIQS1rypgf2Fd4_HeMmCV7idixl1XoxS7yD1ljKPgviZ08ELBmw7punxas"}
{"level":"debug","ts":"2026-07-27T17:06:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f94a9e28-5f19-4c77-8773-c9e8762ea138","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f1b699.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-8MrIQS1rypgf2Fd4_HeMmCV7idixl1XoxS7yD1ljKPgviZ08ELBmw7punxas\"}"}
{"level":"debug","ts":"2026-07-27T17:06:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f94a9e28-5f19-4c77-8773-c9e8762ea138","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f1b699.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f9280260-6a93-40b7-9292-100a6a264204","keyName":"e2e-sub-iso-643063","subscription":"e2e-a-only-b6077f","tenant":"e2e-shared-a-f1b699","userId":"f9280260-6a93-40b7-9292-100a6a264204","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-27T17:06:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f94a9e28-5f19-4c77-8773-c9e8762ea138","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T17:06:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f94a9e28-5f19-4c77-8773-c9e8762ea138","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:06:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f94a9e28-5f19-4c77-8773-c9e8762ea138","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:06:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f94a9e28-5f19-4c77-8773-c9e8762ea138","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f1b699/sub-test-model-f1b699\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-f1b699/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:06:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f94a9e28-5f19-4c77-8773-c9e8762ea138","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T17:06:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f94a9e28-5f19-4c77-8773-c9e8762ea138","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-27T17:06:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f94a9e28-5f19-4c77-8773-c9e8762ea138","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-27T17:06:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f94a9e28-5f19-4c77-8773-c9e8762ea138","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-b6077f"}
{"level":"info","ts":"2026-07-27T17:06:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f94a9e28-5f19-4c77-8773-c9e8762ea138","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T17:06:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f94a9e28-5f19-4c77-8773-c9e8762ea138","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T17:06:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"efb3fb08-7b05-4d6a-9d16-957d94e8a926","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:52216","PortSpecifier":{"PortValue":52216}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"efb3fb08-7b05-4d6a-9d16-957d94e8a926","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-d4529a.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T17:06:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"efb3fb08-7b05-4d6a-9d16-957d94e8a926","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:52216","PortSpecifier":{"PortValue":52216}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785171967,"nanos":948765756},"http":{"id":"efb3fb08-7b05-4d6a-9d16-957d94e8a926","method":"GET","headers":{":authority":"e2e-shared-b-d4529a.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T17:06:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"efb3fb08-7b05-4d6a-9d16-957d94e8a926","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-PaLB3PPieUOWfdAD_AIBE4N1OO8xZ8sFjVx7Z5ewmfhQPDq4uhhicXhCT6xm"}
{"level":"debug","ts":"2026-07-27T17:06:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"efb3fb08-7b05-4d6a-9d16-957d94e8a926","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-d4529a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-PaLB3PPieUOWfdAD_AIBE4N1OO8xZ8sFjVx7Z5ewmfhQPDq4uhhicXhCT6xm\"}"}
{"level":"debug","ts":"2026-07-27T17:06:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"efb3fb08-7b05-4d6a-9d16-957d94e8a926","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-d4529a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"764e13a5-1d1a-407d-bc47-1ff130d8a249","keyName":"e2e-sub-iso-711b2e","subscription":"e2e-b-only-b6077f","tenant":"e2e-shared-b-d4529a","userId":"764e13a5-1d1a-407d-bc47-1ff130d8a249","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-27T17:06:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"efb3fb08-7b05-4d6a-9d16-957d94e8a926","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T17:06:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"efb3fb08-7b05-4d6a-9d16-957d94e8a926","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:06:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"efb3fb08-7b05-4d6a-9d16-957d94e8a926","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:06:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"efb3fb08-7b05-4d6a-9d16-957d94e8a926","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d4529a/sub-test-model-d4529a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-d4529a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:06:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"efb3fb08-7b05-4d6a-9d16-957d94e8a926","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T17:06:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"efb3fb08-7b05-4d6a-9d16-957d94e8a926","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-27T17:06:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"efb3fb08-7b05-4d6a-9d16-957d94e8a926","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-27T17:06:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"efb3fb08-7b05-4d6a-9d16-957d94e8a926","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-b6077f"}
{"level":"info","ts":"2026-07-27T17:06:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"efb3fb08-7b05-4d6a-9d16-957d94e8a926","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T17:06:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"efb3fb08-7b05-4d6a-9d16-957d94e8a926","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T17:06:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0dd2d87b-6578-426a-8ad9-e7740201f5c6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:46092","PortSpecifier":{"PortValue":46092}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0dd2d87b-6578-426a-8ad9-e7740201f5c6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-f1b699.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T17:06:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0dd2d87b-6578-426a-8ad9-e7740201f5c6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:46092","PortSpecifier":{"PortValue":46092}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785171985,"nanos":589961945},"http":{"id":"0dd2d87b-6578-426a-8ad9-e7740201f5c6","method":"POST","headers":{":authority":"e2e-shared-a-f1b699.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T17:06:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0dd2d87b-6578-426a-8ad9-e7740201f5c6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-27T17:06:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0dd2d87b-6578-426a-8ad9-e7740201f5c6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"19d4fba8-6c28-4c2a-aa40-edbdeb6a848c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=809080bc-3172-467d-b414-ed0fcd1808a3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5e36e679cd16"]}}
{"level":"debug","ts":"2026-07-27T17:06:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0dd2d87b-6578-426a-8ad9-e7740201f5c6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5e36e679cd16"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=809080bc-3172-467d-b414-ed0fcd1808a3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"19d4fba8-6c28-4c2a-aa40-edbdeb6a848c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a0279726128b5852e1cf0d3d361293726e16445d8edc2dfaeb34f3dfb08d6635"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f1b699.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T17:06:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0dd2d87b-6578-426a-8ad9-e7740201f5c6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:06:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0dd2d87b-6578-426a-8ad9-e7740201f5c6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:06:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0dd2d87b-6578-426a-8ad9-e7740201f5c6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f1b699/sub-test-model-f1b699\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-f1b699/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:06:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0dd2d87b-6578-426a-8ad9-e7740201f5c6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-27T17:06:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0dd2d87b-6578-426a-8ad9-e7740201f5c6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T17:06:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0dd2d87b-6578-426a-8ad9-e7740201f5c6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-27T17:06:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0dd2d87b-6578-426a-8ad9-e7740201f5c6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T17:06:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0dd2d87b-6578-426a-8ad9-e7740201f5c6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T17:06:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"540cec37-0c8a-4a48-b66a-008a40577f35","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:35852","PortSpecifier":{"PortValue":35852}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"540cec37-0c8a-4a48-b66a-008a40577f35","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-d4529a.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T17:06:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"540cec37-0c8a-4a48-b66a-008a40577f35","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:35852","PortSpecifier":{"PortValue":35852}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785171985,"nanos":642411720},"http":{"id":"540cec37-0c8a-4a48-b66a-008a40577f35","method":"POST","headers":{":authority":"e2e-shared-b-d4529a.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T17:06:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"540cec37-0c8a-4a48-b66a-008a40577f35","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-27T17:06:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"540cec37-0c8a-4a48-b66a-008a40577f35","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"19d4fba8-6c28-4c2a-aa40-edbdeb6a848c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=809080bc-3172-467d-b414-ed0fcd1808a3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5e36e679cd16"]}}
{"level":"debug","ts":"2026-07-27T17:06:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"540cec37-0c8a-4a48-b66a-008a40577f35","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5e36e679cd16"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=809080bc-3172-467d-b414-ed0fcd1808a3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"19d4fba8-6c28-4c2a-aa40-edbdeb6a848c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"499f2ee74b79bef8d9452062eb130b9959f1fb529e1c3b7066cb35607df99b2d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d4529a.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T17:06:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"540cec37-0c8a-4a48-b66a-008a40577f35","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:06:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"540cec37-0c8a-4a48-b66a-008a40577f35","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:06:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"540cec37-0c8a-4a48-b66a-008a40577f35","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d4529a/sub-test-model-d4529a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-d4529a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:06:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"540cec37-0c8a-4a48-b66a-008a40577f35","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-27T17:06:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"540cec37-0c8a-4a48-b66a-008a40577f35","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T17:06:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"540cec37-0c8a-4a48-b66a-008a40577f35","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-27T17:06:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"540cec37-0c8a-4a48-b66a-008a40577f35","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T17:06:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"540cec37-0c8a-4a48-b66a-008a40577f35","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T17:06:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2b3c5e96-d1dd-48ff-a3ab-daff74c98b99","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:46100","PortSpecifier":{"PortValue":46100}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2b3c5e96-d1dd-48ff-a3ab-daff74c98b99","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-f1b699.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T17:06:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2b3c5e96-d1dd-48ff-a3ab-daff74c98b99","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:46100","PortSpecifier":{"PortValue":46100}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785171985,"nanos":684414315},"http":{"id":"2b3c5e96-d1dd-48ff-a3ab-daff74c98b99","method":"POST","headers":{":authority":"e2e-shared-a-f1b699.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T17:06:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2b3c5e96-d1dd-48ff-a3ab-daff74c98b99","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-UCzn6mY97vowfp3K_JWRr1f4gRFROUVb7ceFYTfBeyZUTr1YtRhtCASlKXkj"}
{"level":"debug","ts":"2026-07-27T17:06:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2b3c5e96-d1dd-48ff-a3ab-daff74c98b99","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f1b699.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-UCzn6mY97vowfp3K_JWRr1f4gRFROUVb7ceFYTfBeyZUTr1YtRhtCASlKXkj\"}"}
{"level":"debug","ts":"2026-07-27T17:06:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2b3c5e96-d1dd-48ff-a3ab-daff74c98b99","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f1b699.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c79ef619-092e-4530-86c5-be021f7c27fd","keyName":"e2e-sub-iso-990a41","subscription":"e2e-shared-sub-e3863d","tenant":"e2e-shared-a-f1b699","userId":"c79ef619-092e-4530-86c5-be021f7c27fd","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-27T17:06:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2b3c5e96-d1dd-48ff-a3ab-daff74c98b99","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T17:06:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b3c5e96-d1dd-48ff-a3ab-daff74c98b99","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:06:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b3c5e96-d1dd-48ff-a3ab-daff74c98b99","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:06:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b3c5e96-d1dd-48ff-a3ab-daff74c98b99","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f1b699/sub-test-model-f1b699\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-f1b699/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:06:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2b3c5e96-d1dd-48ff-a3ab-daff74c98b99","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-27T17:06:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b3c5e96-d1dd-48ff-a3ab-daff74c98b99","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T17:06:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b3c5e96-d1dd-48ff-a3ab-daff74c98b99","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-e3863d"}
{"level":"debug","ts":"2026-07-27T17:06:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b3c5e96-d1dd-48ff-a3ab-daff74c98b99","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-27T17:06:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2b3c5e96-d1dd-48ff-a3ab-daff74c98b99","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T17:06:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2b3c5e96-d1dd-48ff-a3ab-daff74c98b99","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T17:06:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"41b0477c-d337-4bcb-b77e-3a3303fc9513","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:35854","PortSpecifier":{"PortValue":35854}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"41b0477c-d337-4bcb-b77e-3a3303fc9513","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-d4529a.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T17:06:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"41b0477c-d337-4bcb-b77e-3a3303fc9513","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:35854","PortSpecifier":{"PortValue":35854}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785171985,"nanos":719066918},"http":{"id":"41b0477c-d337-4bcb-b77e-3a3303fc9513","method":"POST","headers":{":authority":"e2e-shared-b-d4529a.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T17:06:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"41b0477c-d337-4bcb-b77e-3a3303fc9513","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1baahrOQSa3C5FwS7_Z2RVhau1ZAhXlGzx5KB4kiDvkxMRxoNj9qiCcZH9J2m"}
{"level":"debug","ts":"2026-07-27T17:06:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"41b0477c-d337-4bcb-b77e-3a3303fc9513","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-d4529a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1baahrOQSa3C5FwS7_Z2RVhau1ZAhXlGzx5KB4kiDvkxMRxoNj9qiCcZH9J2m\"}"}
{"level":"debug","ts":"2026-07-27T17:06:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"41b0477c-d337-4bcb-b77e-3a3303fc9513","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-d4529a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fe80a7be-297c-468c-a558-55f24c75525b","keyName":"e2e-sub-iso-a3a1b6","subscription":"e2e-shared-sub-e3863d","tenant":"e2e-shared-b-d4529a","userId":"fe80a7be-297c-468c-a558-55f24c75525b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-27T17:06:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"41b0477c-d337-4bcb-b77e-3a3303fc9513","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T17:06:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"41b0477c-d337-4bcb-b77e-3a3303fc9513","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:06:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"41b0477c-d337-4bcb-b77e-3a3303fc9513","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:06:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"41b0477c-d337-4bcb-b77e-3a3303fc9513","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d4529a/sub-test-model-d4529a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-d4529a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:06:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"41b0477c-d337-4bcb-b77e-3a3303fc9513","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-27T17:06:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"41b0477c-d337-4bcb-b77e-3a3303fc9513","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-27T17:06:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"41b0477c-d337-4bcb-b77e-3a3303fc9513","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T17:06:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"41b0477c-d337-4bcb-b77e-3a3303fc9513","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-e3863d"}
{"level":"info","ts":"2026-07-27T17:06:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"41b0477c-d337-4bcb-b77e-3a3303fc9513","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T17:06:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"41b0477c-d337-4bcb-b77e-3a3303fc9513","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T17:06:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ac501feebd33c2a1f318b114758cc80aa8f936bb33b517332006ede59c10cd47"}
{"level":"info","ts":"2026-07-27T17:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/598386e570e34b28eb3fcdb180fbcec72be026716ddcfedb5796871a5da2b358"}
{"level":"info","ts":"2026-07-27T17:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/07d150e7e8aac5b7e16bfaf880332d3f71c8f9bec1ce0e95d3f93ad12a5f55a4"}
{"level":"info","ts":"2026-07-27T17:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f2240a590ff8aaff2704e817a172b0fc2ecd569fb4b42d2641c677ce7e4d187f"}
{"level":"info","ts":"2026-07-27T17:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/de9bcb2731cc4b83813f7c9696279ecb79dd22dedaaebc86fba2f2d8ff60482b"}
{"level":"info","ts":"2026-07-27T17:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/67354eb6a1632a1f6c93df47528f9725c1aa8ba3f79398eb3603831a9ce9f374"}
{"level":"info","ts":"2026-07-27T17:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a0279726128b5852e1cf0d3d361293726e16445d8edc2dfaeb34f3dfb08d6635"}
{"level":"info","ts":"2026-07-27T17:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/452367f17b7f5cd252b50629a680e21d43e00e37a419833d4dde99ab469e0525"}
{"level":"info","ts":"2026-07-27T17:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8d468cb3104694eba3306b371cb4d32aba92ff127c921cea5d3a4b8263d1c964"}
{"level":"info","ts":"2026-07-27T17:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2883373d9d4251bb227e0c62138b68bd11b6e41721acdbaf91e8c5e66ed73f30"}
{"level":"info","ts":"2026-07-27T17:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/53b062b53441a9c411fabd8ffe2bea89c73a97f7966e8cff9991276a6b43bdea"}
{"level":"info","ts":"2026-07-27T17:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3c5795abbf08b88ac5012e38ee9bfd2adc09d33bd947f08c2843e91e0e394917"}
{"level":"info","ts":"2026-07-27T17:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/86747dff70a4dff2a79100d23ac5d1b2dcaa762b1b7105503eae1275dc3fa26d"}
{"level":"info","ts":"2026-07-27T17:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013"}
{"level":"info","ts":"2026-07-27T17:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d6068d3abcac946800cb8e2ac6222988c523adbac3778dc997c093e00e7b199d"}
{"level":"info","ts":"2026-07-27T17:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/021f6a83b9086d04d630ef58c691dea6c5a73d9b941c39b9379a86fafb562598"}
{"level":"info","ts":"2026-07-27T17:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/da89a2171393818fe91d6b0cca52647cbf3b55af1da629e29b1d99e7f649f818"}
{"level":"info","ts":"2026-07-27T17:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/279d20b6f82c2b40bf665fe4132c5f1a14e348216cf460f533264021d14a6da8"}
{"level":"info","ts":"2026-07-27T17:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/499f2ee74b79bef8d9452062eb130b9959f1fb529e1c3b7066cb35607df99b2d"}
{"level":"info","ts":"2026-07-27T17:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/03fde0a852c9adf9a291b15b0960b1696fabf27770f33ca6ec66d3cc17c6a7ff"}
{"level":"info","ts":"2026-07-27T17:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/866a740a797c1036a9201f5576ad77f878553eff24592de387d01aee703b7c5a"}
{"level":"info","ts":"2026-07-27T17:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7324f2a6d30a2ae60ea1b7d2f9ac11fd283c7a63fc6931464a90ca8f02ad369a"}
{"level":"info","ts":"2026-07-27T17:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/720b810f84ff74803fb9dd7228b4d532266e9b8e5e0f5e3067405d6ac173a182"}
{"level":"info","ts":"2026-07-27T17:06:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0a48378784b21fd21e1ee23d4288411a08f8d1a839e818f931a9535211e81d75"}
{"level":"debug","ts":"2026-07-27T17:07:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a51dfbea642c215058266e7eae387cf09c1bad84c901629832ebe235c47e198","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:07:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:07:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:07:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a51dfbea642c215058266e7eae387cf09c1bad84c901629832ebe235c47e198"}
{"level":"info","ts":"2026-07-27T17:07:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a51dfbea642c215058266e7eae387cf09c1bad84c901629832ebe235c47e198","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a51dfbea642c215058266e7eae387cf09c1bad84c901629832ebe235c47e198","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:07:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:07:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a51dfbea642c215058266e7eae387cf09c1bad84c901629832ebe235c47e198"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:07:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a51dfbea642c215058266e7eae387cf09c1bad84c901629832ebe235c47e198"}
{"level":"info","ts":"2026-07-27T17:07:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a51dfbea642c215058266e7eae387cf09c1bad84c901629832ebe235c47e198","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a51dfbea642c215058266e7eae387cf09c1bad84c901629832ebe235c47e198","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:07:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:07:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a51dfbea642c215058266e7eae387cf09c1bad84c901629832ebe235c47e198"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-27T17:07:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6a51dfbea642c215058266e7eae387cf09c1bad84c901629832ebe235c47e198","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6a51dfbea642c215058266e7eae387cf09c1bad84c901629832ebe235c47e198\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-27T17:07:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a51dfbea642c215058266e7eae387cf09c1bad84c901629832ebe235c47e198","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:07:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:07:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a51dfbea642c215058266e7eae387cf09c1bad84c901629832ebe235c47e198","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a51dfbea642c215058266e7eae387cf09c1bad84c901629832ebe235c47e198","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:07:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:07:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a51dfbea642c215058266e7eae387cf09c1bad84c901629832ebe235c47e198"}
{"level":"error","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6a51dfbea642c215058266e7eae387cf09c1bad84c901629832ebe235c47e198","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6a51dfbea642c215058266e7eae387cf09c1bad84c901629832ebe235c47e198\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a51dfbea642c215058266e7eae387cf09c1bad84c901629832ebe235c47e198","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a51dfbea642c215058266e7eae387cf09c1bad84c901629832ebe235c47e198","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7b2f5785ec46769eb61e96d1f5abd0979add981c31188d2e7180ba33d8055c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:07:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:07:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a51dfbea642c215058266e7eae387cf09c1bad84c901629832ebe235c47e198"}
{"level":"info","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7b2f5785ec46769eb61e96d1f5abd0979add981c31188d2e7180ba33d8055c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7b2f5785ec46769eb61e96d1f5abd0979add981c31188d2e7180ba33d8055c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:07:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:07:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7b2f5785ec46769eb61e96d1f5abd0979add981c31188d2e7180ba33d8055c7"}
{"level":"info","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7b2f5785ec46769eb61e96d1f5abd0979add981c31188d2e7180ba33d8055c7"}
{"level":"info","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7b2f5785ec46769eb61e96d1f5abd0979add981c31188d2e7180ba33d8055c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a51dfbea642c215058266e7eae387cf09c1bad84c901629832ebe235c47e198","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:07:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:07:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a51dfbea642c215058266e7eae387cf09c1bad84c901629832ebe235c47e198"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7b2f5785ec46769eb61e96d1f5abd0979add981c31188d2e7180ba33d8055c7"}
{"level":"info","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a51dfbea642c215058266e7eae387cf09c1bad84c901629832ebe235c47e198","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7b2f5785ec46769eb61e96d1f5abd0979add981c31188d2e7180ba33d8055c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:07:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:07:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e7b2f5785ec46769eb61e96d1f5abd0979add981c31188d2e7180ba33d8055c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7b2f5785ec46769eb61e96d1f5abd0979add981c31188d2e7180ba33d8055c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a51dfbea642c215058266e7eae387cf09c1bad84c901629832ebe235c47e198","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:07:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:07:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a51dfbea642c215058266e7eae387cf09c1bad84c901629832ebe235c47e198"}
{"level":"info","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19edaefb418c048421e99715ac97cf3b4f7e751243c3628e82bd7eaad8a3a67a"}
{"level":"info","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a51dfbea642c215058266e7eae387cf09c1bad84c901629832ebe235c47e198","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19edaefb418c048421e99715ac97cf3b4f7e751243c3628e82bd7eaad8a3a67a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:07:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:07:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19edaefb418c048421e99715ac97cf3b4f7e751243c3628e82bd7eaad8a3a67a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7b2f5785ec46769eb61e96d1f5abd0979add981c31188d2e7180ba33d8055c7"}
{"level":"info","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19edaefb418c048421e99715ac97cf3b4f7e751243c3628e82bd7eaad8a3a67a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7b2f5785ec46769eb61e96d1f5abd0979add981c31188d2e7180ba33d8055c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a51dfbea642c215058266e7eae387cf09c1bad84c901629832ebe235c47e198","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19edaefb418c048421e99715ac97cf3b4f7e751243c3628e82bd7eaad8a3a67a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a51dfbea642c215058266e7eae387cf09c1bad84c901629832ebe235c47e198","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a51dfbea642c215058266e7eae387cf09c1bad84c901629832ebe235c47e198"}
{"level":"debug","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a51dfbea642c215058266e7eae387cf09c1bad84c901629832ebe235c47e198","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:07:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:07:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a51dfbea642c215058266e7eae387cf09c1bad84c901629832ebe235c47e198"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19edaefb418c048421e99715ac97cf3b4f7e751243c3628e82bd7eaad8a3a67a"}
{"level":"info","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a51dfbea642c215058266e7eae387cf09c1bad84c901629832ebe235c47e198","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a51dfbea642c215058266e7eae387cf09c1bad84c901629832ebe235c47e198","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:07:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:07:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a51dfbea642c215058266e7eae387cf09c1bad84c901629832ebe235c47e198","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a51dfbea642c215058266e7eae387cf09c1bad84c901629832ebe235c47e198","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a51dfbea642c215058266e7eae387cf09c1bad84c901629832ebe235c47e198"}
{"level":"debug","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a51dfbea642c215058266e7eae387cf09c1bad84c901629832ebe235c47e198","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a51dfbea642c215058266e7eae387cf09c1bad84c901629832ebe235c47e198"}
{"level":"debug","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a51dfbea642c215058266e7eae387cf09c1bad84c901629832ebe235c47e198","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:07:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:07:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a51dfbea642c215058266e7eae387cf09c1bad84c901629832ebe235c47e198"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a51dfbea642c215058266e7eae387cf09c1bad84c901629832ebe235c47e198","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a51dfbea642c215058266e7eae387cf09c1bad84c901629832ebe235c47e198","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a51dfbea642c215058266e7eae387cf09c1bad84c901629832ebe235c47e198"}
{"level":"debug","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1960d61565ddf92c4461c1505047f53b7193bd4129dc0d037e7b8ea64f94506a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:07:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:07:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1960d61565ddf92c4461c1505047f53b7193bd4129dc0d037e7b8ea64f94506a"}
{"level":"info","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1960d61565ddf92c4461c1505047f53b7193bd4129dc0d037e7b8ea64f94506a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1960d61565ddf92c4461c1505047f53b7193bd4129dc0d037e7b8ea64f94506a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1960d61565ddf92c4461c1505047f53b7193bd4129dc0d037e7b8ea64f94506a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1960d61565ddf92c4461c1505047f53b7193bd4129dc0d037e7b8ea64f94506a"}
{"level":"debug","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1960d61565ddf92c4461c1505047f53b7193bd4129dc0d037e7b8ea64f94506a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:07:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:07:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1960d61565ddf92c4461c1505047f53b7193bd4129dc0d037e7b8ea64f94506a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1960d61565ddf92c4461c1505047f53b7193bd4129dc0d037e7b8ea64f94506a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1960d61565ddf92c4461c1505047f53b7193bd4129dc0d037e7b8ea64f94506a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:07:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:07:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1960d61565ddf92c4461c1505047f53b7193bd4129dc0d037e7b8ea64f94506a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1960d61565ddf92c4461c1505047f53b7193bd4129dc0d037e7b8ea64f94506a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1960d61565ddf92c4461c1505047f53b7193bd4129dc0d037e7b8ea64f94506a"}
{"level":"debug","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1960d61565ddf92c4461c1505047f53b7193bd4129dc0d037e7b8ea64f94506a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1960d61565ddf92c4461c1505047f53b7193bd4129dc0d037e7b8ea64f94506a"}
{"level":"debug","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1960d61565ddf92c4461c1505047f53b7193bd4129dc0d037e7b8ea64f94506a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:07:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:07:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1960d61565ddf92c4461c1505047f53b7193bd4129dc0d037e7b8ea64f94506a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1960d61565ddf92c4461c1505047f53b7193bd4129dc0d037e7b8ea64f94506a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1960d61565ddf92c4461c1505047f53b7193bd4129dc0d037e7b8ea64f94506a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:07:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:07:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1960d61565ddf92c4461c1505047f53b7193bd4129dc0d037e7b8ea64f94506a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1960d61565ddf92c4461c1505047f53b7193bd4129dc0d037e7b8ea64f94506a"}
{"level":"debug","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1960d61565ddf92c4461c1505047f53b7193bd4129dc0d037e7b8ea64f94506a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:07:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:07:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1960d61565ddf92c4461c1505047f53b7193bd4129dc0d037e7b8ea64f94506a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1960d61565ddf92c4461c1505047f53b7193bd4129dc0d037e7b8ea64f94506a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1960d61565ddf92c4461c1505047f53b7193bd4129dc0d037e7b8ea64f94506a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1960d61565ddf92c4461c1505047f53b7193bd4129dc0d037e7b8ea64f94506a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:07:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:07:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1960d61565ddf92c4461c1505047f53b7193bd4129dc0d037e7b8ea64f94506a"}
{"level":"info","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1960d61565ddf92c4461c1505047f53b7193bd4129dc0d037e7b8ea64f94506a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2069351e8d3dd00f245b2302ba8c0a8aeff009f410ef3fe6e156b79c2ddddb5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:07:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:07:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1960d61565ddf92c4461c1505047f53b7193bd4129dc0d037e7b8ea64f94506a"}
{"level":"info","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2069351e8d3dd00f245b2302ba8c0a8aeff009f410ef3fe6e156b79c2ddddb5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1960d61565ddf92c4461c1505047f53b7193bd4129dc0d037e7b8ea64f94506a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:07:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:07:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1960d61565ddf92c4461c1505047f53b7193bd4129dc0d037e7b8ea64f94506a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2069351e8d3dd00f245b2302ba8c0a8aeff009f410ef3fe6e156b79c2ddddb5f"}
{"level":"info","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1960d61565ddf92c4461c1505047f53b7193bd4129dc0d037e7b8ea64f94506a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2069351e8d3dd00f245b2302ba8c0a8aeff009f410ef3fe6e156b79c2ddddb5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:07:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:07:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2069351e8d3dd00f245b2302ba8c0a8aeff009f410ef3fe6e156b79c2ddddb5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2069351e8d3dd00f245b2302ba8c0a8aeff009f410ef3fe6e156b79c2ddddb5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1960d61565ddf92c4461c1505047f53b7193bd4129dc0d037e7b8ea64f94506a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:07:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:07:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1960d61565ddf92c4461c1505047f53b7193bd4129dc0d037e7b8ea64f94506a"}
{"level":"info","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1960d61565ddf92c4461c1505047f53b7193bd4129dc0d037e7b8ea64f94506a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2069351e8d3dd00f245b2302ba8c0a8aeff009f410ef3fe6e156b79c2ddddb5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:07:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:07:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2069351e8d3dd00f245b2302ba8c0a8aeff009f410ef3fe6e156b79c2ddddb5f"}
{"level":"info","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2069351e8d3dd00f245b2302ba8c0a8aeff009f410ef3fe6e156b79c2ddddb5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1960d61565ddf92c4461c1505047f53b7193bd4129dc0d037e7b8ea64f94506a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2069351e8d3dd00f245b2302ba8c0a8aeff009f410ef3fe6e156b79c2ddddb5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:07:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:07:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2069351e8d3dd00f245b2302ba8c0a8aeff009f410ef3fe6e156b79c2ddddb5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2069351e8d3dd00f245b2302ba8c0a8aeff009f410ef3fe6e156b79c2ddddb5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:07:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:07:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1960d61565ddf92c4461c1505047f53b7193bd4129dc0d037e7b8ea64f94506a"}
{"level":"info","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1960d61565ddf92c4461c1505047f53b7193bd4129dc0d037e7b8ea64f94506a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:07:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:07:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1960d61565ddf92c4461c1505047f53b7193bd4129dc0d037e7b8ea64f94506a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2069351e8d3dd00f245b2302ba8c0a8aeff009f410ef3fe6e156b79c2ddddb5f"}
{"level":"info","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1960d61565ddf92c4461c1505047f53b7193bd4129dc0d037e7b8ea64f94506a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2069351e8d3dd00f245b2302ba8c0a8aeff009f410ef3fe6e156b79c2ddddb5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:07:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:07:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1960d61565ddf92c4461c1505047f53b7193bd4129dc0d037e7b8ea64f94506a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013"}
{"level":"debug","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:07:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:07:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:07:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:07:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07d150e7e8aac5b7e16bfaf880332d3f71c8f9bec1ce0e95d3f93ad12a5f55a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:07:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:07:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1960d61565ddf92c4461c1505047f53b7193bd4129dc0d037e7b8ea64f94506a"}
{"level":"info","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07d150e7e8aac5b7e16bfaf880332d3f71c8f9bec1ce0e95d3f93ad12a5f55a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:07:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:07:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013"}
{"level":"info","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07d150e7e8aac5b7e16bfaf880332d3f71c8f9bec1ce0e95d3f93ad12a5f55a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:07:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:07:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07d150e7e8aac5b7e16bfaf880332d3f71c8f9bec1ce0e95d3f93ad12a5f55a4"}
{"level":"info","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07d150e7e8aac5b7e16bfaf880332d3f71c8f9bec1ce0e95d3f93ad12a5f55a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07d150e7e8aac5b7e16bfaf880332d3f71c8f9bec1ce0e95d3f93ad12a5f55a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:07:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:07:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07d150e7e8aac5b7e16bfaf880332d3f71c8f9bec1ce0e95d3f93ad12a5f55a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07d150e7e8aac5b7e16bfaf880332d3f71c8f9bec1ce0e95d3f93ad12a5f55a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07d150e7e8aac5b7e16bfaf880332d3f71c8f9bec1ce0e95d3f93ad12a5f55a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e0b80f2224073ded5196e7a4ac204f2577c47afe22cb064bc311c67be5b225b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:07:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:07:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013"}
{"level":"info","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e0b80f2224073ded5196e7a4ac204f2577c47afe22cb064bc311c67be5b225b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e0b80f2224073ded5196e7a4ac204f2577c47afe22cb064bc311c67be5b225b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e0b80f2224073ded5196e7a4ac204f2577c47afe22cb064bc311c67be5b225b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:07:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:07:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e0b80f2224073ded5196e7a4ac204f2577c47afe22cb064bc311c67be5b225b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07d150e7e8aac5b7e16bfaf880332d3f71c8f9bec1ce0e95d3f93ad12a5f55a4"}
{"level":"debug","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e0b80f2224073ded5196e7a4ac204f2577c47afe22cb064bc311c67be5b225b"}
{"level":"debug","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e0b80f2224073ded5196e7a4ac204f2577c47afe22cb064bc311c67be5b225b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:07:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:07:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e0b80f2224073ded5196e7a4ac204f2577c47afe22cb064bc311c67be5b225b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013"}
{"level":"info","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e0b80f2224073ded5196e7a4ac204f2577c47afe22cb064bc311c67be5b225b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e0b80f2224073ded5196e7a4ac204f2577c47afe22cb064bc311c67be5b225b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:07:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:07:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e0b80f2224073ded5196e7a4ac204f2577c47afe22cb064bc311c67be5b225b"}
{"level":"info","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e0b80f2224073ded5196e7a4ac204f2577c47afe22cb064bc311c67be5b225b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d2a7442624410c1ad2a0a4ddb989ced48c9b7efd2748199a7df32b05aed52ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:07:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:07:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d2a7442624410c1ad2a0a4ddb989ced48c9b7efd2748199a7df32b05aed52ec"}
{"level":"info","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d2a7442624410c1ad2a0a4ddb989ced48c9b7efd2748199a7df32b05aed52ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e0b80f2224073ded5196e7a4ac204f2577c47afe22cb064bc311c67be5b225b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d2a7442624410c1ad2a0a4ddb989ced48c9b7efd2748199a7df32b05aed52ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:07:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:07:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d2a7442624410c1ad2a0a4ddb989ced48c9b7efd2748199a7df32b05aed52ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e0b80f2224073ded5196e7a4ac204f2577c47afe22cb064bc311c67be5b225b"}
{"level":"error","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2d2a7442624410c1ad2a0a4ddb989ced48c9b7efd2748199a7df32b05aed52ec","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2d2a7442624410c1ad2a0a4ddb989ced48c9b7efd2748199a7df32b05aed52ec\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e0b80f2224073ded5196e7a4ac204f2577c47afe22cb064bc311c67be5b225b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:07:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:07:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e0b80f2224073ded5196e7a4ac204f2577c47afe22cb064bc311c67be5b225b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d2a7442624410c1ad2a0a4ddb989ced48c9b7efd2748199a7df32b05aed52ec"}
{"level":"info","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e0b80f2224073ded5196e7a4ac204f2577c47afe22cb064bc311c67be5b225b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d2a7442624410c1ad2a0a4ddb989ced48c9b7efd2748199a7df32b05aed52ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:07:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:07:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d2a7442624410c1ad2a0a4ddb989ced48c9b7efd2748199a7df32b05aed52ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d2a7442624410c1ad2a0a4ddb989ced48c9b7efd2748199a7df32b05aed52ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e0b80f2224073ded5196e7a4ac204f2577c47afe22cb064bc311c67be5b225b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:07:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:07:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e0b80f2224073ded5196e7a4ac204f2577c47afe22cb064bc311c67be5b225b"}
{"level":"info","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e0b80f2224073ded5196e7a4ac204f2577c47afe22cb064bc311c67be5b225b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7de823d7f58a6209d56d8c6fc114d8994867522219dd2dd733d7584089b9d910","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:07:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:07:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7de823d7f58a6209d56d8c6fc114d8994867522219dd2dd733d7584089b9d910"}
{"level":"info","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7de823d7f58a6209d56d8c6fc114d8994867522219dd2dd733d7584089b9d910","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d2a7442624410c1ad2a0a4ddb989ced48c9b7efd2748199a7df32b05aed52ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:07:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:07:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d2a7442624410c1ad2a0a4ddb989ced48c9b7efd2748199a7df32b05aed52ec"}
{"level":"info","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d2a7442624410c1ad2a0a4ddb989ced48c9b7efd2748199a7df32b05aed52ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"000899f02cdad633035834b2bd07fb1086c36e5f3ca31f6b177a742d03f01558","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:07:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:07:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"000899f02cdad633035834b2bd07fb1086c36e5f3ca31f6b177a742d03f01558","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e0b80f2224073ded5196e7a4ac204f2577c47afe22cb064bc311c67be5b225b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:07:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:07:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e0b80f2224073ded5196e7a4ac204f2577c47afe22cb064bc311c67be5b225b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/000899f02cdad633035834b2bd07fb1086c36e5f3ca31f6b177a742d03f01558"}
{"level":"info","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e0b80f2224073ded5196e7a4ac204f2577c47afe22cb064bc311c67be5b225b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7de823d7f58a6209d56d8c6fc114d8994867522219dd2dd733d7584089b9d910","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:07:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:07:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7de823d7f58a6209d56d8c6fc114d8994867522219dd2dd733d7584089b9d910"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e0b80f2224073ded5196e7a4ac204f2577c47afe22cb064bc311c67be5b225b"}
{"level":"info","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7de823d7f58a6209d56d8c6fc114d8994867522219dd2dd733d7584089b9d910","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d2a7442624410c1ad2a0a4ddb989ced48c9b7efd2748199a7df32b05aed52ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:07:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:07:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d2a7442624410c1ad2a0a4ddb989ced48c9b7efd2748199a7df32b05aed52ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7de823d7f58a6209d56d8c6fc114d8994867522219dd2dd733d7584089b9d910"}
{"level":"info","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d2a7442624410c1ad2a0a4ddb989ced48c9b7efd2748199a7df32b05aed52ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"000899f02cdad633035834b2bd07fb1086c36e5f3ca31f6b177a742d03f01558","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:07:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:07:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["000899f02cdad633035834b2bd07fb1086c36e5f3ca31f6b177a742d03f01558"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d2a7442624410c1ad2a0a4ddb989ced48c9b7efd2748199a7df32b05aed52ec"}
{"level":"info","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"000899f02cdad633035834b2bd07fb1086c36e5f3ca31f6b177a742d03f01558","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e0b80f2224073ded5196e7a4ac204f2577c47afe22cb064bc311c67be5b225b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90d025605c9a8cca841e9db76bf09a18aa289fadc4e6841bd3504dd87113e172","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:07:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:07:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/000899f02cdad633035834b2bd07fb1086c36e5f3ca31f6b177a742d03f01558"}
{"level":"info","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90d025605c9a8cca841e9db76bf09a18aa289fadc4e6841bd3504dd87113e172","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7de823d7f58a6209d56d8c6fc114d8994867522219dd2dd733d7584089b9d910","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cab131b7613b2aa51e5b5f315ba134a76dd223620cc4591bcdb2abb2e614e4c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:07:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:07:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cab131b7613b2aa51e5b5f315ba134a76dd223620cc4591bcdb2abb2e614e4c8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90d025605c9a8cca841e9db76bf09a18aa289fadc4e6841bd3504dd87113e172"}
{"level":"debug","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d2a7442624410c1ad2a0a4ddb989ced48c9b7efd2748199a7df32b05aed52ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0279726128b5852e1cf0d3d361293726e16445d8edc2dfaeb34f3dfb08d6635","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:07:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:07:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0279726128b5852e1cf0d3d361293726e16445d8edc2dfaeb34f3dfb08d6635","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"000899f02cdad633035834b2bd07fb1086c36e5f3ca31f6b177a742d03f01558","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90d025605c9a8cca841e9db76bf09a18aa289fadc4e6841bd3504dd87113e172","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:07:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:07:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90d025605c9a8cca841e9db76bf09a18aa289fadc4e6841bd3504dd87113e172"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e0b80f2224073ded5196e7a4ac204f2577c47afe22cb064bc311c67be5b225b"}
{"level":"info","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90d025605c9a8cca841e9db76bf09a18aa289fadc4e6841bd3504dd87113e172","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cab131b7613b2aa51e5b5f315ba134a76dd223620cc4591bcdb2abb2e614e4c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:07:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:07:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cab131b7613b2aa51e5b5f315ba134a76dd223620cc4591bcdb2abb2e614e4c8"}
{"level":"info","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cab131b7613b2aa51e5b5f315ba134a76dd223620cc4591bcdb2abb2e614e4c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fffe8fcdf598a5928d7de5405415f2390d437a065734821a96f346724717b57c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:07:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:07:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7de823d7f58a6209d56d8c6fc114d8994867522219dd2dd733d7584089b9d910"}
{"level":"info","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fffe8fcdf598a5928d7de5405415f2390d437a065734821a96f346724717b57c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0279726128b5852e1cf0d3d361293726e16445d8edc2dfaeb34f3dfb08d6635","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:07:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:07:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0279726128b5852e1cf0d3d361293726e16445d8edc2dfaeb34f3dfb08d6635","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a90b9b52dc21beb9721daab3b777b7628d5573d7c2d5d1e7fd941303c6f92748","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:07:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:07:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0279726128b5852e1cf0d3d361293726e16445d8edc2dfaeb34f3dfb08d6635"}
{"level":"info","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d2a7442624410c1ad2a0a4ddb989ced48c9b7efd2748199a7df32b05aed52ec"}
{"level":"info","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/000899f02cdad633035834b2bd07fb1086c36e5f3ca31f6b177a742d03f01558"}
{"level":"info","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a90b9b52dc21beb9721daab3b777b7628d5573d7c2d5d1e7fd941303c6f92748","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90d025605c9a8cca841e9db76bf09a18aa289fadc4e6841bd3504dd87113e172","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:07:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:07:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90d025605c9a8cca841e9db76bf09a18aa289fadc4e6841bd3504dd87113e172"}
{"level":"info","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fffe8fcdf598a5928d7de5405415f2390d437a065734821a96f346724717b57c"}
{"level":"info","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90d025605c9a8cca841e9db76bf09a18aa289fadc4e6841bd3504dd87113e172","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"499f2ee74b79bef8d9452062eb130b9959f1fb529e1c3b7066cb35607df99b2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:07:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:07:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a90b9b52dc21beb9721daab3b777b7628d5573d7c2d5d1e7fd941303c6f92748"}
{"level":"info","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/499f2ee74b79bef8d9452062eb130b9959f1fb529e1c3b7066cb35607df99b2d"}
{"level":"info","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cab131b7613b2aa51e5b5f315ba134a76dd223620cc4591bcdb2abb2e614e4c8"}
{"level":"info","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"499f2ee74b79bef8d9452062eb130b9959f1fb529e1c3b7066cb35607df99b2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cab131b7613b2aa51e5b5f315ba134a76dd223620cc4591bcdb2abb2e614e4c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:07:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:07:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cab131b7613b2aa51e5b5f315ba134a76dd223620cc4591bcdb2abb2e614e4c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/452367f17b7f5cd252b50629a680e21d43e00e37a419833d4dde99ab469e0525"}
{"level":"info","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0279726128b5852e1cf0d3d361293726e16445d8edc2dfaeb34f3dfb08d6635"}
{"level":"info","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cab131b7613b2aa51e5b5f315ba134a76dd223620cc4591bcdb2abb2e614e4c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"452367f17b7f5cd252b50629a680e21d43e00e37a419833d4dde99ab469e0525","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:07:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:07:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["452367f17b7f5cd252b50629a680e21d43e00e37a419833d4dde99ab469e0525"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53b062b53441a9c411fabd8ffe2bea89c73a97f7966e8cff9991276a6b43bdea"}
{"level":"info","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca800592791198536eebcf6f37230d53c7a618608abb1aee7ab714561c3f024e"}
{"level":"info","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa1adb364943b0e616dc7533c54d56eefedf7432757ca63e212a0c628abaa66b"}
{"level":"info","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"452367f17b7f5cd252b50629a680e21d43e00e37a419833d4dde99ab469e0525","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fffe8fcdf598a5928d7de5405415f2390d437a065734821a96f346724717b57c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:07:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:07:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fffe8fcdf598a5928d7de5405415f2390d437a065734821a96f346724717b57c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d468cb3104694eba3306b371cb4d32aba92ff127c921cea5d3a4b8263d1c964"}
{"level":"info","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90d025605c9a8cca841e9db76bf09a18aa289fadc4e6841bd3504dd87113e172"}
{"level":"info","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fffe8fcdf598a5928d7de5405415f2390d437a065734821a96f346724717b57c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0279726128b5852e1cf0d3d361293726e16445d8edc2dfaeb34f3dfb08d6635","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:07:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:07:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0279726128b5852e1cf0d3d361293726e16445d8edc2dfaeb34f3dfb08d6635"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47cd8532c62b4b2c0ff1a427565e81921c3ba2d054415f2c671f3b8dd9adeed2"}
{"level":"info","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/720b810f84ff74803fb9dd7228b4d532266e9b8e5e0f5e3067405d6ac173a182"}
{"level":"info","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0279726128b5852e1cf0d3d361293726e16445d8edc2dfaeb34f3dfb08d6635","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53b062b53441a9c411fabd8ffe2bea89c73a97f7966e8cff9991276a6b43bdea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:07:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:07:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53b062b53441a9c411fabd8ffe2bea89c73a97f7966e8cff9991276a6b43bdea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/499f2ee74b79bef8d9452062eb130b9959f1fb529e1c3b7066cb35607df99b2d"}
{"level":"info","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53b062b53441a9c411fabd8ffe2bea89c73a97f7966e8cff9991276a6b43bdea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca800592791198536eebcf6f37230d53c7a618608abb1aee7ab714561c3f024e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:07:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:07:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca800592791198536eebcf6f37230d53c7a618608abb1aee7ab714561c3f024e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cab131b7613b2aa51e5b5f315ba134a76dd223620cc4591bcdb2abb2e614e4c8"}
{"level":"info","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/452367f17b7f5cd252b50629a680e21d43e00e37a419833d4dde99ab469e0525"}
{"level":"info","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca800592791198536eebcf6f37230d53c7a618608abb1aee7ab714561c3f024e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a90b9b52dc21beb9721daab3b777b7628d5573d7c2d5d1e7fd941303c6f92748","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:07:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:07:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a90b9b52dc21beb9721daab3b777b7628d5573d7c2d5d1e7fd941303c6f92748"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fffe8fcdf598a5928d7de5405415f2390d437a065734821a96f346724717b57c"}
{"level":"info","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0279726128b5852e1cf0d3d361293726e16445d8edc2dfaeb34f3dfb08d6635"}
{"level":"info","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a90b9b52dc21beb9721daab3b777b7628d5573d7c2d5d1e7fd941303c6f92748","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa1adb364943b0e616dc7533c54d56eefedf7432757ca63e212a0c628abaa66b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:07:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:07:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa1adb364943b0e616dc7533c54d56eefedf7432757ca63e212a0c628abaa66b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53b062b53441a9c411fabd8ffe2bea89c73a97f7966e8cff9991276a6b43bdea"}
{"level":"info","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca800592791198536eebcf6f37230d53c7a618608abb1aee7ab714561c3f024e"}
{"level":"info","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa1adb364943b0e616dc7533c54d56eefedf7432757ca63e212a0c628abaa66b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d468cb3104694eba3306b371cb4d32aba92ff127c921cea5d3a4b8263d1c964","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:07:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:07:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d468cb3104694eba3306b371cb4d32aba92ff127c921cea5d3a4b8263d1c964"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a90b9b52dc21beb9721daab3b777b7628d5573d7c2d5d1e7fd941303c6f92748"}
{"level":"info","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa1adb364943b0e616dc7533c54d56eefedf7432757ca63e212a0c628abaa66b"}
{"level":"info","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d468cb3104694eba3306b371cb4d32aba92ff127c921cea5d3a4b8263d1c964","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90d025605c9a8cca841e9db76bf09a18aa289fadc4e6841bd3504dd87113e172","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:07:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:07:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90d025605c9a8cca841e9db76bf09a18aa289fadc4e6841bd3504dd87113e172"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:07:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d468cb3104694eba3306b371cb4d32aba92ff127c921cea5d3a4b8263d1c964"}
{"level":"info","ts":"2026-07-27T17:07:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90d025605c9a8cca841e9db76bf09a18aa289fadc4e6841bd3504dd87113e172","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47cd8532c62b4b2c0ff1a427565e81921c3ba2d054415f2c671f3b8dd9adeed2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:07:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:07:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["47cd8532c62b4b2c0ff1a427565e81921c3ba2d054415f2c671f3b8dd9adeed2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:07:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90d025605c9a8cca841e9db76bf09a18aa289fadc4e6841bd3504dd87113e172"}
{"level":"info","ts":"2026-07-27T17:07:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47cd8532c62b4b2c0ff1a427565e81921c3ba2d054415f2c671f3b8dd9adeed2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"720b810f84ff74803fb9dd7228b4d532266e9b8e5e0f5e3067405d6ac173a182","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:07:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:07:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["720b810f84ff74803fb9dd7228b4d532266e9b8e5e0f5e3067405d6ac173a182"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:07:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47cd8532c62b4b2c0ff1a427565e81921c3ba2d054415f2c671f3b8dd9adeed2"}
{"level":"info","ts":"2026-07-27T17:07:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"720b810f84ff74803fb9dd7228b4d532266e9b8e5e0f5e3067405d6ac173a182","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"499f2ee74b79bef8d9452062eb130b9959f1fb529e1c3b7066cb35607df99b2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:07:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:07:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["499f2ee74b79bef8d9452062eb130b9959f1fb529e1c3b7066cb35607df99b2d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:07:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/720b810f84ff74803fb9dd7228b4d532266e9b8e5e0f5e3067405d6ac173a182"}
{"level":"info","ts":"2026-07-27T17:07:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"499f2ee74b79bef8d9452062eb130b9959f1fb529e1c3b7066cb35607df99b2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cab131b7613b2aa51e5b5f315ba134a76dd223620cc4591bcdb2abb2e614e4c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"452367f17b7f5cd252b50629a680e21d43e00e37a419833d4dde99ab469e0525","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fffe8fcdf598a5928d7de5405415f2390d437a065734821a96f346724717b57c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0279726128b5852e1cf0d3d361293726e16445d8edc2dfaeb34f3dfb08d6635","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53b062b53441a9c411fabd8ffe2bea89c73a97f7966e8cff9991276a6b43bdea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca800592791198536eebcf6f37230d53c7a618608abb1aee7ab714561c3f024e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a90b9b52dc21beb9721daab3b777b7628d5573d7c2d5d1e7fd941303c6f92748","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa1adb364943b0e616dc7533c54d56eefedf7432757ca63e212a0c628abaa66b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d468cb3104694eba3306b371cb4d32aba92ff127c921cea5d3a4b8263d1c964","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90d025605c9a8cca841e9db76bf09a18aa289fadc4e6841bd3504dd87113e172","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47cd8532c62b4b2c0ff1a427565e81921c3ba2d054415f2c671f3b8dd9adeed2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"720b810f84ff74803fb9dd7228b4d532266e9b8e5e0f5e3067405d6ac173a182","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:07:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"499f2ee74b79bef8d9452062eb130b9959f1fb529e1c3b7066cb35607df99b2d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:07:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/499f2ee74b79bef8d9452062eb130b9959f1fb529e1c3b7066cb35607df99b2d"}
{"level":"info","ts":"2026-07-27T17:07:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b2d3ee55-285a-4206-9fbd-07b070097196","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:39490","PortSpecifier":{"PortValue":39490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b2d3ee55-285a-4206-9fbd-07b070097196","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-f1b699.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T17:07:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b2d3ee55-285a-4206-9fbd-07b070097196","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:39490","PortSpecifier":{"PortValue":39490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785172060,"nanos":460956365},"http":{"id":"b2d3ee55-285a-4206-9fbd-07b070097196","method":"POST","headers":{":authority":"e2e-shared-a-f1b699.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T17:07:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b2d3ee55-285a-4206-9fbd-07b070097196","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-27T17:07:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b2d3ee55-285a-4206-9fbd-07b070097196","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"19d4fba8-6c28-4c2a-aa40-edbdeb6a848c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=809080bc-3172-467d-b414-ed0fcd1808a3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5e36e679cd16"]}}
{"level":"debug","ts":"2026-07-27T17:07:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b2d3ee55-285a-4206-9fbd-07b070097196","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5e36e679cd16"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=809080bc-3172-467d-b414-ed0fcd1808a3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"19d4fba8-6c28-4c2a-aa40-edbdeb6a848c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a0279726128b5852e1cf0d3d361293726e16445d8edc2dfaeb34f3dfb08d6635"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f1b699.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T17:07:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b2d3ee55-285a-4206-9fbd-07b070097196","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:07:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b2d3ee55-285a-4206-9fbd-07b070097196","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:07:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b2d3ee55-285a-4206-9fbd-07b070097196","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f1b699/rate-test-model-f1b699\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-f1b699/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:07:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b2d3ee55-285a-4206-9fbd-07b070097196","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-27T17:07:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b2d3ee55-285a-4206-9fbd-07b070097196","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T17:07:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b2d3ee55-285a-4206-9fbd-07b070097196","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-27T17:07:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b2d3ee55-285a-4206-9fbd-07b070097196","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T17:07:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b2d3ee55-285a-4206-9fbd-07b070097196","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T17:07:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"866de399-74aa-432f-a0be-c5534e6066dd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:59050","PortSpecifier":{"PortValue":59050}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"866de399-74aa-432f-a0be-c5534e6066dd","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-d4529a.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T17:07:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"866de399-74aa-432f-a0be-c5534e6066dd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:59050","PortSpecifier":{"PortValue":59050}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785172060,"nanos":513409510},"http":{"id":"866de399-74aa-432f-a0be-c5534e6066dd","method":"POST","headers":{":authority":"e2e-shared-b-d4529a.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T17:07:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"866de399-74aa-432f-a0be-c5534e6066dd","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-27T17:07:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"866de399-74aa-432f-a0be-c5534e6066dd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"19d4fba8-6c28-4c2a-aa40-edbdeb6a848c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=809080bc-3172-467d-b414-ed0fcd1808a3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5e36e679cd16"]}}
{"level":"debug","ts":"2026-07-27T17:07:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"866de399-74aa-432f-a0be-c5534e6066dd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5e36e679cd16"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=809080bc-3172-467d-b414-ed0fcd1808a3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"19d4fba8-6c28-4c2a-aa40-edbdeb6a848c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"499f2ee74b79bef8d9452062eb130b9959f1fb529e1c3b7066cb35607df99b2d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d4529a.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T17:07:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"866de399-74aa-432f-a0be-c5534e6066dd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:07:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"866de399-74aa-432f-a0be-c5534e6066dd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:07:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"866de399-74aa-432f-a0be-c5534e6066dd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d4529a/rate-test-model-d4529a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-d4529a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:07:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"866de399-74aa-432f-a0be-c5534e6066dd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-27T17:07:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"866de399-74aa-432f-a0be-c5534e6066dd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T17:07:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"866de399-74aa-432f-a0be-c5534e6066dd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-27T17:07:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"866de399-74aa-432f-a0be-c5534e6066dd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T17:07:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"866de399-74aa-432f-a0be-c5534e6066dd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T17:07:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"171024ae-41e6-4e98-b839-692de93182e2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:39498","PortSpecifier":{"PortValue":39498}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"171024ae-41e6-4e98-b839-692de93182e2","method":"POST","path":"/ai-tenant-e2e-shared-a-f1b699/rate-test-model-f1b699/v1/completions","host":"e2e-shared-a-f1b699.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T17:07:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"171024ae-41e6-4e98-b839-692de93182e2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:39498","PortSpecifier":{"PortValue":39498}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785172060,"nanos":555550874},"http":{"id":"171024ae-41e6-4e98-b839-692de93182e2","method":"POST","headers":{":authority":"e2e-shared-a-f1b699.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-f1b699/rate-test-model-f1b699/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T17:07:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"171024ae-41e6-4e98-b839-692de93182e2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Wc4AQ0m9qj9H91uj_ZznyegXrAqB4xEFsaBb9Y8FhaetC0xwICwb2TeBJmQ9"}
{"level":"debug","ts":"2026-07-27T17:07:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"171024ae-41e6-4e98-b839-692de93182e2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f1b699.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Wc4AQ0m9qj9H91uj_ZznyegXrAqB4xEFsaBb9Y8FhaetC0xwICwb2TeBJmQ9\"}"}
{"level":"debug","ts":"2026-07-27T17:07:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"171024ae-41e6-4e98-b839-692de93182e2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f1b699.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3d5b8bd7-4a82-48c0-bb08-1c0036ad4031","keyName":"e2e-rate-a-88ab09","subscription":"e2e-rate-iso-a-88ab09","tenant":"e2e-shared-a-f1b699","userId":"3d5b8bd7-4a82-48c0-bb08-1c0036ad4031","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-27T17:07:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"171024ae-41e6-4e98-b839-692de93182e2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-f1b699.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-f1b699/rate-test-model-f1b699\",\"requestedSubscription\":\"e2e-rate-iso-a-88ab09\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-27T17:07:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"171024ae-41e6-4e98-b839-692de93182e2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f1b699.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-f1b699/models/facebook/opt-125m","name":"rate-test-model-f1b699","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-88ab09","namespace":"ai-tenant-e2e-shared-a-f1b699","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-f1b699/rate-test-model-f1b699"}}
{"level":"debug","ts":"2026-07-27T17:07:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"171024ae-41e6-4e98-b839-692de93182e2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T17:07:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"171024ae-41e6-4e98-b839-692de93182e2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:07:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"171024ae-41e6-4e98-b839-692de93182e2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:07:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"171024ae-41e6-4e98-b839-692de93182e2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:07:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"171024ae-41e6-4e98-b839-692de93182e2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f1b699/rate-test-model-f1b699\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-f1b699/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:07:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"171024ae-41e6-4e98-b839-692de93182e2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T17:07:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"171024ae-41e6-4e98-b839-692de93182e2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-88ab09"}
{"level":"debug","ts":"2026-07-27T17:07:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"171024ae-41e6-4e98-b839-692de93182e2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-27T17:07:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"171024ae-41e6-4e98-b839-692de93182e2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3d5b8bd7-4a82-48c0-bb08-1c0036ad4031","keyName":"e2e-rate-a-88ab09","selected_subscription":"e2e-rate-iso-a-88ab09","selected_subscription_key":"ai-tenant-e2e-shared-a-f1b699/e2e-rate-iso-a-88ab09@ai-tenant-e2e-shared-a-f1b699/rate-test-model-f1b699","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-f1b699/models/facebook/opt-125m","name":"rate-test-model-f1b699","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-88ab09","namespace":"ai-tenant-e2e-shared-a-f1b699","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-f1b699/rate-test-model-f1b699"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-27T17:07:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"171024ae-41e6-4e98-b839-692de93182e2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T17:07:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"171024ae-41e6-4e98-b839-692de93182e2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T17:07:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3ea120e8-5f88-4549-bd17-927d088e15c4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:39512","PortSpecifier":{"PortValue":39512}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3ea120e8-5f88-4549-bd17-927d088e15c4","method":"POST","path":"/ai-tenant-e2e-shared-a-f1b699/rate-test-model-f1b699/v1/completions","host":"e2e-shared-a-f1b699.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T17:07:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3ea120e8-5f88-4549-bd17-927d088e15c4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:39512","PortSpecifier":{"PortValue":39512}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785172061,"nanos":651305591},"http":{"id":"3ea120e8-5f88-4549-bd17-927d088e15c4","method":"POST","headers":{":authority":"e2e-shared-a-f1b699.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-f1b699/rate-test-model-f1b699/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T17:07:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3ea120e8-5f88-4549-bd17-927d088e15c4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Wc4AQ0m9qj9H91uj_ZznyegXrAqB4xEFsaBb9Y8FhaetC0xwICwb2TeBJmQ9"}
{"level":"debug","ts":"2026-07-27T17:07:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3ea120e8-5f88-4549-bd17-927d088e15c4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f1b699.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Wc4AQ0m9qj9H91uj_ZznyegXrAqB4xEFsaBb9Y8FhaetC0xwICwb2TeBJmQ9\"}"}
{"level":"debug","ts":"2026-07-27T17:07:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3ea120e8-5f88-4549-bd17-927d088e15c4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f1b699.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3d5b8bd7-4a82-48c0-bb08-1c0036ad4031","keyName":"e2e-rate-a-88ab09","subscription":"e2e-rate-iso-a-88ab09","tenant":"e2e-shared-a-f1b699","userId":"3d5b8bd7-4a82-48c0-bb08-1c0036ad4031","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-27T17:07:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3ea120e8-5f88-4549-bd17-927d088e15c4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-f1b699.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-f1b699/rate-test-model-f1b699\",\"requestedSubscription\":\"e2e-rate-iso-a-88ab09\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-27T17:07:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3ea120e8-5f88-4549-bd17-927d088e15c4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f1b699.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-f1b699/models/facebook/opt-125m","name":"rate-test-model-f1b699","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-88ab09","namespace":"ai-tenant-e2e-shared-a-f1b699","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-f1b699/rate-test-model-f1b699"}}
{"level":"debug","ts":"2026-07-27T17:07:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3ea120e8-5f88-4549-bd17-927d088e15c4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T17:07:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ea120e8-5f88-4549-bd17-927d088e15c4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:07:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ea120e8-5f88-4549-bd17-927d088e15c4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:07:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ea120e8-5f88-4549-bd17-927d088e15c4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:07:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ea120e8-5f88-4549-bd17-927d088e15c4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f1b699/rate-test-model-f1b699\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-f1b699/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:07:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ea120e8-5f88-4549-bd17-927d088e15c4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T17:07:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ea120e8-5f88-4549-bd17-927d088e15c4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-88ab09"}
{"level":"debug","ts":"2026-07-27T17:07:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ea120e8-5f88-4549-bd17-927d088e15c4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-27T17:07:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ea120e8-5f88-4549-bd17-927d088e15c4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3d5b8bd7-4a82-48c0-bb08-1c0036ad4031","keyName":"e2e-rate-a-88ab09","selected_subscription":"e2e-rate-iso-a-88ab09","selected_subscription_key":"ai-tenant-e2e-shared-a-f1b699/e2e-rate-iso-a-88ab09@ai-tenant-e2e-shared-a-f1b699/rate-test-model-f1b699","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-f1b699/models/facebook/opt-125m","name":"rate-test-model-f1b699","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-88ab09","namespace":"ai-tenant-e2e-shared-a-f1b699","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-f1b699/rate-test-model-f1b699"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-27T17:07:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3ea120e8-5f88-4549-bd17-927d088e15c4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T17:07:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3ea120e8-5f88-4549-bd17-927d088e15c4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T17:07:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d434f756-8d7b-4608-bccc-301b7c2ca4e2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:39522","PortSpecifier":{"PortValue":39522}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d434f756-8d7b-4608-bccc-301b7c2ca4e2","method":"POST","path":"/ai-tenant-e2e-shared-a-f1b699/rate-test-model-f1b699/v1/completions","host":"e2e-shared-a-f1b699.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T17:07:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d434f756-8d7b-4608-bccc-301b7c2ca4e2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:39522","PortSpecifier":{"PortValue":39522}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785172062,"nanos":703966839},"http":{"id":"d434f756-8d7b-4608-bccc-301b7c2ca4e2","method":"POST","headers":{":authority":"e2e-shared-a-f1b699.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-f1b699/rate-test-model-f1b699/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T17:07:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d434f756-8d7b-4608-bccc-301b7c2ca4e2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Wc4AQ0m9qj9H91uj_ZznyegXrAqB4xEFsaBb9Y8FhaetC0xwICwb2TeBJmQ9"}
{"level":"debug","ts":"2026-07-27T17:07:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d434f756-8d7b-4608-bccc-301b7c2ca4e2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f1b699.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Wc4AQ0m9qj9H91uj_ZznyegXrAqB4xEFsaBb9Y8FhaetC0xwICwb2TeBJmQ9\"}"}
{"level":"debug","ts":"2026-07-27T17:07:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d434f756-8d7b-4608-bccc-301b7c2ca4e2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f1b699.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3d5b8bd7-4a82-48c0-bb08-1c0036ad4031","keyName":"e2e-rate-a-88ab09","subscription":"e2e-rate-iso-a-88ab09","tenant":"e2e-shared-a-f1b699","userId":"3d5b8bd7-4a82-48c0-bb08-1c0036ad4031","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-27T17:07:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d434f756-8d7b-4608-bccc-301b7c2ca4e2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-f1b699.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-f1b699/rate-test-model-f1b699\",\"requestedSubscription\":\"e2e-rate-iso-a-88ab09\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-27T17:07:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d434f756-8d7b-4608-bccc-301b7c2ca4e2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f1b699.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-f1b699/models/facebook/opt-125m","name":"rate-test-model-f1b699","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-88ab09","namespace":"ai-tenant-e2e-shared-a-f1b699","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-f1b699/rate-test-model-f1b699"}}
{"level":"debug","ts":"2026-07-27T17:07:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d434f756-8d7b-4608-bccc-301b7c2ca4e2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T17:07:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d434f756-8d7b-4608-bccc-301b7c2ca4e2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:07:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d434f756-8d7b-4608-bccc-301b7c2ca4e2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:07:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d434f756-8d7b-4608-bccc-301b7c2ca4e2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:07:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d434f756-8d7b-4608-bccc-301b7c2ca4e2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f1b699/rate-test-model-f1b699\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-f1b699/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:07:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d434f756-8d7b-4608-bccc-301b7c2ca4e2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-27T17:07:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d434f756-8d7b-4608-bccc-301b7c2ca4e2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T17:07:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d434f756-8d7b-4608-bccc-301b7c2ca4e2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-88ab09"}
{"level":"debug","ts":"2026-07-27T17:07:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d434f756-8d7b-4608-bccc-301b7c2ca4e2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3d5b8bd7-4a82-48c0-bb08-1c0036ad4031","keyName":"e2e-rate-a-88ab09","selected_subscription":"e2e-rate-iso-a-88ab09","selected_subscription_key":"ai-tenant-e2e-shared-a-f1b699/e2e-rate-iso-a-88ab09@ai-tenant-e2e-shared-a-f1b699/rate-test-model-f1b699","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-f1b699/models/facebook/opt-125m","name":"rate-test-model-f1b699","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-88ab09","namespace":"ai-tenant-e2e-shared-a-f1b699","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-f1b699/rate-test-model-f1b699"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-27T17:07:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d434f756-8d7b-4608-bccc-301b7c2ca4e2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T17:07:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d434f756-8d7b-4608-bccc-301b7c2ca4e2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T17:08:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"db5d7105-228c-4f9c-b597-94f5287bf92d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:57252","PortSpecifier":{"PortValue":57252}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"db5d7105-228c-4f9c-b597-94f5287bf92d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-f1b699.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T17:08:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"db5d7105-228c-4f9c-b597-94f5287bf92d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:57252","PortSpecifier":{"PortValue":57252}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785172081,"nanos":93900178},"http":{"id":"db5d7105-228c-4f9c-b597-94f5287bf92d","method":"POST","headers":{":authority":"e2e-shared-a-f1b699.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T17:08:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"db5d7105-228c-4f9c-b597-94f5287bf92d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-27T17:08:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"db5d7105-228c-4f9c-b597-94f5287bf92d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"19d4fba8-6c28-4c2a-aa40-edbdeb6a848c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=809080bc-3172-467d-b414-ed0fcd1808a3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5e36e679cd16"]}}
{"level":"debug","ts":"2026-07-27T17:08:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"db5d7105-228c-4f9c-b597-94f5287bf92d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5e36e679cd16"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=809080bc-3172-467d-b414-ed0fcd1808a3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"19d4fba8-6c28-4c2a-aa40-edbdeb6a848c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a0279726128b5852e1cf0d3d361293726e16445d8edc2dfaeb34f3dfb08d6635"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f1b699.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T17:08:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"db5d7105-228c-4f9c-b597-94f5287bf92d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:08:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"db5d7105-228c-4f9c-b597-94f5287bf92d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:08:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"db5d7105-228c-4f9c-b597-94f5287bf92d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f1b699/rate-test-model-f1b699\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-f1b699/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:08:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"db5d7105-228c-4f9c-b597-94f5287bf92d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-27T17:08:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"db5d7105-228c-4f9c-b597-94f5287bf92d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T17:08:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"db5d7105-228c-4f9c-b597-94f5287bf92d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-27T17:08:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"db5d7105-228c-4f9c-b597-94f5287bf92d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T17:08:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"db5d7105-228c-4f9c-b597-94f5287bf92d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T17:08:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f2ed1491-6af4-4497-9af4-f07510345035","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:44924","PortSpecifier":{"PortValue":44924}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f2ed1491-6af4-4497-9af4-f07510345035","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-d4529a.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T17:08:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f2ed1491-6af4-4497-9af4-f07510345035","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:44924","PortSpecifier":{"PortValue":44924}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785172081,"nanos":140467513},"http":{"id":"f2ed1491-6af4-4497-9af4-f07510345035","method":"POST","headers":{":authority":"e2e-shared-b-d4529a.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T17:08:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f2ed1491-6af4-4497-9af4-f07510345035","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-27T17:08:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f2ed1491-6af4-4497-9af4-f07510345035","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"19d4fba8-6c28-4c2a-aa40-edbdeb6a848c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=809080bc-3172-467d-b414-ed0fcd1808a3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5e36e679cd16"]}}
{"level":"debug","ts":"2026-07-27T17:08:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f2ed1491-6af4-4497-9af4-f07510345035","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5e36e679cd16"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=809080bc-3172-467d-b414-ed0fcd1808a3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"19d4fba8-6c28-4c2a-aa40-edbdeb6a848c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"499f2ee74b79bef8d9452062eb130b9959f1fb529e1c3b7066cb35607df99b2d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-d4529a.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T17:08:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f2ed1491-6af4-4497-9af4-f07510345035","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:08:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f2ed1491-6af4-4497-9af4-f07510345035","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:08:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f2ed1491-6af4-4497-9af4-f07510345035","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d4529a/rate-test-model-d4529a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-d4529a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:08:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f2ed1491-6af4-4497-9af4-f07510345035","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-27T17:08:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f2ed1491-6af4-4497-9af4-f07510345035","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-27T17:08:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f2ed1491-6af4-4497-9af4-f07510345035","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-27T17:08:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f2ed1491-6af4-4497-9af4-f07510345035","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T17:08:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f2ed1491-6af4-4497-9af4-f07510345035","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T17:08:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1befe6cb-a1c4-4558-a6ff-6cd6dbfc0b15","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:57256","PortSpecifier":{"PortValue":57256}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1befe6cb-a1c4-4558-a6ff-6cd6dbfc0b15","method":"POST","path":"/ai-tenant-e2e-shared-a-f1b699/rate-test-model-f1b699/v1/completions","host":"e2e-shared-a-f1b699.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T17:08:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1befe6cb-a1c4-4558-a6ff-6cd6dbfc0b15","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:57256","PortSpecifier":{"PortValue":57256}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785172081,"nanos":178884284},"http":{"id":"1befe6cb-a1c4-4558-a6ff-6cd6dbfc0b15","method":"POST","headers":{":authority":"e2e-shared-a-f1b699.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-f1b699/rate-test-model-f1b699/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T17:08:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1befe6cb-a1c4-4558-a6ff-6cd6dbfc0b15","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-VIgsVlGNcYCMAniN_jPDpSGB2ZamghfV7flpIRsTiYdTEigDpYuogcSqawqN"}
{"level":"debug","ts":"2026-07-27T17:08:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1befe6cb-a1c4-4558-a6ff-6cd6dbfc0b15","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f1b699.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-VIgsVlGNcYCMAniN_jPDpSGB2ZamghfV7flpIRsTiYdTEigDpYuogcSqawqN\"}"}
{"level":"debug","ts":"2026-07-27T17:08:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1befe6cb-a1c4-4558-a6ff-6cd6dbfc0b15","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f1b699.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5819a782-e2cd-4e9c-9b60-8beae35ccba5","keyName":"e2e-rate-a-b81aca","subscription":"e2e-rate-iso-a-b81aca","tenant":"e2e-shared-a-f1b699","userId":"5819a782-e2cd-4e9c-9b60-8beae35ccba5","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-27T17:08:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1befe6cb-a1c4-4558-a6ff-6cd6dbfc0b15","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-f1b699.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-f1b699/rate-test-model-f1b699\",\"requestedSubscription\":\"e2e-rate-iso-a-b81aca\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-27T17:08:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1befe6cb-a1c4-4558-a6ff-6cd6dbfc0b15","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f1b699.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-f1b699/models/facebook/opt-125m","name":"rate-test-model-f1b699","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b81aca","namespace":"ai-tenant-e2e-shared-a-f1b699","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-f1b699/rate-test-model-f1b699"}}
{"level":"debug","ts":"2026-07-27T17:08:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1befe6cb-a1c4-4558-a6ff-6cd6dbfc0b15","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T17:08:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1befe6cb-a1c4-4558-a6ff-6cd6dbfc0b15","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:08:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1befe6cb-a1c4-4558-a6ff-6cd6dbfc0b15","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:08:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1befe6cb-a1c4-4558-a6ff-6cd6dbfc0b15","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:08:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1befe6cb-a1c4-4558-a6ff-6cd6dbfc0b15","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f1b699/rate-test-model-f1b699\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-f1b699/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:08:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1befe6cb-a1c4-4558-a6ff-6cd6dbfc0b15","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T17:08:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1befe6cb-a1c4-4558-a6ff-6cd6dbfc0b15","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b81aca"}
{"level":"debug","ts":"2026-07-27T17:08:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1befe6cb-a1c4-4558-a6ff-6cd6dbfc0b15","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-27T17:08:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1befe6cb-a1c4-4558-a6ff-6cd6dbfc0b15","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5819a782-e2cd-4e9c-9b60-8beae35ccba5","keyName":"e2e-rate-a-b81aca","selected_subscription":"e2e-rate-iso-a-b81aca","selected_subscription_key":"ai-tenant-e2e-shared-a-f1b699/e2e-rate-iso-a-b81aca@ai-tenant-e2e-shared-a-f1b699/rate-test-model-f1b699","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-f1b699/models/facebook/opt-125m","name":"rate-test-model-f1b699","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b81aca","namespace":"ai-tenant-e2e-shared-a-f1b699","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-f1b699/rate-test-model-f1b699"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-27T17:08:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1befe6cb-a1c4-4558-a6ff-6cd6dbfc0b15","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T17:08:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1befe6cb-a1c4-4558-a6ff-6cd6dbfc0b15","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T17:08:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1dd114d9-ce4d-47ba-a680-04be4f90d9e0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:57270","PortSpecifier":{"PortValue":57270}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1dd114d9-ce4d-47ba-a680-04be4f90d9e0","method":"POST","path":"/ai-tenant-e2e-shared-a-f1b699/rate-test-model-f1b699/v1/completions","host":"e2e-shared-a-f1b699.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T17:08:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1dd114d9-ce4d-47ba-a680-04be4f90d9e0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:57270","PortSpecifier":{"PortValue":57270}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785172082,"nanos":220552043},"http":{"id":"1dd114d9-ce4d-47ba-a680-04be4f90d9e0","method":"POST","headers":{":authority":"e2e-shared-a-f1b699.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-f1b699/rate-test-model-f1b699/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T17:08:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1dd114d9-ce4d-47ba-a680-04be4f90d9e0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-VIgsVlGNcYCMAniN_jPDpSGB2ZamghfV7flpIRsTiYdTEigDpYuogcSqawqN"}
{"level":"debug","ts":"2026-07-27T17:08:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1dd114d9-ce4d-47ba-a680-04be4f90d9e0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f1b699.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-VIgsVlGNcYCMAniN_jPDpSGB2ZamghfV7flpIRsTiYdTEigDpYuogcSqawqN\"}"}
{"level":"debug","ts":"2026-07-27T17:08:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1dd114d9-ce4d-47ba-a680-04be4f90d9e0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f1b699.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5819a782-e2cd-4e9c-9b60-8beae35ccba5","keyName":"e2e-rate-a-b81aca","subscription":"e2e-rate-iso-a-b81aca","tenant":"e2e-shared-a-f1b699","userId":"5819a782-e2cd-4e9c-9b60-8beae35ccba5","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-27T17:08:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1dd114d9-ce4d-47ba-a680-04be4f90d9e0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-f1b699.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-f1b699/rate-test-model-f1b699\",\"requestedSubscription\":\"e2e-rate-iso-a-b81aca\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-27T17:08:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1dd114d9-ce4d-47ba-a680-04be4f90d9e0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f1b699.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-f1b699/models/facebook/opt-125m","name":"rate-test-model-f1b699","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b81aca","namespace":"ai-tenant-e2e-shared-a-f1b699","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-f1b699/rate-test-model-f1b699"}}
{"level":"debug","ts":"2026-07-27T17:08:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1dd114d9-ce4d-47ba-a680-04be4f90d9e0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T17:08:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1dd114d9-ce4d-47ba-a680-04be4f90d9e0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:08:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1dd114d9-ce4d-47ba-a680-04be4f90d9e0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:08:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1dd114d9-ce4d-47ba-a680-04be4f90d9e0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f1b699/rate-test-model-f1b699\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-f1b699/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:08:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1dd114d9-ce4d-47ba-a680-04be4f90d9e0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:08:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1dd114d9-ce4d-47ba-a680-04be4f90d9e0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T17:08:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1dd114d9-ce4d-47ba-a680-04be4f90d9e0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b81aca"}
{"level":"debug","ts":"2026-07-27T17:08:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1dd114d9-ce4d-47ba-a680-04be4f90d9e0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-27T17:08:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1dd114d9-ce4d-47ba-a680-04be4f90d9e0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5819a782-e2cd-4e9c-9b60-8beae35ccba5","keyName":"e2e-rate-a-b81aca","selected_subscription":"e2e-rate-iso-a-b81aca","selected_subscription_key":"ai-tenant-e2e-shared-a-f1b699/e2e-rate-iso-a-b81aca@ai-tenant-e2e-shared-a-f1b699/rate-test-model-f1b699","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-f1b699/models/facebook/opt-125m","name":"rate-test-model-f1b699","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b81aca","namespace":"ai-tenant-e2e-shared-a-f1b699","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-f1b699/rate-test-model-f1b699"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-27T17:08:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1dd114d9-ce4d-47ba-a680-04be4f90d9e0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T17:08:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1dd114d9-ce4d-47ba-a680-04be4f90d9e0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T17:08:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a6b76dbd-0225-4aa3-89e1-3614f86b5118","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:57276","PortSpecifier":{"PortValue":57276}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a6b76dbd-0225-4aa3-89e1-3614f86b5118","method":"POST","path":"/ai-tenant-e2e-shared-a-f1b699/rate-test-model-f1b699/v1/completions","host":"e2e-shared-a-f1b699.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T17:08:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a6b76dbd-0225-4aa3-89e1-3614f86b5118","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:57276","PortSpecifier":{"PortValue":57276}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785172083,"nanos":290761402},"http":{"id":"a6b76dbd-0225-4aa3-89e1-3614f86b5118","method":"POST","headers":{":authority":"e2e-shared-a-f1b699.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-f1b699/rate-test-model-f1b699/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T17:08:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a6b76dbd-0225-4aa3-89e1-3614f86b5118","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-VIgsVlGNcYCMAniN_jPDpSGB2ZamghfV7flpIRsTiYdTEigDpYuogcSqawqN"}
{"level":"debug","ts":"2026-07-27T17:08:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a6b76dbd-0225-4aa3-89e1-3614f86b5118","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f1b699.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-VIgsVlGNcYCMAniN_jPDpSGB2ZamghfV7flpIRsTiYdTEigDpYuogcSqawqN\"}"}
{"level":"debug","ts":"2026-07-27T17:08:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a6b76dbd-0225-4aa3-89e1-3614f86b5118","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f1b699.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5819a782-e2cd-4e9c-9b60-8beae35ccba5","keyName":"e2e-rate-a-b81aca","subscription":"e2e-rate-iso-a-b81aca","tenant":"e2e-shared-a-f1b699","userId":"5819a782-e2cd-4e9c-9b60-8beae35ccba5","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-27T17:08:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a6b76dbd-0225-4aa3-89e1-3614f86b5118","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-f1b699.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-f1b699/rate-test-model-f1b699\",\"requestedSubscription\":\"e2e-rate-iso-a-b81aca\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-27T17:08:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a6b76dbd-0225-4aa3-89e1-3614f86b5118","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f1b699.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-f1b699/models/facebook/opt-125m","name":"rate-test-model-f1b699","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b81aca","namespace":"ai-tenant-e2e-shared-a-f1b699","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-f1b699/rate-test-model-f1b699"}}
{"level":"debug","ts":"2026-07-27T17:08:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a6b76dbd-0225-4aa3-89e1-3614f86b5118","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T17:08:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6b76dbd-0225-4aa3-89e1-3614f86b5118","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:08:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6b76dbd-0225-4aa3-89e1-3614f86b5118","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:08:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6b76dbd-0225-4aa3-89e1-3614f86b5118","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:08:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6b76dbd-0225-4aa3-89e1-3614f86b5118","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f1b699/rate-test-model-f1b699\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-f1b699/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:08:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a6b76dbd-0225-4aa3-89e1-3614f86b5118","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b81aca"}
{"level":"debug","ts":"2026-07-27T17:08:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a6b76dbd-0225-4aa3-89e1-3614f86b5118","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T17:08:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a6b76dbd-0225-4aa3-89e1-3614f86b5118","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-27T17:08:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a6b76dbd-0225-4aa3-89e1-3614f86b5118","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5819a782-e2cd-4e9c-9b60-8beae35ccba5","keyName":"e2e-rate-a-b81aca","selected_subscription":"e2e-rate-iso-a-b81aca","selected_subscription_key":"ai-tenant-e2e-shared-a-f1b699/e2e-rate-iso-a-b81aca@ai-tenant-e2e-shared-a-f1b699/rate-test-model-f1b699","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-f1b699/models/facebook/opt-125m","name":"rate-test-model-f1b699","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b81aca","namespace":"ai-tenant-e2e-shared-a-f1b699","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-f1b699/rate-test-model-f1b699"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-27T17:08:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a6b76dbd-0225-4aa3-89e1-3614f86b5118","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T17:08:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a6b76dbd-0225-4aa3-89e1-3614f86b5118","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T17:08:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5464c671-f5f2-4828-806b-3987a06a6c3f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:44930","PortSpecifier":{"PortValue":44930}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5464c671-f5f2-4828-806b-3987a06a6c3f","method":"POST","path":"/ai-tenant-e2e-shared-b-d4529a/rate-test-model-d4529a/v1/completions","host":"e2e-shared-b-d4529a.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T17:08:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5464c671-f5f2-4828-806b-3987a06a6c3f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:44930","PortSpecifier":{"PortValue":44930}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785172083,"nanos":328360759},"http":{"id":"5464c671-f5f2-4828-806b-3987a06a6c3f","method":"POST","headers":{":authority":"e2e-shared-b-d4529a.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-d4529a/rate-test-model-d4529a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T17:08:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5464c671-f5f2-4828-806b-3987a06a6c3f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-8fTHSZoewV07ZJOx_heV6eddW44gCqj8EnkERUPukX3HP2qxgkoRaCJBcET4"}
{"level":"debug","ts":"2026-07-27T17:08:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5464c671-f5f2-4828-806b-3987a06a6c3f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-d4529a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-8fTHSZoewV07ZJOx_heV6eddW44gCqj8EnkERUPukX3HP2qxgkoRaCJBcET4\"}"}
{"level":"debug","ts":"2026-07-27T17:08:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5464c671-f5f2-4828-806b-3987a06a6c3f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-d4529a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"06db6eb8-6754-485f-8ed5-2b30cbbad8be","keyName":"e2e-rate-b-b81aca","subscription":"e2e-rate-iso-b-b81aca","tenant":"e2e-shared-b-d4529a","userId":"06db6eb8-6754-485f-8ed5-2b30cbbad8be","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-27T17:08:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5464c671-f5f2-4828-806b-3987a06a6c3f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-d4529a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-d4529a/rate-test-model-d4529a\",\"requestedSubscription\":\"e2e-rate-iso-b-b81aca\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-27T17:08:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5464c671-f5f2-4828-806b-3987a06a6c3f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-d4529a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-d4529a/models/facebook/opt-125m","name":"rate-test-model-d4529a","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-b81aca","namespace":"ai-tenant-e2e-shared-b-d4529a","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-d4529a/rate-test-model-d4529a"}}
{"level":"debug","ts":"2026-07-27T17:08:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5464c671-f5f2-4828-806b-3987a06a6c3f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T17:08:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5464c671-f5f2-4828-806b-3987a06a6c3f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:08:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5464c671-f5f2-4828-806b-3987a06a6c3f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:08:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5464c671-f5f2-4828-806b-3987a06a6c3f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-d4529a/rate-test-model-d4529a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-d4529a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:08:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5464c671-f5f2-4828-806b-3987a06a6c3f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:08:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5464c671-f5f2-4828-806b-3987a06a6c3f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-b81aca"}
{"level":"debug","ts":"2026-07-27T17:08:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5464c671-f5f2-4828-806b-3987a06a6c3f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-27T17:08:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5464c671-f5f2-4828-806b-3987a06a6c3f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T17:08:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5464c671-f5f2-4828-806b-3987a06a6c3f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"06db6eb8-6754-485f-8ed5-2b30cbbad8be","keyName":"e2e-rate-b-b81aca","selected_subscription":"e2e-rate-iso-b-b81aca","selected_subscription_key":"ai-tenant-e2e-shared-b-d4529a/e2e-rate-iso-b-b81aca@ai-tenant-e2e-shared-b-d4529a/rate-test-model-d4529a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-d4529a/models/facebook/opt-125m","name":"rate-test-model-d4529a","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-b81aca","namespace":"ai-tenant-e2e-shared-b-d4529a","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-d4529a/rate-test-model-d4529a"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-27T17:08:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5464c671-f5f2-4828-806b-3987a06a6c3f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T17:08:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5464c671-f5f2-4828-806b-3987a06a6c3f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T17:08:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7de823d7f58a6209d56d8c6fc114d8994867522219dd2dd733d7584089b9d910"}
{"level":"info","ts":"2026-07-27T17:08:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a0279726128b5852e1cf0d3d361293726e16445d8edc2dfaeb34f3dfb08d6635"}
{"level":"info","ts":"2026-07-27T17:08:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2069351e8d3dd00f245b2302ba8c0a8aeff009f410ef3fe6e156b79c2ddddb5f"}
{"level":"info","ts":"2026-07-27T17:08:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a90b9b52dc21beb9721daab3b777b7628d5573d7c2d5d1e7fd941303c6f92748"}
{"level":"info","ts":"2026-07-27T17:08:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2d2a7442624410c1ad2a0a4ddb989ced48c9b7efd2748199a7df32b05aed52ec"}
{"level":"info","ts":"2026-07-27T17:08:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4e0b80f2224073ded5196e7a4ac204f2577c47afe22cb064bc311c67be5b225b"}
{"level":"info","ts":"2026-07-27T17:08:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/720b810f84ff74803fb9dd7228b4d532266e9b8e5e0f5e3067405d6ac173a182"}
{"level":"info","ts":"2026-07-27T17:08:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e7b2f5785ec46769eb61e96d1f5abd0979add981c31188d2e7180ba33d8055c7"}
{"level":"info","ts":"2026-07-27T17:08:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/452367f17b7f5cd252b50629a680e21d43e00e37a419833d4dde99ab469e0525"}
{"level":"info","ts":"2026-07-27T17:08:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1960d61565ddf92c4461c1505047f53b7193bd4129dc0d037e7b8ea64f94506a"}
{"level":"info","ts":"2026-07-27T17:08:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/47cd8532c62b4b2c0ff1a427565e81921c3ba2d054415f2c671f3b8dd9adeed2"}
{"level":"info","ts":"2026-07-27T17:08:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/07d150e7e8aac5b7e16bfaf880332d3f71c8f9bec1ce0e95d3f93ad12a5f55a4"}
{"level":"info","ts":"2026-07-27T17:08:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8d468cb3104694eba3306b371cb4d32aba92ff127c921cea5d3a4b8263d1c964"}
{"level":"info","ts":"2026-07-27T17:08:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ca800592791198536eebcf6f37230d53c7a618608abb1aee7ab714561c3f024e"}
{"level":"info","ts":"2026-07-27T17:08:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/53b062b53441a9c411fabd8ffe2bea89c73a97f7966e8cff9991276a6b43bdea"}
{"level":"info","ts":"2026-07-27T17:08:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/64d0a83f86b80d7035456573d51a31dfd0ecb6f8ec3bb896d1ea0b0088280013"}
{"level":"info","ts":"2026-07-27T17:08:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fffe8fcdf598a5928d7de5405415f2390d437a065734821a96f346724717b57c"}
{"level":"info","ts":"2026-07-27T17:08:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/000899f02cdad633035834b2bd07fb1086c36e5f3ca31f6b177a742d03f01558"}
{"level":"info","ts":"2026-07-27T17:08:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6a51dfbea642c215058266e7eae387cf09c1bad84c901629832ebe235c47e198"}
{"level":"info","ts":"2026-07-27T17:08:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cab131b7613b2aa51e5b5f315ba134a76dd223620cc4591bcdb2abb2e614e4c8"}
{"level":"info","ts":"2026-07-27T17:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/499f2ee74b79bef8d9452062eb130b9959f1fb529e1c3b7066cb35607df99b2d"}
{"level":"info","ts":"2026-07-27T17:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/90d025605c9a8cca841e9db76bf09a18aa289fadc4e6841bd3504dd87113e172"}
{"level":"info","ts":"2026-07-27T17:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/19edaefb418c048421e99715ac97cf3b4f7e751243c3628e82bd7eaad8a3a67a"}
{"level":"info","ts":"2026-07-27T17:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aa1adb364943b0e616dc7533c54d56eefedf7432757ca63e212a0c628abaa66b"}
{"level":"info","ts":"2026-07-27T17:09:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8355aa16-3cfa-481c-a136-6dc73f4bd4ae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:41538","PortSpecifier":{"PortValue":41538}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8355aa16-3cfa-481c-a136-6dc73f4bd4ae","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T17:09:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8355aa16-3cfa-481c-a136-6dc73f4bd4ae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:41538","PortSpecifier":{"PortValue":41538}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785172147,"nanos":145621544},"http":{"id":"8355aa16-3cfa-481c-a136-6dc73f4bd4ae","method":"POST","headers":{":authority":"maas.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T17:09:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8355aa16-3cfa-481c-a136-6dc73f4bd4ae","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-27T17:09:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8355aa16-3cfa-481c-a136-6dc73f4bd4ae","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"19d4fba8-6c28-4c2a-aa40-edbdeb6a848c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=809080bc-3172-467d-b414-ed0fcd1808a3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5e36e679cd16"]}}
{"level":"debug","ts":"2026-07-27T17:09:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8355aa16-3cfa-481c-a136-6dc73f4bd4ae","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5e36e679cd16"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=809080bc-3172-467d-b414-ed0fcd1808a3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"19d4fba8-6c28-4c2a-aa40-edbdeb6a848c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T17:09:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8355aa16-3cfa-481c-a136-6dc73f4bd4ae","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:09:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8355aa16-3cfa-481c-a136-6dc73f4bd4ae","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:09:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8355aa16-3cfa-481c-a136-6dc73f4bd4ae","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:09:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8355aa16-3cfa-481c-a136-6dc73f4bd4ae","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-27T17:09:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8355aa16-3cfa-481c-a136-6dc73f4bd4ae","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T17:09:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8355aa16-3cfa-481c-a136-6dc73f4bd4ae","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-27T17:09:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8355aa16-3cfa-481c-a136-6dc73f4bd4ae","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T17:09:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8355aa16-3cfa-481c-a136-6dc73f4bd4ae","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T17:09:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5dc35d72-4b87-4ad9-a6e4-57c1ae20af6d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:41546","PortSpecifier":{"PortValue":41546}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5dc35d72-4b87-4ad9-a6e4-57c1ae20af6d","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T17:09:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5dc35d72-4b87-4ad9-a6e4-57c1ae20af6d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:41546","PortSpecifier":{"PortValue":41546}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785172147,"nanos":206749318},"http":{"id":"5dc35d72-4b87-4ad9-a6e4-57c1ae20af6d","method":"POST","headers":{":authority":"maas.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T17:09:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5dc35d72-4b87-4ad9-a6e4-57c1ae20af6d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-w3eT89oVDHhJ1fNL_jExVAifgnwGMRpWu2lLnV1at9gILzIsMT8Au3ixwlHl"}
{"level":"debug","ts":"2026-07-27T17:09:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5dc35d72-4b87-4ad9-a6e4-57c1ae20af6d","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-w3eT89oVDHhJ1fNL_jExVAifgnwGMRpWu2lLnV1at9gILzIsMT8Au3ixwlHl\"}"}
{"level":"debug","ts":"2026-07-27T17:09:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5dc35d72-4b87-4ad9-a6e4-57c1ae20af6d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"85765d96-4af6-494a-a90e-8d4832a622b1","keyName":"e2e-ipp-default","subscription":"simulator-subscription","tenant":"models-as-a-service","userId":"85765d96-4af6-494a-a90e-8d4832a622b1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-27T17:09:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5dc35d72-4b87-4ad9-a6e4-57c1ae20af6d","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-27T17:09:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5dc35d72-4b87-4ad9-a6e4-57c1ae20af6d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}
{"level":"debug","ts":"2026-07-27T17:09:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5dc35d72-4b87-4ad9-a6e4-57c1ae20af6d","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}},"context":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T17:09:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5dc35d72-4b87-4ad9-a6e4-57c1ae20af6d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:09:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5dc35d72-4b87-4ad9-a6e4-57c1ae20af6d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:09:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5dc35d72-4b87-4ad9-a6e4-57c1ae20af6d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:09:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5dc35d72-4b87-4ad9-a6e4-57c1ae20af6d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:09:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5dc35d72-4b87-4ad9-a6e4-57c1ae20af6d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T17:09:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5dc35d72-4b87-4ad9-a6e4-57c1ae20af6d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-07-27T17:09:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5dc35d72-4b87-4ad9-a6e4-57c1ae20af6d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-27T17:09:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5dc35d72-4b87-4ad9-a6e4-57c1ae20af6d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"85765d96-4af6-494a-a90e-8d4832a622b1","keyName":"e2e-ipp-default","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-27T17:09:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5dc35d72-4b87-4ad9-a6e4-57c1ae20af6d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T17:09:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5dc35d72-4b87-4ad9-a6e4-57c1ae20af6d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cb88ff4016d2bec747e9bb42eca0fde48aa77a261965de643f282a3c6bc8759","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:09:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:09:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cb88ff4016d2bec747e9bb42eca0fde48aa77a261965de643f282a3c6bc8759","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cb88ff4016d2bec747e9bb42eca0fde48aa77a261965de643f282a3c6bc8759","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cb88ff4016d2bec747e9bb42eca0fde48aa77a261965de643f282a3c6bc8759"}
{"level":"debug","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cb88ff4016d2bec747e9bb42eca0fde48aa77a261965de643f282a3c6bc8759","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cb88ff4016d2bec747e9bb42eca0fde48aa77a261965de643f282a3c6bc8759","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cb88ff4016d2bec747e9bb42eca0fde48aa77a261965de643f282a3c6bc8759"}
{"level":"debug","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cb88ff4016d2bec747e9bb42eca0fde48aa77a261965de643f282a3c6bc8759","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:09:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:09:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0cb88ff4016d2bec747e9bb42eca0fde48aa77a261965de643f282a3c6bc8759"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cb88ff4016d2bec747e9bb42eca0fde48aa77a261965de643f282a3c6bc8759","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cb88ff4016d2bec747e9bb42eca0fde48aa77a261965de643f282a3c6bc8759","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:09:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:09:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cb88ff4016d2bec747e9bb42eca0fde48aa77a261965de643f282a3c6bc8759","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cb88ff4016d2bec747e9bb42eca0fde48aa77a261965de643f282a3c6bc8759","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cb88ff4016d2bec747e9bb42eca0fde48aa77a261965de643f282a3c6bc8759","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cb88ff4016d2bec747e9bb42eca0fde48aa77a261965de643f282a3c6bc8759"}
{"level":"debug","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cb88ff4016d2bec747e9bb42eca0fde48aa77a261965de643f282a3c6bc8759","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cb88ff4016d2bec747e9bb42eca0fde48aa77a261965de643f282a3c6bc8759"}
{"level":"debug","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cb88ff4016d2bec747e9bb42eca0fde48aa77a261965de643f282a3c6bc8759","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:09:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:09:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0cb88ff4016d2bec747e9bb42eca0fde48aa77a261965de643f282a3c6bc8759"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cb88ff4016d2bec747e9bb42eca0fde48aa77a261965de643f282a3c6bc8759","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"923c28c143f9ac4f95c480f5108590f689a635379a205ee7d1c299071368648d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:09:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:09:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/923c28c143f9ac4f95c480f5108590f689a635379a205ee7d1c299071368648d"}
{"level":"info","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"923c28c143f9ac4f95c480f5108590f689a635379a205ee7d1c299071368648d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cb88ff4016d2bec747e9bb42eca0fde48aa77a261965de643f282a3c6bc8759","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:09:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:09:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cb88ff4016d2bec747e9bb42eca0fde48aa77a261965de643f282a3c6bc8759","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"923c28c143f9ac4f95c480f5108590f689a635379a205ee7d1c299071368648d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:09:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:09:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["923c28c143f9ac4f95c480f5108590f689a635379a205ee7d1c299071368648d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cb88ff4016d2bec747e9bb42eca0fde48aa77a261965de643f282a3c6bc8759"}
{"level":"info","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"923c28c143f9ac4f95c480f5108590f689a635379a205ee7d1c299071368648d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cb88ff4016d2bec747e9bb42eca0fde48aa77a261965de643f282a3c6bc8759","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:09:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:09:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0cb88ff4016d2bec747e9bb42eca0fde48aa77a261965de643f282a3c6bc8759"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/923c28c143f9ac4f95c480f5108590f689a635379a205ee7d1c299071368648d"}
{"level":"info","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cb88ff4016d2bec747e9bb42eca0fde48aa77a261965de643f282a3c6bc8759","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"923c28c143f9ac4f95c480f5108590f689a635379a205ee7d1c299071368648d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cb88ff4016d2bec747e9bb42eca0fde48aa77a261965de643f282a3c6bc8759","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:09:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:09:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cb88ff4016d2bec747e9bb42eca0fde48aa77a261965de643f282a3c6bc8759"}
{"level":"info","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cb88ff4016d2bec747e9bb42eca0fde48aa77a261965de643f282a3c6bc8759","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cb88ff4016d2bec747e9bb42eca0fde48aa77a261965de643f282a3c6bc8759","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:09:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:09:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0cb88ff4016d2bec747e9bb42eca0fde48aa77a261965de643f282a3c6bc8759"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/923c28c143f9ac4f95c480f5108590f689a635379a205ee7d1c299071368648d"}
{"level":"info","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cb88ff4016d2bec747e9bb42eca0fde48aa77a261965de643f282a3c6bc8759","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"516f197cf414b35d5b28f35c7484b913dc53bff8b99cfc9fc3e616733f621494","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:09:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:09:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cb88ff4016d2bec747e9bb42eca0fde48aa77a261965de643f282a3c6bc8759"}
{"level":"info","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"516f197cf414b35d5b28f35c7484b913dc53bff8b99cfc9fc3e616733f621494","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cb88ff4016d2bec747e9bb42eca0fde48aa77a261965de643f282a3c6bc8759","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"516f197cf414b35d5b28f35c7484b913dc53bff8b99cfc9fc3e616733f621494","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:09:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:09:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/516f197cf414b35d5b28f35c7484b913dc53bff8b99cfc9fc3e616733f621494"}
{"level":"info","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"516f197cf414b35d5b28f35c7484b913dc53bff8b99cfc9fc3e616733f621494","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"516f197cf414b35d5b28f35c7484b913dc53bff8b99cfc9fc3e616733f621494","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:09:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:09:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["516f197cf414b35d5b28f35c7484b913dc53bff8b99cfc9fc3e616733f621494"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"516f197cf414b35d5b28f35c7484b913dc53bff8b99cfc9fc3e616733f621494","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"516f197cf414b35d5b28f35c7484b913dc53bff8b99cfc9fc3e616733f621494","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:09:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:09:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["516f197cf414b35d5b28f35c7484b913dc53bff8b99cfc9fc3e616733f621494"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cb88ff4016d2bec747e9bb42eca0fde48aa77a261965de643f282a3c6bc8759"}
{"level":"error","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"516f197cf414b35d5b28f35c7484b913dc53bff8b99cfc9fc3e616733f621494","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"516f197cf414b35d5b28f35c7484b913dc53bff8b99cfc9fc3e616733f621494\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"516f197cf414b35d5b28f35c7484b913dc53bff8b99cfc9fc3e616733f621494","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:09:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:09:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"516f197cf414b35d5b28f35c7484b913dc53bff8b99cfc9fc3e616733f621494","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"516f197cf414b35d5b28f35c7484b913dc53bff8b99cfc9fc3e616733f621494","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:09:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:09:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/516f197cf414b35d5b28f35c7484b913dc53bff8b99cfc9fc3e616733f621494"}
{"level":"error","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"516f197cf414b35d5b28f35c7484b913dc53bff8b99cfc9fc3e616733f621494","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"516f197cf414b35d5b28f35c7484b913dc53bff8b99cfc9fc3e616733f621494\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"516f197cf414b35d5b28f35c7484b913dc53bff8b99cfc9fc3e616733f621494","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e37ba7b044adf8cc9c96d36d02c9722e5c2e284768176ddb0f867e01ec24250a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:09:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:09:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/516f197cf414b35d5b28f35c7484b913dc53bff8b99cfc9fc3e616733f621494"}
{"level":"info","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e37ba7b044adf8cc9c96d36d02c9722e5c2e284768176ddb0f867e01ec24250a"}
{"level":"info","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e37ba7b044adf8cc9c96d36d02c9722e5c2e284768176ddb0f867e01ec24250a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"516f197cf414b35d5b28f35c7484b913dc53bff8b99cfc9fc3e616733f621494","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:09:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:09:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["516f197cf414b35d5b28f35c7484b913dc53bff8b99cfc9fc3e616733f621494"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"516f197cf414b35d5b28f35c7484b913dc53bff8b99cfc9fc3e616733f621494","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e37ba7b044adf8cc9c96d36d02c9722e5c2e284768176ddb0f867e01ec24250a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:09:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:09:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e37ba7b044adf8cc9c96d36d02c9722e5c2e284768176ddb0f867e01ec24250a"}
{"level":"info","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e37ba7b044adf8cc9c96d36d02c9722e5c2e284768176ddb0f867e01ec24250a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"516f197cf414b35d5b28f35c7484b913dc53bff8b99cfc9fc3e616733f621494","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:09:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:09:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/516f197cf414b35d5b28f35c7484b913dc53bff8b99cfc9fc3e616733f621494"}
{"level":"info","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"516f197cf414b35d5b28f35c7484b913dc53bff8b99cfc9fc3e616733f621494","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e37ba7b044adf8cc9c96d36d02c9722e5c2e284768176ddb0f867e01ec24250a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"516f197cf414b35d5b28f35c7484b913dc53bff8b99cfc9fc3e616733f621494","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:09:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:09:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["516f197cf414b35d5b28f35c7484b913dc53bff8b99cfc9fc3e616733f621494"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e37ba7b044adf8cc9c96d36d02c9722e5c2e284768176ddb0f867e01ec24250a"}
{"level":"info","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"516f197cf414b35d5b28f35c7484b913dc53bff8b99cfc9fc3e616733f621494","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"516f197cf414b35d5b28f35c7484b913dc53bff8b99cfc9fc3e616733f621494","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:09:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:09:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/516f197cf414b35d5b28f35c7484b913dc53bff8b99cfc9fc3e616733f621494"}
{"level":"info","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"516f197cf414b35d5b28f35c7484b913dc53bff8b99cfc9fc3e616733f621494","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e37ba7b044adf8cc9c96d36d02c9722e5c2e284768176ddb0f867e01ec24250a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:09:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:09:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e37ba7b044adf8cc9c96d36d02c9722e5c2e284768176ddb0f867e01ec24250a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/516f197cf414b35d5b28f35c7484b913dc53bff8b99cfc9fc3e616733f621494"}
{"level":"info","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e37ba7b044adf8cc9c96d36d02c9722e5c2e284768176ddb0f867e01ec24250a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"516f197cf414b35d5b28f35c7484b913dc53bff8b99cfc9fc3e616733f621494","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e37ba7b044adf8cc9c96d36d02c9722e5c2e284768176ddb0f867e01ec24250a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"516f197cf414b35d5b28f35c7484b913dc53bff8b99cfc9fc3e616733f621494","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/516f197cf414b35d5b28f35c7484b913dc53bff8b99cfc9fc3e616733f621494"}
{"level":"debug","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"516f197cf414b35d5b28f35c7484b913dc53bff8b99cfc9fc3e616733f621494","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:09:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:09:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["516f197cf414b35d5b28f35c7484b913dc53bff8b99cfc9fc3e616733f621494"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e37ba7b044adf8cc9c96d36d02c9722e5c2e284768176ddb0f867e01ec24250a"}
{"level":"info","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"516f197cf414b35d5b28f35c7484b913dc53bff8b99cfc9fc3e616733f621494","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"516f197cf414b35d5b28f35c7484b913dc53bff8b99cfc9fc3e616733f621494","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:09:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:09:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"516f197cf414b35d5b28f35c7484b913dc53bff8b99cfc9fc3e616733f621494","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"516f197cf414b35d5b28f35c7484b913dc53bff8b99cfc9fc3e616733f621494","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"516f197cf414b35d5b28f35c7484b913dc53bff8b99cfc9fc3e616733f621494","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/516f197cf414b35d5b28f35c7484b913dc53bff8b99cfc9fc3e616733f621494"}
{"level":"debug","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"516f197cf414b35d5b28f35c7484b913dc53bff8b99cfc9fc3e616733f621494","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/516f197cf414b35d5b28f35c7484b913dc53bff8b99cfc9fc3e616733f621494"}
{"level":"debug","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"516f197cf414b35d5b28f35c7484b913dc53bff8b99cfc9fc3e616733f621494","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:09:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:09:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["516f197cf414b35d5b28f35c7484b913dc53bff8b99cfc9fc3e616733f621494"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"516f197cf414b35d5b28f35c7484b913dc53bff8b99cfc9fc3e616733f621494","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"516f197cf414b35d5b28f35c7484b913dc53bff8b99cfc9fc3e616733f621494","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:09:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:09:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"516f197cf414b35d5b28f35c7484b913dc53bff8b99cfc9fc3e616733f621494","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"516f197cf414b35d5b28f35c7484b913dc53bff8b99cfc9fc3e616733f621494","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/516f197cf414b35d5b28f35c7484b913dc53bff8b99cfc9fc3e616733f621494"}
{"level":"debug","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"516f197cf414b35d5b28f35c7484b913dc53bff8b99cfc9fc3e616733f621494","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/516f197cf414b35d5b28f35c7484b913dc53bff8b99cfc9fc3e616733f621494"}
{"level":"debug","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"516f197cf414b35d5b28f35c7484b913dc53bff8b99cfc9fc3e616733f621494","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:09:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:09:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["516f197cf414b35d5b28f35c7484b913dc53bff8b99cfc9fc3e616733f621494"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"516f197cf414b35d5b28f35c7484b913dc53bff8b99cfc9fc3e616733f621494","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"516f197cf414b35d5b28f35c7484b913dc53bff8b99cfc9fc3e616733f621494","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:09:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:09:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"516f197cf414b35d5b28f35c7484b913dc53bff8b99cfc9fc3e616733f621494","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"516f197cf414b35d5b28f35c7484b913dc53bff8b99cfc9fc3e616733f621494","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/516f197cf414b35d5b28f35c7484b913dc53bff8b99cfc9fc3e616733f621494"}
{"level":"debug","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"516f197cf414b35d5b28f35c7484b913dc53bff8b99cfc9fc3e616733f621494","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/516f197cf414b35d5b28f35c7484b913dc53bff8b99cfc9fc3e616733f621494"}
{"level":"debug","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"516f197cf414b35d5b28f35c7484b913dc53bff8b99cfc9fc3e616733f621494","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:09:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:09:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["516f197cf414b35d5b28f35c7484b913dc53bff8b99cfc9fc3e616733f621494"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"516f197cf414b35d5b28f35c7484b913dc53bff8b99cfc9fc3e616733f621494","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a474b2e2037d3e9fbb37546fa19b610e5bbf7bfc41cb8c2fa9d256979061b0a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:09:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:09:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a474b2e2037d3e9fbb37546fa19b610e5bbf7bfc41cb8c2fa9d256979061b0a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"516f197cf414b35d5b28f35c7484b913dc53bff8b99cfc9fc3e616733f621494","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a474b2e2037d3e9fbb37546fa19b610e5bbf7bfc41cb8c2fa9d256979061b0a7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a474b2e2037d3e9fbb37546fa19b610e5bbf7bfc41cb8c2fa9d256979061b0a7"}
{"level":"debug","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a474b2e2037d3e9fbb37546fa19b610e5bbf7bfc41cb8c2fa9d256979061b0a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:09:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:09:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a474b2e2037d3e9fbb37546fa19b610e5bbf7bfc41cb8c2fa9d256979061b0a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a474b2e2037d3e9fbb37546fa19b610e5bbf7bfc41cb8c2fa9d256979061b0a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a474b2e2037d3e9fbb37546fa19b610e5bbf7bfc41cb8c2fa9d256979061b0a7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/516f197cf414b35d5b28f35c7484b913dc53bff8b99cfc9fc3e616733f621494"}
{"level":"info","ts":"2026-07-27T17:09:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a474b2e2037d3e9fbb37546fa19b610e5bbf7bfc41cb8c2fa9d256979061b0a7"}
{"level":"debug","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"820f212030e32f5f405f371bc1da92c07825db9734c4f1a5cad4baa6e8203f85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:09:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:09:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"820f212030e32f5f405f371bc1da92c07825db9734c4f1a5cad4baa6e8203f85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"820f212030e32f5f405f371bc1da92c07825db9734c4f1a5cad4baa6e8203f85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ac4715ab4f39ae841b0d72a2309e62893e93b5067780d71a6f6ee278038a1d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:09:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:09:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/820f212030e32f5f405f371bc1da92c07825db9734c4f1a5cad4baa6e8203f85"}
{"level":"info","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ac4715ab4f39ae841b0d72a2309e62893e93b5067780d71a6f6ee278038a1d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"820f212030e32f5f405f371bc1da92c07825db9734c4f1a5cad4baa6e8203f85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:09:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:09:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["820f212030e32f5f405f371bc1da92c07825db9734c4f1a5cad4baa6e8203f85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ac4715ab4f39ae841b0d72a2309e62893e93b5067780d71a6f6ee278038a1d4"}
{"level":"info","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"820f212030e32f5f405f371bc1da92c07825db9734c4f1a5cad4baa6e8203f85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ac4715ab4f39ae841b0d72a2309e62893e93b5067780d71a6f6ee278038a1d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:09:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:09:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ac4715ab4f39ae841b0d72a2309e62893e93b5067780d71a6f6ee278038a1d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ac4715ab4f39ae841b0d72a2309e62893e93b5067780d71a6f6ee278038a1d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"820f212030e32f5f405f371bc1da92c07825db9734c4f1a5cad4baa6e8203f85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:09:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:09:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/820f212030e32f5f405f371bc1da92c07825db9734c4f1a5cad4baa6e8203f85"}
{"level":"info","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"820f212030e32f5f405f371bc1da92c07825db9734c4f1a5cad4baa6e8203f85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ac4715ab4f39ae841b0d72a2309e62893e93b5067780d71a6f6ee278038a1d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:09:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:09:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ac4715ab4f39ae841b0d72a2309e62893e93b5067780d71a6f6ee278038a1d4"}
{"level":"info","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ac4715ab4f39ae841b0d72a2309e62893e93b5067780d71a6f6ee278038a1d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"820f212030e32f5f405f371bc1da92c07825db9734c4f1a5cad4baa6e8203f85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ac4715ab4f39ae841b0d72a2309e62893e93b5067780d71a6f6ee278038a1d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:09:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:09:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ac4715ab4f39ae841b0d72a2309e62893e93b5067780d71a6f6ee278038a1d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/820f212030e32f5f405f371bc1da92c07825db9734c4f1a5cad4baa6e8203f85"}
{"level":"info","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ac4715ab4f39ae841b0d72a2309e62893e93b5067780d71a6f6ee278038a1d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"820f212030e32f5f405f371bc1da92c07825db9734c4f1a5cad4baa6e8203f85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:09:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:09:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["820f212030e32f5f405f371bc1da92c07825db9734c4f1a5cad4baa6e8203f85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"820f212030e32f5f405f371bc1da92c07825db9734c4f1a5cad4baa6e8203f85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ac4715ab4f39ae841b0d72a2309e62893e93b5067780d71a6f6ee278038a1d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:09:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:09:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ac4715ab4f39ae841b0d72a2309e62893e93b5067780d71a6f6ee278038a1d4"}
{"level":"info","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ac4715ab4f39ae841b0d72a2309e62893e93b5067780d71a6f6ee278038a1d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"820f212030e32f5f405f371bc1da92c07825db9734c4f1a5cad4baa6e8203f85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:09:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:09:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/820f212030e32f5f405f371bc1da92c07825db9734c4f1a5cad4baa6e8203f85"}
{"level":"info","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"820f212030e32f5f405f371bc1da92c07825db9734c4f1a5cad4baa6e8203f85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ac4715ab4f39ae841b0d72a2309e62893e93b5067780d71a6f6ee278038a1d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"820f212030e32f5f405f371bc1da92c07825db9734c4f1a5cad4baa6e8203f85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:09:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:09:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["820f212030e32f5f405f371bc1da92c07825db9734c4f1a5cad4baa6e8203f85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"820f212030e32f5f405f371bc1da92c07825db9734c4f1a5cad4baa6e8203f85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ac4715ab4f39ae841b0d72a2309e62893e93b5067780d71a6f6ee278038a1d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"820f212030e32f5f405f371bc1da92c07825db9734c4f1a5cad4baa6e8203f85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:09:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:09:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["820f212030e32f5f405f371bc1da92c07825db9734c4f1a5cad4baa6e8203f85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ac4715ab4f39ae841b0d72a2309e62893e93b5067780d71a6f6ee278038a1d4"}
{"level":"error","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"820f212030e32f5f405f371bc1da92c07825db9734c4f1a5cad4baa6e8203f85","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"820f212030e32f5f405f371bc1da92c07825db9734c4f1a5cad4baa6e8203f85\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"820f212030e32f5f405f371bc1da92c07825db9734c4f1a5cad4baa6e8203f85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:09:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:09:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"820f212030e32f5f405f371bc1da92c07825db9734c4f1a5cad4baa6e8203f85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ac4715ab4f39ae841b0d72a2309e62893e93b5067780d71a6f6ee278038a1d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:09:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:09:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ac4715ab4f39ae841b0d72a2309e62893e93b5067780d71a6f6ee278038a1d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/820f212030e32f5f405f371bc1da92c07825db9734c4f1a5cad4baa6e8203f85"}
{"level":"info","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ac4715ab4f39ae841b0d72a2309e62893e93b5067780d71a6f6ee278038a1d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"820f212030e32f5f405f371bc1da92c07825db9734c4f1a5cad4baa6e8203f85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"106503325cd50512f81bc7d691394a3dfe55050dc21447f67552d1f9032a1cf7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:09:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:09:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/820f212030e32f5f405f371bc1da92c07825db9734c4f1a5cad4baa6e8203f85"}
{"level":"info","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"106503325cd50512f81bc7d691394a3dfe55050dc21447f67552d1f9032a1cf7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ac4715ab4f39ae841b0d72a2309e62893e93b5067780d71a6f6ee278038a1d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"106503325cd50512f81bc7d691394a3dfe55050dc21447f67552d1f9032a1cf7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:09:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:09:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/106503325cd50512f81bc7d691394a3dfe55050dc21447f67552d1f9032a1cf7"}
{"level":"info","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"106503325cd50512f81bc7d691394a3dfe55050dc21447f67552d1f9032a1cf7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"820f212030e32f5f405f371bc1da92c07825db9734c4f1a5cad4baa6e8203f85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:09:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:09:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["820f212030e32f5f405f371bc1da92c07825db9734c4f1a5cad4baa6e8203f85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ac4715ab4f39ae841b0d72a2309e62893e93b5067780d71a6f6ee278038a1d4"}
{"level":"info","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"820f212030e32f5f405f371bc1da92c07825db9734c4f1a5cad4baa6e8203f85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"106503325cd50512f81bc7d691394a3dfe55050dc21447f67552d1f9032a1cf7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"820f212030e32f5f405f371bc1da92c07825db9734c4f1a5cad4baa6e8203f85","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/106503325cd50512f81bc7d691394a3dfe55050dc21447f67552d1f9032a1cf7"}
{"level":"debug","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"106503325cd50512f81bc7d691394a3dfe55050dc21447f67552d1f9032a1cf7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:09:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:09:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["106503325cd50512f81bc7d691394a3dfe55050dc21447f67552d1f9032a1cf7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"106503325cd50512f81bc7d691394a3dfe55050dc21447f67552d1f9032a1cf7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1de784d1888abda598a2c619ba73440b489feac07fd9416b5101305ee8c6ed73","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:09:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:09:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/820f212030e32f5f405f371bc1da92c07825db9734c4f1a5cad4baa6e8203f85"}
{"level":"info","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1de784d1888abda598a2c619ba73440b489feac07fd9416b5101305ee8c6ed73","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"106503325cd50512f81bc7d691394a3dfe55050dc21447f67552d1f9032a1cf7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1de784d1888abda598a2c619ba73440b489feac07fd9416b5101305ee8c6ed73","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:09:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:09:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1de784d1888abda598a2c619ba73440b489feac07fd9416b5101305ee8c6ed73"}
{"level":"info","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1de784d1888abda598a2c619ba73440b489feac07fd9416b5101305ee8c6ed73","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1de784d1888abda598a2c619ba73440b489feac07fd9416b5101305ee8c6ed73","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:09:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:09:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1de784d1888abda598a2c619ba73440b489feac07fd9416b5101305ee8c6ed73"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1de784d1888abda598a2c619ba73440b489feac07fd9416b5101305ee8c6ed73","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1de784d1888abda598a2c619ba73440b489feac07fd9416b5101305ee8c6ed73\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1de784d1888abda598a2c619ba73440b489feac07fd9416b5101305ee8c6ed73","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:09:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:09:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1de784d1888abda598a2c619ba73440b489feac07fd9416b5101305ee8c6ed73"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/106503325cd50512f81bc7d691394a3dfe55050dc21447f67552d1f9032a1cf7"}
{"level":"info","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1de784d1888abda598a2c619ba73440b489feac07fd9416b5101305ee8c6ed73","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1de784d1888abda598a2c619ba73440b489feac07fd9416b5101305ee8c6ed73","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1de784d1888abda598a2c619ba73440b489feac07fd9416b5101305ee8c6ed73","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:09:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:09:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1de784d1888abda598a2c619ba73440b489feac07fd9416b5101305ee8c6ed73"}
{"level":"info","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1de784d1888abda598a2c619ba73440b489feac07fd9416b5101305ee8c6ed73","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1de784d1888abda598a2c619ba73440b489feac07fd9416b5101305ee8c6ed73","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:09:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:09:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1de784d1888abda598a2c619ba73440b489feac07fd9416b5101305ee8c6ed73","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1de784d1888abda598a2c619ba73440b489feac07fd9416b5101305ee8c6ed73\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1de784d1888abda598a2c619ba73440b489feac07fd9416b5101305ee8c6ed73","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1de784d1888abda598a2c619ba73440b489feac07fd9416b5101305ee8c6ed73","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1de784d1888abda598a2c619ba73440b489feac07fd9416b5101305ee8c6ed73"}
{"level":"debug","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f4c47ef4ca760accdfb43162fadcd3d188748a4f6256f20551ec1fab1adfc32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:09:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:09:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f4c47ef4ca760accdfb43162fadcd3d188748a4f6256f20551ec1fab1adfc32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f4c47ef4ca760accdfb43162fadcd3d188748a4f6256f20551ec1fab1adfc32","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1de784d1888abda598a2c619ba73440b489feac07fd9416b5101305ee8c6ed73"}
{"level":"debug","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f4c47ef4ca760accdfb43162fadcd3d188748a4f6256f20551ec1fab1adfc32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:09:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:09:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f4c47ef4ca760accdfb43162fadcd3d188748a4f6256f20551ec1fab1adfc32"}
{"level":"info","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f4c47ef4ca760accdfb43162fadcd3d188748a4f6256f20551ec1fab1adfc32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f4c47ef4ca760accdfb43162fadcd3d188748a4f6256f20551ec1fab1adfc32","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f4c47ef4ca760accdfb43162fadcd3d188748a4f6256f20551ec1fab1adfc32"}
{"level":"debug","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f4c47ef4ca760accdfb43162fadcd3d188748a4f6256f20551ec1fab1adfc32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:09:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:09:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f4c47ef4ca760accdfb43162fadcd3d188748a4f6256f20551ec1fab1adfc32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f4c47ef4ca760accdfb43162fadcd3d188748a4f6256f20551ec1fab1adfc32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1de784d1888abda598a2c619ba73440b489feac07fd9416b5101305ee8c6ed73","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:09:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:09:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1de784d1888abda598a2c619ba73440b489feac07fd9416b5101305ee8c6ed73"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f4c47ef4ca760accdfb43162fadcd3d188748a4f6256f20551ec1fab1adfc32"}
{"level":"info","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1de784d1888abda598a2c619ba73440b489feac07fd9416b5101305ee8c6ed73","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f4c47ef4ca760accdfb43162fadcd3d188748a4f6256f20551ec1fab1adfc32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1de784d1888abda598a2c619ba73440b489feac07fd9416b5101305ee8c6ed73","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:09:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:09:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1de784d1888abda598a2c619ba73440b489feac07fd9416b5101305ee8c6ed73","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed43933ff5bcc1b568456492d8c57a366b5d9d87527a66e2f95bd60765b5079c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:09:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:09:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1de784d1888abda598a2c619ba73440b489feac07fd9416b5101305ee8c6ed73"}
{"level":"info","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed43933ff5bcc1b568456492d8c57a366b5d9d87527a66e2f95bd60765b5079c"}
{"level":"info","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1de784d1888abda598a2c619ba73440b489feac07fd9416b5101305ee8c6ed73"}
{"level":"info","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed43933ff5bcc1b568456492d8c57a366b5d9d87527a66e2f95bd60765b5079c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1de784d1888abda598a2c619ba73440b489feac07fd9416b5101305ee8c6ed73","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:09:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:09:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1de784d1888abda598a2c619ba73440b489feac07fd9416b5101305ee8c6ed73"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b736234779fa3708424da82fc4d70b936e731475a40f665078c5385cc950531c"}
{"level":"info","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed43933ff5bcc1b568456492d8c57a366b5d9d87527a66e2f95bd60765b5079c"}
{"level":"info","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1de784d1888abda598a2c619ba73440b489feac07fd9416b5101305ee8c6ed73","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b736234779fa3708424da82fc4d70b936e731475a40f665078c5385cc950531c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:09:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:09:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b736234779fa3708424da82fc4d70b936e731475a40f665078c5385cc950531c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1de784d1888abda598a2c619ba73440b489feac07fd9416b5101305ee8c6ed73"}
{"level":"info","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b736234779fa3708424da82fc4d70b936e731475a40f665078c5385cc950531c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed43933ff5bcc1b568456492d8c57a366b5d9d87527a66e2f95bd60765b5079c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:09:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:09:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed43933ff5bcc1b568456492d8c57a366b5d9d87527a66e2f95bd60765b5079c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b736234779fa3708424da82fc4d70b936e731475a40f665078c5385cc950531c"}
{"level":"info","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed43933ff5bcc1b568456492d8c57a366b5d9d87527a66e2f95bd60765b5079c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1de784d1888abda598a2c619ba73440b489feac07fd9416b5101305ee8c6ed73","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b736234779fa3708424da82fc4d70b936e731475a40f665078c5385cc950531c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed43933ff5bcc1b568456492d8c57a366b5d9d87527a66e2f95bd60765b5079c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:09:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:09:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed43933ff5bcc1b568456492d8c57a366b5d9d87527a66e2f95bd60765b5079c"}
{"level":"info","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed43933ff5bcc1b568456492d8c57a366b5d9d87527a66e2f95bd60765b5079c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed43933ff5bcc1b568456492d8c57a366b5d9d87527a66e2f95bd60765b5079c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed43933ff5bcc1b568456492d8c57a366b5d9d87527a66e2f95bd60765b5079c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed43933ff5bcc1b568456492d8c57a366b5d9d87527a66e2f95bd60765b5079c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed43933ff5bcc1b568456492d8c57a366b5d9d87527a66e2f95bd60765b5079c"}
{"level":"debug","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed43933ff5bcc1b568456492d8c57a366b5d9d87527a66e2f95bd60765b5079c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:09:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:09:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed43933ff5bcc1b568456492d8c57a366b5d9d87527a66e2f95bd60765b5079c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed43933ff5bcc1b568456492d8c57a366b5d9d87527a66e2f95bd60765b5079c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed43933ff5bcc1b568456492d8c57a366b5d9d87527a66e2f95bd60765b5079c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:09:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:09:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed43933ff5bcc1b568456492d8c57a366b5d9d87527a66e2f95bd60765b5079c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed43933ff5bcc1b568456492d8c57a366b5d9d87527a66e2f95bd60765b5079c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed43933ff5bcc1b568456492d8c57a366b5d9d87527a66e2f95bd60765b5079c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:09:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed43933ff5bcc1b568456492d8c57a366b5d9d87527a66e2f95bd60765b5079c"}
{"level":"debug","ts":"2026-07-27T17:09:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed43933ff5bcc1b568456492d8c57a366b5d9d87527a66e2f95bd60765b5079c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:09:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed43933ff5bcc1b568456492d8c57a366b5d9d87527a66e2f95bd60765b5079c"}
{"level":"debug","ts":"2026-07-27T17:09:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed43933ff5bcc1b568456492d8c57a366b5d9d87527a66e2f95bd60765b5079c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:09:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:09:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed43933ff5bcc1b568456492d8c57a366b5d9d87527a66e2f95bd60765b5079c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:09:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed43933ff5bcc1b568456492d8c57a366b5d9d87527a66e2f95bd60765b5079c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed43933ff5bcc1b568456492d8c57a366b5d9d87527a66e2f95bd60765b5079c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:09:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:09:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:09:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed43933ff5bcc1b568456492d8c57a366b5d9d87527a66e2f95bd60765b5079c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed43933ff5bcc1b568456492d8c57a366b5d9d87527a66e2f95bd60765b5079c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:09:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed43933ff5bcc1b568456492d8c57a366b5d9d87527a66e2f95bd60765b5079c"}
{"level":"debug","ts":"2026-07-27T17:09:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed43933ff5bcc1b568456492d8c57a366b5d9d87527a66e2f95bd60765b5079c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed43933ff5bcc1b568456492d8c57a366b5d9d87527a66e2f95bd60765b5079c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:09:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed43933ff5bcc1b568456492d8c57a366b5d9d87527a66e2f95bd60765b5079c"}
{"level":"debug","ts":"2026-07-27T17:09:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed43933ff5bcc1b568456492d8c57a366b5d9d87527a66e2f95bd60765b5079c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:09:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:09:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed43933ff5bcc1b568456492d8c57a366b5d9d87527a66e2f95bd60765b5079c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:09:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed43933ff5bcc1b568456492d8c57a366b5d9d87527a66e2f95bd60765b5079c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed43933ff5bcc1b568456492d8c57a366b5d9d87527a66e2f95bd60765b5079c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-27T17:09:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-27T17:09:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:09:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed43933ff5bcc1b568456492d8c57a366b5d9d87527a66e2f95bd60765b5079c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed43933ff5bcc1b568456492d8c57a366b5d9d87527a66e2f95bd60765b5079c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed43933ff5bcc1b568456492d8c57a366b5d9d87527a66e2f95bd60765b5079c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:09:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed43933ff5bcc1b568456492d8c57a366b5d9d87527a66e2f95bd60765b5079c"}
{"level":"debug","ts":"2026-07-27T17:09:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed43933ff5bcc1b568456492d8c57a366b5d9d87527a66e2f95bd60765b5079c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:09:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed43933ff5bcc1b568456492d8c57a366b5d9d87527a66e2f95bd60765b5079c"}
{"level":"debug","ts":"2026-07-27T17:09:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed43933ff5bcc1b568456492d8c57a366b5d9d87527a66e2f95bd60765b5079c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-27T17:09:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-27T17:09:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed43933ff5bcc1b568456492d8c57a366b5d9d87527a66e2f95bd60765b5079c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-27T17:09:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed43933ff5bcc1b568456492d8c57a366b5d9d87527a66e2f95bd60765b5079c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-27T17:09:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed43933ff5bcc1b568456492d8c57a366b5d9d87527a66e2f95bd60765b5079c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-27T17:09:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed43933ff5bcc1b568456492d8c57a366b5d9d87527a66e2f95bd60765b5079c"}
{"level":"info","ts":"2026-07-27T17:10:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0d45b5dd-9134-49e7-9d88-7bcd81335738","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:53136","PortSpecifier":{"PortValue":53136}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0d45b5dd-9134-49e7-9d88-7bcd81335738","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-ipp-a-2cf641.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T17:10:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0d45b5dd-9134-49e7-9d88-7bcd81335738","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:53136","PortSpecifier":{"PortValue":53136}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785172202,"nanos":375258016},"http":{"id":"0d45b5dd-9134-49e7-9d88-7bcd81335738","method":"POST","headers":{":authority":"e2e-ipp-a-2cf641.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T17:10:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0d45b5dd-9134-49e7-9d88-7bcd81335738","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-27T17:10:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0d45b5dd-9134-49e7-9d88-7bcd81335738","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"19d4fba8-6c28-4c2a-aa40-edbdeb6a848c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=809080bc-3172-467d-b414-ed0fcd1808a3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5e36e679cd16"]}}
{"level":"debug","ts":"2026-07-27T17:10:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0d45b5dd-9134-49e7-9d88-7bcd81335738","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5e36e679cd16"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=809080bc-3172-467d-b414-ed0fcd1808a3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"19d4fba8-6c28-4c2a-aa40-edbdeb6a848c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"820f212030e32f5f405f371bc1da92c07825db9734c4f1a5cad4baa6e8203f85"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-ipp-a-2cf641.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T17:10:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d45b5dd-9134-49e7-9d88-7bcd81335738","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:10:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d45b5dd-9134-49e7-9d88-7bcd81335738","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:10:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d45b5dd-9134-49e7-9d88-7bcd81335738","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-2cf641/ipp-route-2cf641\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-2cf641/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:10:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0d45b5dd-9134-49e7-9d88-7bcd81335738","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-27T17:10:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d45b5dd-9134-49e7-9d88-7bcd81335738","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T17:10:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d45b5dd-9134-49e7-9d88-7bcd81335738","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-27T17:10:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0d45b5dd-9134-49e7-9d88-7bcd81335738","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T17:10:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0d45b5dd-9134-49e7-9d88-7bcd81335738","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T17:10:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b947d2ee-e887-47d3-b621-5dfbf68414e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:53150","PortSpecifier":{"PortValue":53150}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b947d2ee-e887-47d3-b621-5dfbf68414e1","method":"POST","path":"/ai-tenant-e2e-ipp-a-2cf641/ipp-route-2cf641/v1/chat/completions","host":"e2e-ipp-a-2cf641.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-27T17:10:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b947d2ee-e887-47d3-b621-5dfbf68414e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:53150","PortSpecifier":{"PortValue":53150}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785172204,"nanos":447618948},"http":{"id":"b947d2ee-e887-47d3-b621-5dfbf68414e1","method":"POST","headers":{":authority":"e2e-ipp-a-2cf641.apps.335dd596-71eb-4f89-8f28-5e36e679cd16.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-ipp-a-2cf641/ipp-route-2cf641/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T17:10:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b947d2ee-e887-47d3-b621-5dfbf68414e1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-4c9XNMR32uzSv4ge_L414tKEPmIuNc0tgQrx58KLtIXVOjna8GoWKucGEfwY"}
{"level":"debug","ts":"2026-07-27T17:10:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b947d2ee-e887-47d3-b621-5dfbf68414e1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-ipp-a-2cf641.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-4c9XNMR32uzSv4ge_L414tKEPmIuNc0tgQrx58KLtIXVOjna8GoWKucGEfwY\"}"}
{"level":"debug","ts":"2026-07-27T17:10:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b947d2ee-e887-47d3-b621-5dfbf68414e1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-2cf641.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"79810a6a-240a-4917-91eb-078967cc3239","keyName":"e2e-ipp-2cf641","subscription":"ipp-route-2cf641-sub","tenant":"e2e-ipp-a-2cf641","userId":"79810a6a-240a-4917-91eb-078967cc3239","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-27T17:10:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b947d2ee-e887-47d3-b621-5dfbf68414e1","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-ipp-a-2cf641.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-ipp-a-2cf641/ipp-route-2cf641\",\"requestedSubscription\":\"ipp-route-2cf641-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-27T17:10:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b947d2ee-e887-47d3-b621-5dfbf68414e1","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-2cf641.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-2cf641/models/facebook/opt-125m","name":"ipp-route-2cf641","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-2cf641-sub","namespace":"ai-tenant-e2e-ipp-a-2cf641","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-2cf641/ipp-route-2cf641"}}
{"level":"debug","ts":"2026-07-27T17:10:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b947d2ee-e887-47d3-b621-5dfbf68414e1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-27T17:10:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b947d2ee-e887-47d3-b621-5dfbf68414e1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:10:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b947d2ee-e887-47d3-b621-5dfbf68414e1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:10:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b947d2ee-e887-47d3-b621-5dfbf68414e1","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:10:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b947d2ee-e887-47d3-b621-5dfbf68414e1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-2cf641/ipp-route-2cf641\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-2cf641/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-27T17:10:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b947d2ee-e887-47d3-b621-5dfbf68414e1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-27T17:10:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b947d2ee-e887-47d3-b621-5dfbf68414e1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-27T17:10:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b947d2ee-e887-47d3-b621-5dfbf68414e1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"ipp-route-2cf641-sub"}
{"level":"debug","ts":"2026-07-27T17:10:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b947d2ee-e887-47d3-b621-5dfbf68414e1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"79810a6a-240a-4917-91eb-078967cc3239","keyName":"e2e-ipp-2cf641","selected_subscription":"ipp-route-2cf641-sub","selected_subscription_key":"ai-tenant-e2e-ipp-a-2cf641/ipp-route-2cf641-sub@ai-tenant-e2e-ipp-a-2cf641/ipp-route-2cf641","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-2cf641/models/facebook/opt-125m","name":"ipp-route-2cf641","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-2cf641-sub","namespace":"ai-tenant-e2e-ipp-a-2cf641","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-2cf641/ipp-route-2cf641"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-27T17:10:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b947d2ee-e887-47d3-b621-5dfbf68414e1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-27T17:10:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b947d2ee-e887-47d3-b621-5dfbf68414e1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-27T17:11:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b736234779fa3708424da82fc4d70b936e731475a40f665078c5385cc950531c"}
{"level":"info","ts":"2026-07-27T17:11:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/923c28c143f9ac4f95c480f5108590f689a635379a205ee7d1c299071368648d"}
{"level":"info","ts":"2026-07-27T17:11:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0cb88ff4016d2bec747e9bb42eca0fde48aa77a261965de643f282a3c6bc8759"}
{"level":"info","ts":"2026-07-27T17:11:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/106503325cd50512f81bc7d691394a3dfe55050dc21447f67552d1f9032a1cf7"}
{"level":"info","ts":"2026-07-27T17:11:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ed43933ff5bcc1b568456492d8c57a366b5d9d87527a66e2f95bd60765b5079c"}
{"level":"info","ts":"2026-07-27T17:11:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e37ba7b044adf8cc9c96d36d02c9722e5c2e284768176ddb0f867e01ec24250a"}
{"level":"info","ts":"2026-07-27T17:11:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1de784d1888abda598a2c619ba73440b489feac07fd9416b5101305ee8c6ed73"}
{"level":"info","ts":"2026-07-27T17:11:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a474b2e2037d3e9fbb37546fa19b610e5bbf7bfc41cb8c2fa9d256979061b0a7"}
{"level":"info","ts":"2026-07-27T17:11:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/820f212030e32f5f405f371bc1da92c07825db9734c4f1a5cad4baa6e8203f85"}
{"level":"info","ts":"2026-07-27T17:11:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ac4715ab4f39ae841b0d72a2309e62893e93b5067780d71a6f6ee278038a1d4"}
{"level":"info","ts":"2026-07-27T17:11:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1f4c47ef4ca760accdfb43162fadcd3d188748a4f6256f20551ec1fab1adfc32"}
{"level":"info","ts":"2026-07-27T17:11:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/516f197cf414b35d5b28f35c7484b913dc53bff8b99cfc9fc3e616733f621494"}