--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"info","ts":"2026-07-06T20:05:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecd0289b37543b233093bf63b9e3ec8f2b1bf2f0ea1aa02d9abe74ca07da8b6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ecd0289b37543b233093bf63b9e3ec8f2b1bf2f0ea1aa02d9abe74ca07da8b6c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecd0289b37543b233093bf63b9e3ec8f2b1bf2f0ea1aa02d9abe74ca07da8b6c"}
{"level":"debug","ts":"2026-07-06T20:05:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72"}
{"level":"debug","ts":"2026-07-06T20:05:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72"}
{"level":"debug","ts":"2026-07-06T20:05:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72"}
{"level":"debug","ts":"2026-07-06T20:05:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72"}
{"level":"info","ts":"2026-07-06T20:05:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T20:05:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:05:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72"}
{"level":"info","ts":"2026-07-06T20:05:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72"}
{"level":"debug","ts":"2026-07-06T20:05:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72"}
{"level":"debug","ts":"2026-07-06T20:05:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72"}
{"level":"debug","ts":"2026-07-06T20:05:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72"}
{"level":"info","ts":"2026-07-06T20:05:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72"}
{"level":"info","ts":"2026-07-06T20:05:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72"}
{"level":"error","ts":"2026-07-06T20:05:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:05:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72"}
{"level":"debug","ts":"2026-07-06T20:05:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72"}
{"level":"debug","ts":"2026-07-06T20:05:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72"}
{"level":"debug","ts":"2026-07-06T20:05:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72"}
{"level":"debug","ts":"2026-07-06T20:05:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72"}
{"level":"debug","ts":"2026-07-06T20:05:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72"}
{"level":"debug","ts":"2026-07-06T20:05:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72"}
{"level":"debug","ts":"2026-07-06T20:05:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72"}
{"level":"debug","ts":"2026-07-06T20:05:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72"}
{"level":"debug","ts":"2026-07-06T20:05:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72"}
{"level":"debug","ts":"2026-07-06T20:05:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72"}
{"level":"debug","ts":"2026-07-06T20:05:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72"}
{"level":"debug","ts":"2026-07-06T20:05:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72"}
{"level":"debug","ts":"2026-07-06T20:05:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72"}
{"level":"debug","ts":"2026-07-06T20:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9f26fd423be1ae9a0fc9bbc41ff33344cbb86576c9fa5cdfcf2480303ba8a81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9f26fd423be1ae9a0fc9bbc41ff33344cbb86576c9fa5cdfcf2480303ba8a81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9f26fd423be1ae9a0fc9bbc41ff33344cbb86576c9fa5cdfcf2480303ba8a81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9f26fd423be1ae9a0fc9bbc41ff33344cbb86576c9fa5cdfcf2480303ba8a81","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9f26fd423be1ae9a0fc9bbc41ff33344cbb86576c9fa5cdfcf2480303ba8a81"}
{"level":"debug","ts":"2026-07-06T20:05:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9f26fd423be1ae9a0fc9bbc41ff33344cbb86576c9fa5cdfcf2480303ba8a81","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9f26fd423be1ae9a0fc9bbc41ff33344cbb86576c9fa5cdfcf2480303ba8a81"}
{"level":"debug","ts":"2026-07-06T20:05:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9f26fd423be1ae9a0fc9bbc41ff33344cbb86576c9fa5cdfcf2480303ba8a81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9f26fd423be1ae9a0fc9bbc41ff33344cbb86576c9fa5cdfcf2480303ba8a81"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9f26fd423be1ae9a0fc9bbc41ff33344cbb86576c9fa5cdfcf2480303ba8a81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9f26fd423be1ae9a0fc9bbc41ff33344cbb86576c9fa5cdfcf2480303ba8a81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9f26fd423be1ae9a0fc9bbc41ff33344cbb86576c9fa5cdfcf2480303ba8a81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9f26fd423be1ae9a0fc9bbc41ff33344cbb86576c9fa5cdfcf2480303ba8a81","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9f26fd423be1ae9a0fc9bbc41ff33344cbb86576c9fa5cdfcf2480303ba8a81"}
{"level":"debug","ts":"2026-07-06T20:05:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9f26fd423be1ae9a0fc9bbc41ff33344cbb86576c9fa5cdfcf2480303ba8a81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9f26fd423be1ae9a0fc9bbc41ff33344cbb86576c9fa5cdfcf2480303ba8a81","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9f26fd423be1ae9a0fc9bbc41ff33344cbb86576c9fa5cdfcf2480303ba8a81"}
{"level":"debug","ts":"2026-07-06T20:05:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9f26fd423be1ae9a0fc9bbc41ff33344cbb86576c9fa5cdfcf2480303ba8a81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9f26fd423be1ae9a0fc9bbc41ff33344cbb86576c9fa5cdfcf2480303ba8a81"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9f26fd423be1ae9a0fc9bbc41ff33344cbb86576c9fa5cdfcf2480303ba8a81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9f26fd423be1ae9a0fc9bbc41ff33344cbb86576c9fa5cdfcf2480303ba8a81","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9f26fd423be1ae9a0fc9bbc41ff33344cbb86576c9fa5cdfcf2480303ba8a81"}
{"level":"debug","ts":"2026-07-06T20:05:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5c9bc7b1e355cc7f56e983fef93eb78534066eef3609e48ac83c0e880471b5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5c9bc7b1e355cc7f56e983fef93eb78534066eef3609e48ac83c0e880471b5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5c9bc7b1e355cc7f56e983fef93eb78534066eef3609e48ac83c0e880471b5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5c9bc7b1e355cc7f56e983fef93eb78534066eef3609e48ac83c0e880471b5c"}
{"level":"info","ts":"2026-07-06T20:05:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5c9bc7b1e355cc7f56e983fef93eb78534066eef3609e48ac83c0e880471b5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5c9bc7b1e355cc7f56e983fef93eb78534066eef3609e48ac83c0e880471b5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T20:05:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f5c9bc7b1e355cc7f56e983fef93eb78534066eef3609e48ac83c0e880471b5c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f5c9bc7b1e355cc7f56e983fef93eb78534066eef3609e48ac83c0e880471b5c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:05:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5c9bc7b1e355cc7f56e983fef93eb78534066eef3609e48ac83c0e880471b5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5c9bc7b1e355cc7f56e983fef93eb78534066eef3609e48ac83c0e880471b5c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5c9bc7b1e355cc7f56e983fef93eb78534066eef3609e48ac83c0e880471b5c"}
{"level":"info","ts":"2026-07-06T20:05:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5c9bc7b1e355cc7f56e983fef93eb78534066eef3609e48ac83c0e880471b5c"}
{"level":"debug","ts":"2026-07-06T20:05:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5c9bc7b1e355cc7f56e983fef93eb78534066eef3609e48ac83c0e880471b5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5c9bc7b1e355cc7f56e983fef93eb78534066eef3609e48ac83c0e880471b5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5c9bc7b1e355cc7f56e983fef93eb78534066eef3609e48ac83c0e880471b5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5c9bc7b1e355cc7f56e983fef93eb78534066eef3609e48ac83c0e880471b5c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5c9bc7b1e355cc7f56e983fef93eb78534066eef3609e48ac83c0e880471b5c"}
{"level":"info","ts":"2026-07-06T20:05:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6e67574beeb1e7caf4ad948a88ddf67ea0d43333108fee1d69395f7aed954c72"}
{"level":"info","ts":"2026-07-06T20:05:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ecd0289b37543b233093bf63b9e3ec8f2b1bf2f0ea1aa02d9abe74ca07da8b6c"}
{"level":"info","ts":"2026-07-06T20:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c9f26fd423be1ae9a0fc9bbc41ff33344cbb86576c9fa5cdfcf2480303ba8a81"}
{"level":"info","ts":"2026-07-06T20:05:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f5c9bc7b1e355cc7f56e983fef93eb78534066eef3609e48ac83c0e880471b5c"}
{"level":"debug","ts":"2026-07-06T20:07:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44b95e13c57a4d22fd839fb7a9480bbd10d2813dd59d7849a057c280f7265d2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44b95e13c57a4d22fd839fb7a9480bbd10d2813dd59d7849a057c280f7265d2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44b95e13c57a4d22fd839fb7a9480bbd10d2813dd59d7849a057c280f7265d2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44b95e13c57a4d22fd839fb7a9480bbd10d2813dd59d7849a057c280f7265d2c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44b95e13c57a4d22fd839fb7a9480bbd10d2813dd59d7849a057c280f7265d2c"}
{"level":"debug","ts":"2026-07-06T20:07:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44b95e13c57a4d22fd839fb7a9480bbd10d2813dd59d7849a057c280f7265d2c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44b95e13c57a4d22fd839fb7a9480bbd10d2813dd59d7849a057c280f7265d2c"}
{"level":"debug","ts":"2026-07-06T20:07:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44b95e13c57a4d22fd839fb7a9480bbd10d2813dd59d7849a057c280f7265d2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["44b95e13c57a4d22fd839fb7a9480bbd10d2813dd59d7849a057c280f7265d2c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44b95e13c57a4d22fd839fb7a9480bbd10d2813dd59d7849a057c280f7265d2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44b95e13c57a4d22fd839fb7a9480bbd10d2813dd59d7849a057c280f7265d2c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44b95e13c57a4d22fd839fb7a9480bbd10d2813dd59d7849a057c280f7265d2c"}
{"level":"debug","ts":"2026-07-06T20:07:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a995fe0cf8b9fd1f3a1814f93918a8b35c3662d1f0bb6d059c6367c156ad2149","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a995fe0cf8b9fd1f3a1814f93918a8b35c3662d1f0bb6d059c6367c156ad2149","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a995fe0cf8b9fd1f3a1814f93918a8b35c3662d1f0bb6d059c6367c156ad2149","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a995fe0cf8b9fd1f3a1814f93918a8b35c3662d1f0bb6d059c6367c156ad2149","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a995fe0cf8b9fd1f3a1814f93918a8b35c3662d1f0bb6d059c6367c156ad2149"}
{"level":"debug","ts":"2026-07-06T20:07:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a995fe0cf8b9fd1f3a1814f93918a8b35c3662d1f0bb6d059c6367c156ad2149","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a995fe0cf8b9fd1f3a1814f93918a8b35c3662d1f0bb6d059c6367c156ad2149"}
{"level":"debug","ts":"2026-07-06T20:07:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a995fe0cf8b9fd1f3a1814f93918a8b35c3662d1f0bb6d059c6367c156ad2149","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a995fe0cf8b9fd1f3a1814f93918a8b35c3662d1f0bb6d059c6367c156ad2149"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a995fe0cf8b9fd1f3a1814f93918a8b35c3662d1f0bb6d059c6367c156ad2149","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63ba19f78e4218c5653c2360fddd3e8569d317384c1dd1baab134db6b08446ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63ba19f78e4218c5653c2360fddd3e8569d317384c1dd1baab134db6b08446ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a995fe0cf8b9fd1f3a1814f93918a8b35c3662d1f0bb6d059c6367c156ad2149","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63ba19f78e4218c5653c2360fddd3e8569d317384c1dd1baab134db6b08446ca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63ba19f78e4218c5653c2360fddd3e8569d317384c1dd1baab134db6b08446ca"}
{"level":"debug","ts":"2026-07-06T20:07:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63ba19f78e4218c5653c2360fddd3e8569d317384c1dd1baab134db6b08446ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63ba19f78e4218c5653c2360fddd3e8569d317384c1dd1baab134db6b08446ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63ba19f78e4218c5653c2360fddd3e8569d317384c1dd1baab134db6b08446ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63ba19f78e4218c5653c2360fddd3e8569d317384c1dd1baab134db6b08446ca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a995fe0cf8b9fd1f3a1814f93918a8b35c3662d1f0bb6d059c6367c156ad2149"}
{"level":"info","ts":"2026-07-06T20:07:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63ba19f78e4218c5653c2360fddd3e8569d317384c1dd1baab134db6b08446ca"}
{"level":"debug","ts":"2026-07-06T20:07:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"431c537a44e87ae8a5e372e396746144c4c62c3a0743ccba0790190cd12ee461","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"431c537a44e87ae8a5e372e396746144c4c62c3a0743ccba0790190cd12ee461","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"431c537a44e87ae8a5e372e396746144c4c62c3a0743ccba0790190cd12ee461","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/431c537a44e87ae8a5e372e396746144c4c62c3a0743ccba0790190cd12ee461"}
{"level":"info","ts":"2026-07-06T20:07:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"431c537a44e87ae8a5e372e396746144c4c62c3a0743ccba0790190cd12ee461","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"431c537a44e87ae8a5e372e396746144c4c62c3a0743ccba0790190cd12ee461","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T20:07:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"431c537a44e87ae8a5e372e396746144c4c62c3a0743ccba0790190cd12ee461","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"431c537a44e87ae8a5e372e396746144c4c62c3a0743ccba0790190cd12ee461\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:07:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"431c537a44e87ae8a5e372e396746144c4c62c3a0743ccba0790190cd12ee461","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"431c537a44e87ae8a5e372e396746144c4c62c3a0743ccba0790190cd12ee461","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/431c537a44e87ae8a5e372e396746144c4c62c3a0743ccba0790190cd12ee461"}
{"level":"info","ts":"2026-07-06T20:07:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/431c537a44e87ae8a5e372e396746144c4c62c3a0743ccba0790190cd12ee461"}
{"level":"debug","ts":"2026-07-06T20:07:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"431c537a44e87ae8a5e372e396746144c4c62c3a0743ccba0790190cd12ee461","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["431c537a44e87ae8a5e372e396746144c4c62c3a0743ccba0790190cd12ee461"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"431c537a44e87ae8a5e372e396746144c4c62c3a0743ccba0790190cd12ee461","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"431c537a44e87ae8a5e372e396746144c4c62c3a0743ccba0790190cd12ee461","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/431c537a44e87ae8a5e372e396746144c4c62c3a0743ccba0790190cd12ee461"}
{"level":"debug","ts":"2026-07-06T20:07:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eef94982c756d9c2034e8e02b7fec16519ab4b52f30430eda15e8f98ec6f95ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eef94982c756d9c2034e8e02b7fec16519ab4b52f30430eda15e8f98ec6f95ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eef94982c756d9c2034e8e02b7fec16519ab4b52f30430eda15e8f98ec6f95ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eef94982c756d9c2034e8e02b7fec16519ab4b52f30430eda15e8f98ec6f95ad","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eef94982c756d9c2034e8e02b7fec16519ab4b52f30430eda15e8f98ec6f95ad"}
{"level":"debug","ts":"2026-07-06T20:07:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eef94982c756d9c2034e8e02b7fec16519ab4b52f30430eda15e8f98ec6f95ad","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eef94982c756d9c2034e8e02b7fec16519ab4b52f30430eda15e8f98ec6f95ad"}
{"level":"debug","ts":"2026-07-06T20:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eef94982c756d9c2034e8e02b7fec16519ab4b52f30430eda15e8f98ec6f95ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eef94982c756d9c2034e8e02b7fec16519ab4b52f30430eda15e8f98ec6f95ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eef94982c756d9c2034e8e02b7fec16519ab4b52f30430eda15e8f98ec6f95ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eef94982c756d9c2034e8e02b7fec16519ab4b52f30430eda15e8f98ec6f95ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eef94982c756d9c2034e8e02b7fec16519ab4b52f30430eda15e8f98ec6f95ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8b6352daa7124999985572acb226e88b9be9d252320328902475045fcda4922","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eef94982c756d9c2034e8e02b7fec16519ab4b52f30430eda15e8f98ec6f95ad"}
{"level":"info","ts":"2026-07-06T20:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8b6352daa7124999985572acb226e88b9be9d252320328902475045fcda4922","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eef94982c756d9c2034e8e02b7fec16519ab4b52f30430eda15e8f98ec6f95ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eef94982c756d9c2034e8e02b7fec16519ab4b52f30430eda15e8f98ec6f95ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8b6352daa7124999985572acb226e88b9be9d252320328902475045fcda4922"}
{"level":"info","ts":"2026-07-06T20:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d98f2d2ce6b6d6e2ac8876e1a760adfecf96ac7301bd6946fa689599fc912243"}
{"level":"info","ts":"2026-07-06T20:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eef94982c756d9c2034e8e02b7fec16519ab4b52f30430eda15e8f98ec6f95ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d98f2d2ce6b6d6e2ac8876e1a760adfecf96ac7301bd6946fa689599fc912243","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d98f2d2ce6b6d6e2ac8876e1a760adfecf96ac7301bd6946fa689599fc912243"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d98f2d2ce6b6d6e2ac8876e1a760adfecf96ac7301bd6946fa689599fc912243","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8b6352daa7124999985572acb226e88b9be9d252320328902475045fcda4922","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a8b6352daa7124999985572acb226e88b9be9d252320328902475045fcda4922"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eef94982c756d9c2034e8e02b7fec16519ab4b52f30430eda15e8f98ec6f95ad"}
{"level":"info","ts":"2026-07-06T20:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8b6352daa7124999985572acb226e88b9be9d252320328902475045fcda4922","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eef94982c756d9c2034e8e02b7fec16519ab4b52f30430eda15e8f98ec6f95ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d98f2d2ce6b6d6e2ac8876e1a760adfecf96ac7301bd6946fa689599fc912243","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8b6352daa7124999985572acb226e88b9be9d252320328902475045fcda4922","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8b6352daa7124999985572acb226e88b9be9d252320328902475045fcda4922","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8b6352daa7124999985572acb226e88b9be9d252320328902475045fcda4922","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8b6352daa7124999985572acb226e88b9be9d252320328902475045fcda4922","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8b6352daa7124999985572acb226e88b9be9d252320328902475045fcda4922"}
{"level":"debug","ts":"2026-07-06T20:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8b6352daa7124999985572acb226e88b9be9d252320328902475045fcda4922","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a8b6352daa7124999985572acb226e88b9be9d252320328902475045fcda4922"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d98f2d2ce6b6d6e2ac8876e1a760adfecf96ac7301bd6946fa689599fc912243"}
{"level":"info","ts":"2026-07-06T20:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8b6352daa7124999985572acb226e88b9be9d252320328902475045fcda4922","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8b6352daa7124999985572acb226e88b9be9d252320328902475045fcda4922","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eef94982c756d9c2034e8e02b7fec16519ab4b52f30430eda15e8f98ec6f95ad"}
{"level":"debug","ts":"2026-07-06T20:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b3305c0bb47cb19ad842d5d9b9bcf814da86573dd81d79a3081793bc6d7fe9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b3305c0bb47cb19ad842d5d9b9bcf814da86573dd81d79a3081793bc6d7fe9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b3305c0bb47cb19ad842d5d9b9bcf814da86573dd81d79a3081793bc6d7fe9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b3305c0bb47cb19ad842d5d9b9bcf814da86573dd81d79a3081793bc6d7fe9e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8b6352daa7124999985572acb226e88b9be9d252320328902475045fcda4922"}
{"level":"debug","ts":"2026-07-06T20:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b3305c0bb47cb19ad842d5d9b9bcf814da86573dd81d79a3081793bc6d7fe9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b3305c0bb47cb19ad842d5d9b9bcf814da86573dd81d79a3081793bc6d7fe9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b3305c0bb47cb19ad842d5d9b9bcf814da86573dd81d79a3081793bc6d7fe9e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b3305c0bb47cb19ad842d5d9b9bcf814da86573dd81d79a3081793bc6d7fe9e"}
{"level":"info","ts":"2026-07-06T20:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b3305c0bb47cb19ad842d5d9b9bcf814da86573dd81d79a3081793bc6d7fe9e"}
{"level":"debug","ts":"2026-07-06T20:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b3305c0bb47cb19ad842d5d9b9bcf814da86573dd81d79a3081793bc6d7fe9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b3305c0bb47cb19ad842d5d9b9bcf814da86573dd81d79a3081793bc6d7fe9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b3305c0bb47cb19ad842d5d9b9bcf814da86573dd81d79a3081793bc6d7fe9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"320f5df9448dfffabb7bb7e7cd64df72a1dcc799b62187d6c974b4891a26d7e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/320f5df9448dfffabb7bb7e7cd64df72a1dcc799b62187d6c974b4891a26d7e3"}
{"level":"info","ts":"2026-07-06T20:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"320f5df9448dfffabb7bb7e7cd64df72a1dcc799b62187d6c974b4891a26d7e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b3305c0bb47cb19ad842d5d9b9bcf814da86573dd81d79a3081793bc6d7fe9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b3305c0bb47cb19ad842d5d9b9bcf814da86573dd81d79a3081793bc6d7fe9e"}
{"level":"info","ts":"2026-07-06T20:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b3305c0bb47cb19ad842d5d9b9bcf814da86573dd81d79a3081793bc6d7fe9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c9922e735ae2cabd45db5ac5e84057450465dc85e177432db78a9903ad6dddd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c9922e735ae2cabd45db5ac5e84057450465dc85e177432db78a9903ad6dddd"}
{"level":"info","ts":"2026-07-06T20:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c9922e735ae2cabd45db5ac5e84057450465dc85e177432db78a9903ad6dddd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"320f5df9448dfffabb7bb7e7cd64df72a1dcc799b62187d6c974b4891a26d7e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b3305c0bb47cb19ad842d5d9b9bcf814da86573dd81d79a3081793bc6d7fe9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b3305c0bb47cb19ad842d5d9b9bcf814da86573dd81d79a3081793bc6d7fe9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b3305c0bb47cb19ad842d5d9b9bcf814da86573dd81d79a3081793bc6d7fe9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c9922e735ae2cabd45db5ac5e84057450465dc85e177432db78a9903ad6dddd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5c9922e735ae2cabd45db5ac5e84057450465dc85e177432db78a9903ad6dddd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/320f5df9448dfffabb7bb7e7cd64df72a1dcc799b62187d6c974b4891a26d7e3"}
{"level":"info","ts":"2026-07-06T20:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c9922e735ae2cabd45db5ac5e84057450465dc85e177432db78a9903ad6dddd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"320f5df9448dfffabb7bb7e7cd64df72a1dcc799b62187d6c974b4891a26d7e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["320f5df9448dfffabb7bb7e7cd64df72a1dcc799b62187d6c974b4891a26d7e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b3305c0bb47cb19ad842d5d9b9bcf814da86573dd81d79a3081793bc6d7fe9e"}
{"level":"info","ts":"2026-07-06T20:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"320f5df9448dfffabb7bb7e7cd64df72a1dcc799b62187d6c974b4891a26d7e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b3305c0bb47cb19ad842d5d9b9bcf814da86573dd81d79a3081793bc6d7fe9e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c9922e735ae2cabd45db5ac5e84057450465dc85e177432db78a9903ad6dddd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c9922e735ae2cabd45db5ac5e84057450465dc85e177432db78a9903ad6dddd"}
{"level":"info","ts":"2026-07-06T20:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c9922e735ae2cabd45db5ac5e84057450465dc85e177432db78a9903ad6dddd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"320f5df9448dfffabb7bb7e7cd64df72a1dcc799b62187d6c974b4891a26d7e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"320f5df9448dfffabb7bb7e7cd64df72a1dcc799b62187d6c974b4891a26d7e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c9922e735ae2cabd45db5ac5e84057450465dc85e177432db78a9903ad6dddd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5c9922e735ae2cabd45db5ac5e84057450465dc85e177432db78a9903ad6dddd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/320f5df9448dfffabb7bb7e7cd64df72a1dcc799b62187d6c974b4891a26d7e3"}
{"level":"info","ts":"2026-07-06T20:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c9922e735ae2cabd45db5ac5e84057450465dc85e177432db78a9903ad6dddd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"320f5df9448dfffabb7bb7e7cd64df72a1dcc799b62187d6c974b4891a26d7e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["320f5df9448dfffabb7bb7e7cd64df72a1dcc799b62187d6c974b4891a26d7e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c9922e735ae2cabd45db5ac5e84057450465dc85e177432db78a9903ad6dddd"}
{"level":"info","ts":"2026-07-06T20:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"320f5df9448dfffabb7bb7e7cd64df72a1dcc799b62187d6c974b4891a26d7e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c9922e735ae2cabd45db5ac5e84057450465dc85e177432db78a9903ad6dddd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"320f5df9448dfffabb7bb7e7cd64df72a1dcc799b62187d6c974b4891a26d7e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/320f5df9448dfffabb7bb7e7cd64df72a1dcc799b62187d6c974b4891a26d7e3"}
{"level":"info","ts":"2026-07-06T20:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"320f5df9448dfffabb7bb7e7cd64df72a1dcc799b62187d6c974b4891a26d7e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"320f5df9448dfffabb7bb7e7cd64df72a1dcc799b62187d6c974b4891a26d7e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["320f5df9448dfffabb7bb7e7cd64df72a1dcc799b62187d6c974b4891a26d7e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c9922e735ae2cabd45db5ac5e84057450465dc85e177432db78a9903ad6dddd"}
{"level":"info","ts":"2026-07-06T20:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"320f5df9448dfffabb7bb7e7cd64df72a1dcc799b62187d6c974b4891a26d7e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"320f5df9448dfffabb7bb7e7cd64df72a1dcc799b62187d6c974b4891a26d7e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/320f5df9448dfffabb7bb7e7cd64df72a1dcc799b62187d6c974b4891a26d7e3"}
{"level":"info","ts":"2026-07-06T20:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"320f5df9448dfffabb7bb7e7cd64df72a1dcc799b62187d6c974b4891a26d7e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"320f5df9448dfffabb7bb7e7cd64df72a1dcc799b62187d6c974b4891a26d7e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"320f5df9448dfffabb7bb7e7cd64df72a1dcc799b62187d6c974b4891a26d7e3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/320f5df9448dfffabb7bb7e7cd64df72a1dcc799b62187d6c974b4891a26d7e3"}
{"level":"debug","ts":"2026-07-06T20:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"320f5df9448dfffabb7bb7e7cd64df72a1dcc799b62187d6c974b4891a26d7e3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/320f5df9448dfffabb7bb7e7cd64df72a1dcc799b62187d6c974b4891a26d7e3"}
{"level":"debug","ts":"2026-07-06T20:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"320f5df9448dfffabb7bb7e7cd64df72a1dcc799b62187d6c974b4891a26d7e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["320f5df9448dfffabb7bb7e7cd64df72a1dcc799b62187d6c974b4891a26d7e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"320f5df9448dfffabb7bb7e7cd64df72a1dcc799b62187d6c974b4891a26d7e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"320f5df9448dfffabb7bb7e7cd64df72a1dcc799b62187d6c974b4891a26d7e3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/320f5df9448dfffabb7bb7e7cd64df72a1dcc799b62187d6c974b4891a26d7e3"}
{"level":"debug","ts":"2026-07-06T20:07:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"777c153fbdb3b785d7ebffee0dde9664ef13aee0c2904afb832467102b23ebe6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"777c153fbdb3b785d7ebffee0dde9664ef13aee0c2904afb832467102b23ebe6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/777c153fbdb3b785d7ebffee0dde9664ef13aee0c2904afb832467102b23ebe6"}
{"level":"debug","ts":"2026-07-06T20:07:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"777c153fbdb3b785d7ebffee0dde9664ef13aee0c2904afb832467102b23ebe6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["777c153fbdb3b785d7ebffee0dde9664ef13aee0c2904afb832467102b23ebe6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"777c153fbdb3b785d7ebffee0dde9664ef13aee0c2904afb832467102b23ebe6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"777c153fbdb3b785d7ebffee0dde9664ef13aee0c2904afb832467102b23ebe6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"777c153fbdb3b785d7ebffee0dde9664ef13aee0c2904afb832467102b23ebe6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/777c153fbdb3b785d7ebffee0dde9664ef13aee0c2904afb832467102b23ebe6"}
{"level":"info","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"777c153fbdb3b785d7ebffee0dde9664ef13aee0c2904afb832467102b23ebe6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"777c153fbdb3b785d7ebffee0dde9664ef13aee0c2904afb832467102b23ebe6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/777c153fbdb3b785d7ebffee0dde9664ef13aee0c2904afb832467102b23ebe6"}
{"level":"error","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"777c153fbdb3b785d7ebffee0dde9664ef13aee0c2904afb832467102b23ebe6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"777c153fbdb3b785d7ebffee0dde9664ef13aee0c2904afb832467102b23ebe6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"777c153fbdb3b785d7ebffee0dde9664ef13aee0c2904afb832467102b23ebe6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"777c153fbdb3b785d7ebffee0dde9664ef13aee0c2904afb832467102b23ebe6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/777c153fbdb3b785d7ebffee0dde9664ef13aee0c2904afb832467102b23ebe6"}
{"level":"debug","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6db66237446c263c75582ff3755bf9504707243fb92f9a7eaeb0212e5c4749f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6db66237446c263c75582ff3755bf9504707243fb92f9a7eaeb0212e5c4749f1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6db66237446c263c75582ff3755bf9504707243fb92f9a7eaeb0212e5c4749f1"}
{"level":"debug","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6db66237446c263c75582ff3755bf9504707243fb92f9a7eaeb0212e5c4749f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6db66237446c263c75582ff3755bf9504707243fb92f9a7eaeb0212e5c4749f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6db66237446c263c75582ff3755bf9504707243fb92f9a7eaeb0212e5c4749f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6db66237446c263c75582ff3755bf9504707243fb92f9a7eaeb0212e5c4749f1"}
{"level":"error","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6db66237446c263c75582ff3755bf9504707243fb92f9a7eaeb0212e5c4749f1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6db66237446c263c75582ff3755bf9504707243fb92f9a7eaeb0212e5c4749f1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6db66237446c263c75582ff3755bf9504707243fb92f9a7eaeb0212e5c4749f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6db66237446c263c75582ff3755bf9504707243fb92f9a7eaeb0212e5c4749f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"777c153fbdb3b785d7ebffee0dde9664ef13aee0c2904afb832467102b23ebe6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["777c153fbdb3b785d7ebffee0dde9664ef13aee0c2904afb832467102b23ebe6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6db66237446c263c75582ff3755bf9504707243fb92f9a7eaeb0212e5c4749f1"}
{"level":"info","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"777c153fbdb3b785d7ebffee0dde9664ef13aee0c2904afb832467102b23ebe6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"777c153fbdb3b785d7ebffee0dde9664ef13aee0c2904afb832467102b23ebe6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/777c153fbdb3b785d7ebffee0dde9664ef13aee0c2904afb832467102b23ebe6"}
{"level":"info","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"777c153fbdb3b785d7ebffee0dde9664ef13aee0c2904afb832467102b23ebe6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"777c153fbdb3b785d7ebffee0dde9664ef13aee0c2904afb832467102b23ebe6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"777c153fbdb3b785d7ebffee0dde9664ef13aee0c2904afb832467102b23ebe6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/777c153fbdb3b785d7ebffee0dde9664ef13aee0c2904afb832467102b23ebe6"}
{"level":"debug","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba"}
{"level":"info","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6db66237446c263c75582ff3755bf9504707243fb92f9a7eaeb0212e5c4749f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6db66237446c263c75582ff3755bf9504707243fb92f9a7eaeb0212e5c4749f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6db66237446c263c75582ff3755bf9504707243fb92f9a7eaeb0212e5c4749f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"777c153fbdb3b785d7ebffee0dde9664ef13aee0c2904afb832467102b23ebe6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["777c153fbdb3b785d7ebffee0dde9664ef13aee0c2904afb832467102b23ebe6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba"}
{"level":"info","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"777c153fbdb3b785d7ebffee0dde9664ef13aee0c2904afb832467102b23ebe6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6db66237446c263c75582ff3755bf9504707243fb92f9a7eaeb0212e5c4749f1"}
{"level":"info","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/777c153fbdb3b785d7ebffee0dde9664ef13aee0c2904afb832467102b23ebe6"}
{"level":"info","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6db66237446c263c75582ff3755bf9504707243fb92f9a7eaeb0212e5c4749f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"777c153fbdb3b785d7ebffee0dde9664ef13aee0c2904afb832467102b23ebe6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89c05426b04449c77c01b4d844e5c25c6f1e85a2cf5f30b0e2141358ffc7891f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89c05426b04449c77c01b4d844e5c25c6f1e85a2cf5f30b0e2141358ffc7891f"}
{"level":"info","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89c05426b04449c77c01b4d844e5c25c6f1e85a2cf5f30b0e2141358ffc7891f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba"}
{"level":"info","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89c05426b04449c77c01b4d844e5c25c6f1e85a2cf5f30b0e2141358ffc7891f"}
{"level":"info","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89c05426b04449c77c01b4d844e5c25c6f1e85a2cf5f30b0e2141358ffc7891f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89c05426b04449c77c01b4d844e5c25c6f1e85a2cf5f30b0e2141358ffc7891f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89c05426b04449c77c01b4d844e5c25c6f1e85a2cf5f30b0e2141358ffc7891f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5403724ff185c3ddf552cdf0b402b12e82f2da8c094b6fb656884795409c438f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba"}
{"level":"info","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5403724ff185c3ddf552cdf0b402b12e82f2da8c094b6fb656884795409c438f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89c05426b04449c77c01b4d844e5c25c6f1e85a2cf5f30b0e2141358ffc7891f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5403724ff185c3ddf552cdf0b402b12e82f2da8c094b6fb656884795409c438f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5403724ff185c3ddf552cdf0b402b12e82f2da8c094b6fb656884795409c438f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5403724ff185c3ddf552cdf0b402b12e82f2da8c094b6fb656884795409c438f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5403724ff185c3ddf552cdf0b402b12e82f2da8c094b6fb656884795409c438f"}
{"level":"debug","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"557c4218a1db88e526b953323cac54b4acb23ea3c96dbb2f67729ae788086e8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89c05426b04449c77c01b4d844e5c25c6f1e85a2cf5f30b0e2141358ffc7891f"}
{"level":"info","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"557c4218a1db88e526b953323cac54b4acb23ea3c96dbb2f67729ae788086e8e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5403724ff185c3ddf552cdf0b402b12e82f2da8c094b6fb656884795409c438f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5403724ff185c3ddf552cdf0b402b12e82f2da8c094b6fb656884795409c438f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba"}
{"level":"info","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5403724ff185c3ddf552cdf0b402b12e82f2da8c094b6fb656884795409c438f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"557c4218a1db88e526b953323cac54b4acb23ea3c96dbb2f67729ae788086e8e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5403724ff185c3ddf552cdf0b402b12e82f2da8c094b6fb656884795409c438f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5403724ff185c3ddf552cdf0b402b12e82f2da8c094b6fb656884795409c438f"}
{"level":"info","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5403724ff185c3ddf552cdf0b402b12e82f2da8c094b6fb656884795409c438f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"557c4218a1db88e526b953323cac54b4acb23ea3c96dbb2f67729ae788086e8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/557c4218a1db88e526b953323cac54b4acb23ea3c96dbb2f67729ae788086e8e"}
{"level":"info","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"557c4218a1db88e526b953323cac54b4acb23ea3c96dbb2f67729ae788086e8e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5403724ff185c3ddf552cdf0b402b12e82f2da8c094b6fb656884795409c438f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"557c4218a1db88e526b953323cac54b4acb23ea3c96dbb2f67729ae788086e8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["557c4218a1db88e526b953323cac54b4acb23ea3c96dbb2f67729ae788086e8e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5403724ff185c3ddf552cdf0b402b12e82f2da8c094b6fb656884795409c438f"}
{"level":"info","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"557c4218a1db88e526b953323cac54b4acb23ea3c96dbb2f67729ae788086e8e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9dc9f8553d3205d669cb60c0e9ad4425386f0eaa69f409d7e1545fa2d5bc546","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9dc9f8553d3205d669cb60c0e9ad4425386f0eaa69f409d7e1545fa2d5bc546","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5403724ff185c3ddf552cdf0b402b12e82f2da8c094b6fb656884795409c438f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5403724ff185c3ddf552cdf0b402b12e82f2da8c094b6fb656884795409c438f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/557c4218a1db88e526b953323cac54b4acb23ea3c96dbb2f67729ae788086e8e"}
{"level":"info","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5403724ff185c3ddf552cdf0b402b12e82f2da8c094b6fb656884795409c438f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"557c4218a1db88e526b953323cac54b4acb23ea3c96dbb2f67729ae788086e8e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9dc9f8553d3205d669cb60c0e9ad4425386f0eaa69f409d7e1545fa2d5bc546","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9dc9f8553d3205d669cb60c0e9ad4425386f0eaa69f409d7e1545fa2d5bc546"}
{"level":"info","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9dc9f8553d3205d669cb60c0e9ad4425386f0eaa69f409d7e1545fa2d5bc546","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5403724ff185c3ddf552cdf0b402b12e82f2da8c094b6fb656884795409c438f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9dc9f8553d3205d669cb60c0e9ad4425386f0eaa69f409d7e1545fa2d5bc546","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9dc9f8553d3205d669cb60c0e9ad4425386f0eaa69f409d7e1545fa2d5bc546"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/557c4218a1db88e526b953323cac54b4acb23ea3c96dbb2f67729ae788086e8e"}
{"level":"info","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9dc9f8553d3205d669cb60c0e9ad4425386f0eaa69f409d7e1545fa2d5bc546","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9dc9f8553d3205d669cb60c0e9ad4425386f0eaa69f409d7e1545fa2d5bc546","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9dc9f8553d3205d669cb60c0e9ad4425386f0eaa69f409d7e1545fa2d5bc546"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5403724ff185c3ddf552cdf0b402b12e82f2da8c094b6fb656884795409c438f"}
{"level":"error","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b9dc9f8553d3205d669cb60c0e9ad4425386f0eaa69f409d7e1545fa2d5bc546","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b9dc9f8553d3205d669cb60c0e9ad4425386f0eaa69f409d7e1545fa2d5bc546\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89c3586bcb3a6dd227451f2ca0fce9a1c8ec5d44543af7eb26d04a9bde2ae41c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9dc9f8553d3205d669cb60c0e9ad4425386f0eaa69f409d7e1545fa2d5bc546"}
{"level":"info","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89c3586bcb3a6dd227451f2ca0fce9a1c8ec5d44543af7eb26d04a9bde2ae41c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9dc9f8553d3205d669cb60c0e9ad4425386f0eaa69f409d7e1545fa2d5bc546","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8f907d3ffe38c35729b7da2db968fbb47c9cbca11eeb383ea98d5c5541f0626","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89c3586bcb3a6dd227451f2ca0fce9a1c8ec5d44543af7eb26d04a9bde2ae41c"}
{"level":"info","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8f907d3ffe38c35729b7da2db968fbb47c9cbca11eeb383ea98d5c5541f0626","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89c3586bcb3a6dd227451f2ca0fce9a1c8ec5d44543af7eb26d04a9bde2ae41c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89c3586bcb3a6dd227451f2ca0fce9a1c8ec5d44543af7eb26d04a9bde2ae41c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8f907d3ffe38c35729b7da2db968fbb47c9cbca11eeb383ea98d5c5541f0626"}
{"level":"info","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89c3586bcb3a6dd227451f2ca0fce9a1c8ec5d44543af7eb26d04a9bde2ae41c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e39ee9eaa493b814f929a327e6a64086557f7057e50cbc867a58076091429a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e39ee9eaa493b814f929a327e6a64086557f7057e50cbc867a58076091429a4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e39ee9eaa493b814f929a327e6a64086557f7057e50cbc867a58076091429a4"}
{"level":"debug","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8f907d3ffe38c35729b7da2db968fbb47c9cbca11eeb383ea98d5c5541f0626","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8f907d3ffe38c35729b7da2db968fbb47c9cbca11eeb383ea98d5c5541f0626"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8f907d3ffe38c35729b7da2db968fbb47c9cbca11eeb383ea98d5c5541f0626","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89c3586bcb3a6dd227451f2ca0fce9a1c8ec5d44543af7eb26d04a9bde2ae41c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89c3586bcb3a6dd227451f2ca0fce9a1c8ec5d44543af7eb26d04a9bde2ae41c"}
{"level":"info","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89c3586bcb3a6dd227451f2ca0fce9a1c8ec5d44543af7eb26d04a9bde2ae41c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e39ee9eaa493b814f929a327e6a64086557f7057e50cbc867a58076091429a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e39ee9eaa493b814f929a327e6a64086557f7057e50cbc867a58076091429a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8f907d3ffe38c35729b7da2db968fbb47c9cbca11eeb383ea98d5c5541f0626"}
{"level":"info","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e39ee9eaa493b814f929a327e6a64086557f7057e50cbc867a58076091429a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8f907d3ffe38c35729b7da2db968fbb47c9cbca11eeb383ea98d5c5541f0626","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89c3586bcb3a6dd227451f2ca0fce9a1c8ec5d44543af7eb26d04a9bde2ae41c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89c3586bcb3a6dd227451f2ca0fce9a1c8ec5d44543af7eb26d04a9bde2ae41c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89c3586bcb3a6dd227451f2ca0fce9a1c8ec5d44543af7eb26d04a9bde2ae41c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e39ee9eaa493b814f929a327e6a64086557f7057e50cbc867a58076091429a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e39ee9eaa493b814f929a327e6a64086557f7057e50cbc867a58076091429a4"}
{"level":"info","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e39ee9eaa493b814f929a327e6a64086557f7057e50cbc867a58076091429a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89c3586bcb3a6dd227451f2ca0fce9a1c8ec5d44543af7eb26d04a9bde2ae41c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89c3586bcb3a6dd227451f2ca0fce9a1c8ec5d44543af7eb26d04a9bde2ae41c"}
{"level":"info","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89c3586bcb3a6dd227451f2ca0fce9a1c8ec5d44543af7eb26d04a9bde2ae41c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e39ee9eaa493b814f929a327e6a64086557f7057e50cbc867a58076091429a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89c3586bcb3a6dd227451f2ca0fce9a1c8ec5d44543af7eb26d04a9bde2ae41c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89c3586bcb3a6dd227451f2ca0fce9a1c8ec5d44543af7eb26d04a9bde2ae41c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e39ee9eaa493b814f929a327e6a64086557f7057e50cbc867a58076091429a4"}
{"level":"info","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89c3586bcb3a6dd227451f2ca0fce9a1c8ec5d44543af7eb26d04a9bde2ae41c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e39ee9eaa493b814f929a327e6a64086557f7057e50cbc867a58076091429a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e39ee9eaa493b814f929a327e6a64086557f7057e50cbc867a58076091429a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89c3586bcb3a6dd227451f2ca0fce9a1c8ec5d44543af7eb26d04a9bde2ae41c"}
{"level":"info","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e39ee9eaa493b814f929a327e6a64086557f7057e50cbc867a58076091429a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89c3586bcb3a6dd227451f2ca0fce9a1c8ec5d44543af7eb26d04a9bde2ae41c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89c3586bcb3a6dd227451f2ca0fce9a1c8ec5d44543af7eb26d04a9bde2ae41c"}
{"level":"info","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89c3586bcb3a6dd227451f2ca0fce9a1c8ec5d44543af7eb26d04a9bde2ae41c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e39ee9eaa493b814f929a327e6a64086557f7057e50cbc867a58076091429a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e39ee9eaa493b814f929a327e6a64086557f7057e50cbc867a58076091429a4"}
{"level":"info","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e39ee9eaa493b814f929a327e6a64086557f7057e50cbc867a58076091429a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89c3586bcb3a6dd227451f2ca0fce9a1c8ec5d44543af7eb26d04a9bde2ae41c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e39ee9eaa493b814f929a327e6a64086557f7057e50cbc867a58076091429a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e39ee9eaa493b814f929a327e6a64086557f7057e50cbc867a58076091429a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89c3586bcb3a6dd227451f2ca0fce9a1c8ec5d44543af7eb26d04a9bde2ae41c"}
{"level":"info","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e39ee9eaa493b814f929a327e6a64086557f7057e50cbc867a58076091429a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89c3586bcb3a6dd227451f2ca0fce9a1c8ec5d44543af7eb26d04a9bde2ae41c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89c3586bcb3a6dd227451f2ca0fce9a1c8ec5d44543af7eb26d04a9bde2ae41c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e39ee9eaa493b814f929a327e6a64086557f7057e50cbc867a58076091429a4"}
{"level":"info","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89c3586bcb3a6dd227451f2ca0fce9a1c8ec5d44543af7eb26d04a9bde2ae41c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e39ee9eaa493b814f929a327e6a64086557f7057e50cbc867a58076091429a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e39ee9eaa493b814f929a327e6a64086557f7057e50cbc867a58076091429a4"}
{"level":"info","ts":"2026-07-06T20:07:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89c3586bcb3a6dd227451f2ca0fce9a1c8ec5d44543af7eb26d04a9bde2ae41c"}
{"level":"info","ts":"2026-07-06T20:07:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e39ee9eaa493b814f929a327e6a64086557f7057e50cbc867a58076091429a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89c3586bcb3a6dd227451f2ca0fce9a1c8ec5d44543af7eb26d04a9bde2ae41c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e39ee9eaa493b814f929a327e6a64086557f7057e50cbc867a58076091429a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e39ee9eaa493b814f929a327e6a64086557f7057e50cbc867a58076091429a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e39ee9eaa493b814f929a327e6a64086557f7057e50cbc867a58076091429a4"}
{"level":"info","ts":"2026-07-06T20:07:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e39ee9eaa493b814f929a327e6a64086557f7057e50cbc867a58076091429a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e39ee9eaa493b814f929a327e6a64086557f7057e50cbc867a58076091429a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e39ee9eaa493b814f929a327e6a64086557f7057e50cbc867a58076091429a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T20:07:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3e39ee9eaa493b814f929a327e6a64086557f7057e50cbc867a58076091429a4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3e39ee9eaa493b814f929a327e6a64086557f7057e50cbc867a58076091429a4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:07:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e39ee9eaa493b814f929a327e6a64086557f7057e50cbc867a58076091429a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:07:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:07:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e39ee9eaa493b814f929a327e6a64086557f7057e50cbc867a58076091429a4"}
{"level":"info","ts":"2026-07-06T20:07:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e39ee9eaa493b814f929a327e6a64086557f7057e50cbc867a58076091429a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e39ee9eaa493b814f929a327e6a64086557f7057e50cbc867a58076091429a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e39ee9eaa493b814f929a327e6a64086557f7057e50cbc867a58076091429a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e39ee9eaa493b814f929a327e6a64086557f7057e50cbc867a58076091429a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e39ee9eaa493b814f929a327e6a64086557f7057e50cbc867a58076091429a4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e39ee9eaa493b814f929a327e6a64086557f7057e50cbc867a58076091429a4"}
{"level":"debug","ts":"2026-07-06T20:07:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e39ee9eaa493b814f929a327e6a64086557f7057e50cbc867a58076091429a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:07:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:07:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e39ee9eaa493b814f929a327e6a64086557f7057e50cbc867a58076091429a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:07:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e39ee9eaa493b814f929a327e6a64086557f7057e50cbc867a58076091429a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:07:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e39ee9eaa493b814f929a327e6a64086557f7057e50cbc867a58076091429a4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:07:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e39ee9eaa493b814f929a327e6a64086557f7057e50cbc867a58076091429a4"}
{"level":"info","ts":"2026-07-06T20:07:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e428e0bd-19aa-41a9-a14f-ab751ef821ec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:48170","PortSpecifier":{"PortValue":48170}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e428e0bd-19aa-41a9-a14f-ab751ef821ec","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-7ba461.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:07:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e428e0bd-19aa-41a9-a14f-ab751ef821ec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:48170","PortSpecifier":{"PortValue":48170}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368431,"nanos":983009630},"http":{"id":"e428e0bd-19aa-41a9-a14f-ab751ef821ec","method":"POST","headers":{":authority":"e2e-shared-a-7ba461.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:07:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e428e0bd-19aa-41a9-a14f-ab751ef821ec","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:07:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e428e0bd-19aa-41a9-a14f-ab751ef821ec","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4c5c9b1d-59e4-4c06-9c51-913c43475eb5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b754c299-5a20-40bb-9dad-929c5cb04a96"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14fb9e990410"]}}
{"level":"debug","ts":"2026-07-06T20:07:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e428e0bd-19aa-41a9-a14f-ab751ef821ec","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14fb9e990410"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b754c299-5a20-40bb-9dad-929c5cb04a96"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4c5c9b1d-59e4-4c06-9c51-913c43475eb5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"63ba19f78e4218c5653c2360fddd3e8569d317384c1dd1baab134db6b08446ca"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7ba461.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:07:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e428e0bd-19aa-41a9-a14f-ab751ef821ec","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e428e0bd-19aa-41a9-a14f-ab751ef821ec","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e428e0bd-19aa-41a9-a14f-ab751ef821ec","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7ba461/auth-test-model-7ba461\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e428e0bd-19aa-41a9-a14f-ab751ef821ec","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:07:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e428e0bd-19aa-41a9-a14f-ab751ef821ec","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:07:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e428e0bd-19aa-41a9-a14f-ab751ef821ec","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:07:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e428e0bd-19aa-41a9-a14f-ab751ef821ec","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:07:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e428e0bd-19aa-41a9-a14f-ab751ef821ec","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"51afcc99-5452-4a1f-95ec-794362538955","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:36382","PortSpecifier":{"PortValue":36382}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"51afcc99-5452-4a1f-95ec-794362538955","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ebe4df.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"51afcc99-5452-4a1f-95ec-794362538955","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:36382","PortSpecifier":{"PortValue":36382}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368432,"nanos":46773820},"http":{"id":"51afcc99-5452-4a1f-95ec-794362538955","method":"POST","headers":{":authority":"e2e-shared-b-ebe4df.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"51afcc99-5452-4a1f-95ec-794362538955","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"51afcc99-5452-4a1f-95ec-794362538955","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4c5c9b1d-59e4-4c06-9c51-913c43475eb5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b754c299-5a20-40bb-9dad-929c5cb04a96"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14fb9e990410"]}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"51afcc99-5452-4a1f-95ec-794362538955","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14fb9e990410"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b754c299-5a20-40bb-9dad-929c5cb04a96"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4c5c9b1d-59e4-4c06-9c51-913c43475eb5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ebe4df.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"51afcc99-5452-4a1f-95ec-794362538955","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"51afcc99-5452-4a1f-95ec-794362538955","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"51afcc99-5452-4a1f-95ec-794362538955","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ebe4df/auth-test-model-ebe4df\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"51afcc99-5452-4a1f-95ec-794362538955","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"51afcc99-5452-4a1f-95ec-794362538955","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"51afcc99-5452-4a1f-95ec-794362538955","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"51afcc99-5452-4a1f-95ec-794362538955","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"51afcc99-5452-4a1f-95ec-794362538955","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"38274c40-794e-40e1-b243-90ee9214090b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:48182","PortSpecifier":{"PortValue":48182}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"38274c40-794e-40e1-b243-90ee9214090b","method":"GET","path":"/maas-api/v1/api-keys/28bde606-a9ec-43cd-bea6-9aab121108b6","host":"e2e-shared-a-7ba461.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"38274c40-794e-40e1-b243-90ee9214090b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:48182","PortSpecifier":{"PortValue":48182}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368432,"nanos":107733515},"http":{"id":"38274c40-794e-40e1-b243-90ee9214090b","method":"GET","headers":{":authority":"e2e-shared-a-7ba461.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/28bde606-a9ec-43cd-bea6-9aab121108b6",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"38274c40-794e-40e1-b243-90ee9214090b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"38274c40-794e-40e1-b243-90ee9214090b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4c5c9b1d-59e4-4c06-9c51-913c43475eb5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b754c299-5a20-40bb-9dad-929c5cb04a96"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14fb9e990410"]}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"38274c40-794e-40e1-b243-90ee9214090b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14fb9e990410"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b754c299-5a20-40bb-9dad-929c5cb04a96"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4c5c9b1d-59e4-4c06-9c51-913c43475eb5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"63ba19f78e4218c5653c2360fddd3e8569d317384c1dd1baab134db6b08446ca"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7ba461.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/28bde606-a9ec-43cd-bea6-9aab121108b6",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"38274c40-794e-40e1-b243-90ee9214090b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"38274c40-794e-40e1-b243-90ee9214090b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"38274c40-794e-40e1-b243-90ee9214090b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7ba461/auth-test-model-7ba461\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"38274c40-794e-40e1-b243-90ee9214090b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"38274c40-794e-40e1-b243-90ee9214090b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"38274c40-794e-40e1-b243-90ee9214090b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"38274c40-794e-40e1-b243-90ee9214090b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"38274c40-794e-40e1-b243-90ee9214090b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9e4607ee-f92e-4588-a641-f815f1355d86","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:36392","PortSpecifier":{"PortValue":36392}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9e4607ee-f92e-4588-a641-f815f1355d86","method":"GET","path":"/maas-api/v1/api-keys/19e7cfcf-38f4-448b-9a64-5740b32d5498","host":"e2e-shared-b-ebe4df.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9e4607ee-f92e-4588-a641-f815f1355d86","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:36392","PortSpecifier":{"PortValue":36392}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368432,"nanos":142818505},"http":{"id":"9e4607ee-f92e-4588-a641-f815f1355d86","method":"GET","headers":{":authority":"e2e-shared-b-ebe4df.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/19e7cfcf-38f4-448b-9a64-5740b32d5498",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9e4607ee-f92e-4588-a641-f815f1355d86","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9e4607ee-f92e-4588-a641-f815f1355d86","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4c5c9b1d-59e4-4c06-9c51-913c43475eb5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b754c299-5a20-40bb-9dad-929c5cb04a96"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14fb9e990410"]}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9e4607ee-f92e-4588-a641-f815f1355d86","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14fb9e990410"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b754c299-5a20-40bb-9dad-929c5cb04a96"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4c5c9b1d-59e4-4c06-9c51-913c43475eb5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ebe4df.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/19e7cfcf-38f4-448b-9a64-5740b32d5498",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e4607ee-f92e-4588-a641-f815f1355d86","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e4607ee-f92e-4588-a641-f815f1355d86","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e4607ee-f92e-4588-a641-f815f1355d86","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ebe4df/auth-test-model-ebe4df\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9e4607ee-f92e-4588-a641-f815f1355d86","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e4607ee-f92e-4588-a641-f815f1355d86","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e4607ee-f92e-4588-a641-f815f1355d86","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:07:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9e4607ee-f92e-4588-a641-f815f1355d86","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:07:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9e4607ee-f92e-4588-a641-f815f1355d86","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:07:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d0d056e5-9bb2-4fca-b0cd-8ea83e644e0f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:59624","PortSpecifier":{"PortValue":59624}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d0d056e5-9bb2-4fca-b0cd-8ea83e644e0f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-7ba461.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:07:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d0d056e5-9bb2-4fca-b0cd-8ea83e644e0f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:59624","PortSpecifier":{"PortValue":59624}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368449,"nanos":333696624},"http":{"id":"d0d056e5-9bb2-4fca-b0cd-8ea83e644e0f","method":"POST","headers":{":authority":"e2e-shared-a-7ba461.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:07:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d0d056e5-9bb2-4fca-b0cd-8ea83e644e0f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:07:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d0d056e5-9bb2-4fca-b0cd-8ea83e644e0f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4c5c9b1d-59e4-4c06-9c51-913c43475eb5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b754c299-5a20-40bb-9dad-929c5cb04a96"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14fb9e990410"]}}
{"level":"debug","ts":"2026-07-06T20:07:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d0d056e5-9bb2-4fca-b0cd-8ea83e644e0f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14fb9e990410"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b754c299-5a20-40bb-9dad-929c5cb04a96"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4c5c9b1d-59e4-4c06-9c51-913c43475eb5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"63ba19f78e4218c5653c2360fddd3e8569d317384c1dd1baab134db6b08446ca"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7ba461.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:07:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d0d056e5-9bb2-4fca-b0cd-8ea83e644e0f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d0d056e5-9bb2-4fca-b0cd-8ea83e644e0f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d0d056e5-9bb2-4fca-b0cd-8ea83e644e0f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7ba461/auth-test-model-7ba461\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d0d056e5-9bb2-4fca-b0cd-8ea83e644e0f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:07:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d0d056e5-9bb2-4fca-b0cd-8ea83e644e0f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:07:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d0d056e5-9bb2-4fca-b0cd-8ea83e644e0f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:07:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d0d056e5-9bb2-4fca-b0cd-8ea83e644e0f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:07:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d0d056e5-9bb2-4fca-b0cd-8ea83e644e0f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:07:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f597253d-06da-4daa-82f0-192c1c9dacd1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:36540","PortSpecifier":{"PortValue":36540}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f597253d-06da-4daa-82f0-192c1c9dacd1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ebe4df.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:07:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f597253d-06da-4daa-82f0-192c1c9dacd1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:36540","PortSpecifier":{"PortValue":36540}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368449,"nanos":376501192},"http":{"id":"f597253d-06da-4daa-82f0-192c1c9dacd1","method":"POST","headers":{":authority":"e2e-shared-b-ebe4df.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:07:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f597253d-06da-4daa-82f0-192c1c9dacd1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:07:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f597253d-06da-4daa-82f0-192c1c9dacd1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4c5c9b1d-59e4-4c06-9c51-913c43475eb5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b754c299-5a20-40bb-9dad-929c5cb04a96"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14fb9e990410"]}}
{"level":"debug","ts":"2026-07-06T20:07:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f597253d-06da-4daa-82f0-192c1c9dacd1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14fb9e990410"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b754c299-5a20-40bb-9dad-929c5cb04a96"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4c5c9b1d-59e4-4c06-9c51-913c43475eb5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ebe4df.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:07:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f597253d-06da-4daa-82f0-192c1c9dacd1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f597253d-06da-4daa-82f0-192c1c9dacd1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f597253d-06da-4daa-82f0-192c1c9dacd1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ebe4df/auth-test-model-ebe4df\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f597253d-06da-4daa-82f0-192c1c9dacd1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:07:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f597253d-06da-4daa-82f0-192c1c9dacd1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:07:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f597253d-06da-4daa-82f0-192c1c9dacd1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:07:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f597253d-06da-4daa-82f0-192c1c9dacd1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:07:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f597253d-06da-4daa-82f0-192c1c9dacd1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:07:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4c993cf6-0ed8-46c3-9d30-94f1fce40d26","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:59636","PortSpecifier":{"PortValue":59636}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4c993cf6-0ed8-46c3-9d30-94f1fce40d26","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-7ba461.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:07:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4c993cf6-0ed8-46c3-9d30-94f1fce40d26","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:59636","PortSpecifier":{"PortValue":59636}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368449,"nanos":416759443},"http":{"id":"4c993cf6-0ed8-46c3-9d30-94f1fce40d26","method":"GET","headers":{":authority":"e2e-shared-a-7ba461.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:07:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4c993cf6-0ed8-46c3-9d30-94f1fce40d26","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-TGnOXNWazTlstxXI_Wjnwx3MBFFmB95uYOdanaxJmEI0fkmKSo2itXbSQWjG"}
{"level":"debug","ts":"2026-07-06T20:07:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4c993cf6-0ed8-46c3-9d30-94f1fce40d26","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7ba461.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-TGnOXNWazTlstxXI_Wjnwx3MBFFmB95uYOdanaxJmEI0fkmKSo2itXbSQWjG\"}"}
{"level":"debug","ts":"2026-07-06T20:07:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4c993cf6-0ed8-46c3-9d30-94f1fce40d26","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7ba461.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b074ba7d-07e8-4746-90ec-8b63b6972bb6","keyName":"e2e-auth-iso-a-6db9d8","subscription":"e2e-auth-iso-be6ef2","tenant":"e2e-shared-a-7ba461","userId":"b074ba7d-07e8-4746-90ec-8b63b6972bb6","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:07:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4c993cf6-0ed8-46c3-9d30-94f1fce40d26","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:07:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c993cf6-0ed8-46c3-9d30-94f1fce40d26","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c993cf6-0ed8-46c3-9d30-94f1fce40d26","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c993cf6-0ed8-46c3-9d30-94f1fce40d26","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7ba461/auth-test-model-7ba461\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4c993cf6-0ed8-46c3-9d30-94f1fce40d26","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T20:07:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4c993cf6-0ed8-46c3-9d30-94f1fce40d26","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-be6ef2"}
{"level":"debug","ts":"2026-07-06T20:07:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4c993cf6-0ed8-46c3-9d30-94f1fce40d26","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:07:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4c993cf6-0ed8-46c3-9d30-94f1fce40d26","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:07:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4c993cf6-0ed8-46c3-9d30-94f1fce40d26","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:07:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4c993cf6-0ed8-46c3-9d30-94f1fce40d26","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:07:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"54488595-51db-446d-b412-6c899caa8911","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:38250","PortSpecifier":{"PortValue":38250}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"54488595-51db-446d-b412-6c899caa8911","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-7ba461.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:07:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"54488595-51db-446d-b412-6c899caa8911","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:38250","PortSpecifier":{"PortValue":38250}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368464,"nanos":443982919},"http":{"id":"54488595-51db-446d-b412-6c899caa8911","method":"POST","headers":{":authority":"e2e-shared-a-7ba461.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:07:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"54488595-51db-446d-b412-6c899caa8911","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:07:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"54488595-51db-446d-b412-6c899caa8911","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4c5c9b1d-59e4-4c06-9c51-913c43475eb5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b754c299-5a20-40bb-9dad-929c5cb04a96"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14fb9e990410"]}}
{"level":"debug","ts":"2026-07-06T20:07:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"54488595-51db-446d-b412-6c899caa8911","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14fb9e990410"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b754c299-5a20-40bb-9dad-929c5cb04a96"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4c5c9b1d-59e4-4c06-9c51-913c43475eb5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"63ba19f78e4218c5653c2360fddd3e8569d317384c1dd1baab134db6b08446ca"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7ba461.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:07:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54488595-51db-446d-b412-6c899caa8911","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54488595-51db-446d-b412-6c899caa8911","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54488595-51db-446d-b412-6c899caa8911","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7ba461/auth-test-model-7ba461\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"54488595-51db-446d-b412-6c899caa8911","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:07:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"54488595-51db-446d-b412-6c899caa8911","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:07:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"54488595-51db-446d-b412-6c899caa8911","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:07:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"54488595-51db-446d-b412-6c899caa8911","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:07:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"54488595-51db-446d-b412-6c899caa8911","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:07:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e88dd875-34ce-42ba-ba01-dedb8a31a6e9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:50318","PortSpecifier":{"PortValue":50318}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e88dd875-34ce-42ba-ba01-dedb8a31a6e9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ebe4df.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:07:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e88dd875-34ce-42ba-ba01-dedb8a31a6e9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:50318","PortSpecifier":{"PortValue":50318}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368464,"nanos":477502411},"http":{"id":"e88dd875-34ce-42ba-ba01-dedb8a31a6e9","method":"POST","headers":{":authority":"e2e-shared-b-ebe4df.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:07:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e88dd875-34ce-42ba-ba01-dedb8a31a6e9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:07:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e88dd875-34ce-42ba-ba01-dedb8a31a6e9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4c5c9b1d-59e4-4c06-9c51-913c43475eb5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b754c299-5a20-40bb-9dad-929c5cb04a96"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14fb9e990410"]}}
{"level":"debug","ts":"2026-07-06T20:07:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e88dd875-34ce-42ba-ba01-dedb8a31a6e9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14fb9e990410"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b754c299-5a20-40bb-9dad-929c5cb04a96"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4c5c9b1d-59e4-4c06-9c51-913c43475eb5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ebe4df.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:07:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e88dd875-34ce-42ba-ba01-dedb8a31a6e9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e88dd875-34ce-42ba-ba01-dedb8a31a6e9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e88dd875-34ce-42ba-ba01-dedb8a31a6e9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ebe4df/auth-test-model-ebe4df\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e88dd875-34ce-42ba-ba01-dedb8a31a6e9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:07:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e88dd875-34ce-42ba-ba01-dedb8a31a6e9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:07:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e88dd875-34ce-42ba-ba01-dedb8a31a6e9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:07:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e88dd875-34ce-42ba-ba01-dedb8a31a6e9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:07:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e88dd875-34ce-42ba-ba01-dedb8a31a6e9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:07:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"56ec9fdb-71d9-4168-aa03-d93ad217e7b1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:50322","PortSpecifier":{"PortValue":50322}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"56ec9fdb-71d9-4168-aa03-d93ad217e7b1","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-ebe4df.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:07:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"56ec9fdb-71d9-4168-aa03-d93ad217e7b1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:50322","PortSpecifier":{"PortValue":50322}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368464,"nanos":514023684},"http":{"id":"56ec9fdb-71d9-4168-aa03-d93ad217e7b1","method":"GET","headers":{":authority":"e2e-shared-b-ebe4df.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:07:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"56ec9fdb-71d9-4168-aa03-d93ad217e7b1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-QkyloVC3op78peL7_M5JQZJKQwXdooEVPC6viMZsWie6XxRpH6StAR19FNwl"}
{"level":"debug","ts":"2026-07-06T20:07:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"56ec9fdb-71d9-4168-aa03-d93ad217e7b1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-ebe4df.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-QkyloVC3op78peL7_M5JQZJKQwXdooEVPC6viMZsWie6XxRpH6StAR19FNwl\"}"}
{"level":"debug","ts":"2026-07-06T20:07:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"56ec9fdb-71d9-4168-aa03-d93ad217e7b1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-ebe4df.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-06T20:07:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"56ec9fdb-71d9-4168-aa03-d93ad217e7b1","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ebe4df.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:07:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"56ec9fdb-71d9-4168-aa03-d93ad217e7b1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:07:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"56ec9fdb-71d9-4168-aa03-d93ad217e7b1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-06T20:07:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"56ec9fdb-71d9-4168-aa03-d93ad217e7b1","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-06T20:07:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"56ec9fdb-71d9-4168-aa03-d93ad217e7b1","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-06T20:08:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"96773ad9-52eb-4cb3-8de5-4b7abae6b394","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:33486","PortSpecifier":{"PortValue":33486}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"96773ad9-52eb-4cb3-8de5-4b7abae6b394","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-7ba461.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:08:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"96773ad9-52eb-4cb3-8de5-4b7abae6b394","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:33486","PortSpecifier":{"PortValue":33486}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368481,"nanos":634183554},"http":{"id":"96773ad9-52eb-4cb3-8de5-4b7abae6b394","method":"POST","headers":{":authority":"e2e-shared-a-7ba461.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:08:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"96773ad9-52eb-4cb3-8de5-4b7abae6b394","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:08:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"96773ad9-52eb-4cb3-8de5-4b7abae6b394","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4c5c9b1d-59e4-4c06-9c51-913c43475eb5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b754c299-5a20-40bb-9dad-929c5cb04a96"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14fb9e990410"]}}
{"level":"debug","ts":"2026-07-06T20:08:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"96773ad9-52eb-4cb3-8de5-4b7abae6b394","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14fb9e990410"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b754c299-5a20-40bb-9dad-929c5cb04a96"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4c5c9b1d-59e4-4c06-9c51-913c43475eb5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"63ba19f78e4218c5653c2360fddd3e8569d317384c1dd1baab134db6b08446ca"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7ba461.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:08:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96773ad9-52eb-4cb3-8de5-4b7abae6b394","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:08:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96773ad9-52eb-4cb3-8de5-4b7abae6b394","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:08:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96773ad9-52eb-4cb3-8de5-4b7abae6b394","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7ba461/auth-test-model-7ba461\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:08:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"96773ad9-52eb-4cb3-8de5-4b7abae6b394","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:08:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96773ad9-52eb-4cb3-8de5-4b7abae6b394","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:08:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96773ad9-52eb-4cb3-8de5-4b7abae6b394","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T20:08:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"96773ad9-52eb-4cb3-8de5-4b7abae6b394","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:08:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"96773ad9-52eb-4cb3-8de5-4b7abae6b394","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:08:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3736df36-f89b-4dfe-b43f-d985222c9b03","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:55926","PortSpecifier":{"PortValue":55926}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3736df36-f89b-4dfe-b43f-d985222c9b03","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ebe4df.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:08:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3736df36-f89b-4dfe-b43f-d985222c9b03","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:55926","PortSpecifier":{"PortValue":55926}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368481,"nanos":675738015},"http":{"id":"3736df36-f89b-4dfe-b43f-d985222c9b03","method":"POST","headers":{":authority":"e2e-shared-b-ebe4df.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:08:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3736df36-f89b-4dfe-b43f-d985222c9b03","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:08:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3736df36-f89b-4dfe-b43f-d985222c9b03","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4c5c9b1d-59e4-4c06-9c51-913c43475eb5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b754c299-5a20-40bb-9dad-929c5cb04a96"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14fb9e990410"]}}
{"level":"debug","ts":"2026-07-06T20:08:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3736df36-f89b-4dfe-b43f-d985222c9b03","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14fb9e990410"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b754c299-5a20-40bb-9dad-929c5cb04a96"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4c5c9b1d-59e4-4c06-9c51-913c43475eb5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ebe4df.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:08:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3736df36-f89b-4dfe-b43f-d985222c9b03","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:08:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3736df36-f89b-4dfe-b43f-d985222c9b03","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ebe4df/auth-test-model-ebe4df\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:08:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3736df36-f89b-4dfe-b43f-d985222c9b03","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:08:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3736df36-f89b-4dfe-b43f-d985222c9b03","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:08:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3736df36-f89b-4dfe-b43f-d985222c9b03","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:08:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3736df36-f89b-4dfe-b43f-d985222c9b03","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T20:08:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3736df36-f89b-4dfe-b43f-d985222c9b03","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:08:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3736df36-f89b-4dfe-b43f-d985222c9b03","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:08:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5d3ce9c3-b9c6-42de-9e4d-1d546393ccf3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:33490","PortSpecifier":{"PortValue":33490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5d3ce9c3-b9c6-42de-9e4d-1d546393ccf3","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-7ba461.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:08:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5d3ce9c3-b9c6-42de-9e4d-1d546393ccf3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:33490","PortSpecifier":{"PortValue":33490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368481,"nanos":718631153},"http":{"id":"5d3ce9c3-b9c6-42de-9e4d-1d546393ccf3","method":"POST","headers":{":authority":"e2e-shared-a-7ba461.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:08:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5d3ce9c3-b9c6-42de-9e4d-1d546393ccf3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:08:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5d3ce9c3-b9c6-42de-9e4d-1d546393ccf3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4c5c9b1d-59e4-4c06-9c51-913c43475eb5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b754c299-5a20-40bb-9dad-929c5cb04a96"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14fb9e990410"]}}
{"level":"debug","ts":"2026-07-06T20:08:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5d3ce9c3-b9c6-42de-9e4d-1d546393ccf3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14fb9e990410"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b754c299-5a20-40bb-9dad-929c5cb04a96"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4c5c9b1d-59e4-4c06-9c51-913c43475eb5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"63ba19f78e4218c5653c2360fddd3e8569d317384c1dd1baab134db6b08446ca"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7ba461.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:08:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5d3ce9c3-b9c6-42de-9e4d-1d546393ccf3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:08:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5d3ce9c3-b9c6-42de-9e4d-1d546393ccf3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:08:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5d3ce9c3-b9c6-42de-9e4d-1d546393ccf3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7ba461/auth-test-model-7ba461\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:08:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5d3ce9c3-b9c6-42de-9e4d-1d546393ccf3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:08:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5d3ce9c3-b9c6-42de-9e4d-1d546393ccf3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:08:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5d3ce9c3-b9c6-42de-9e4d-1d546393ccf3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:08:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5d3ce9c3-b9c6-42de-9e4d-1d546393ccf3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:08:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5d3ce9c3-b9c6-42de-9e4d-1d546393ccf3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:08:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3b160b90-3a7b-4b84-b21b-696ecea4f06e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:55932","PortSpecifier":{"PortValue":55932}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3b160b90-3a7b-4b84-b21b-696ecea4f06e","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-ebe4df.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:08:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3b160b90-3a7b-4b84-b21b-696ecea4f06e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:55932","PortSpecifier":{"PortValue":55932}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368481,"nanos":755450156},"http":{"id":"3b160b90-3a7b-4b84-b21b-696ecea4f06e","method":"POST","headers":{":authority":"e2e-shared-b-ebe4df.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:08:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3b160b90-3a7b-4b84-b21b-696ecea4f06e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:08:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3b160b90-3a7b-4b84-b21b-696ecea4f06e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4c5c9b1d-59e4-4c06-9c51-913c43475eb5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b754c299-5a20-40bb-9dad-929c5cb04a96"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14fb9e990410"]}}
{"level":"debug","ts":"2026-07-06T20:08:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3b160b90-3a7b-4b84-b21b-696ecea4f06e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14fb9e990410"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b754c299-5a20-40bb-9dad-929c5cb04a96"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4c5c9b1d-59e4-4c06-9c51-913c43475eb5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ebe4df.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:08:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b160b90-3a7b-4b84-b21b-696ecea4f06e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:08:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b160b90-3a7b-4b84-b21b-696ecea4f06e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:08:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b160b90-3a7b-4b84-b21b-696ecea4f06e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ebe4df/auth-test-model-ebe4df\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:08:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3b160b90-3a7b-4b84-b21b-696ecea4f06e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:08:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b160b90-3a7b-4b84-b21b-696ecea4f06e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:08:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b160b90-3a7b-4b84-b21b-696ecea4f06e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T20:08:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3b160b90-3a7b-4b84-b21b-696ecea4f06e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:08:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3b160b90-3a7b-4b84-b21b-696ecea4f06e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:08:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c58af1f2-074a-45bc-81cb-84ab29313c11","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:40276","PortSpecifier":{"PortValue":40276}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c58af1f2-074a-45bc-81cb-84ab29313c11","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-7ba461.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:08:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c58af1f2-074a-45bc-81cb-84ab29313c11","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:40276","PortSpecifier":{"PortValue":40276}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368506,"nanos":696408335},"http":{"id":"c58af1f2-074a-45bc-81cb-84ab29313c11","method":"POST","headers":{":authority":"e2e-shared-a-7ba461.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:08:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c58af1f2-074a-45bc-81cb-84ab29313c11","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:08:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c58af1f2-074a-45bc-81cb-84ab29313c11","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4c5c9b1d-59e4-4c06-9c51-913c43475eb5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b754c299-5a20-40bb-9dad-929c5cb04a96"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14fb9e990410"]}}
{"level":"debug","ts":"2026-07-06T20:08:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c58af1f2-074a-45bc-81cb-84ab29313c11","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14fb9e990410"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b754c299-5a20-40bb-9dad-929c5cb04a96"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4c5c9b1d-59e4-4c06-9c51-913c43475eb5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"63ba19f78e4218c5653c2360fddd3e8569d317384c1dd1baab134db6b08446ca"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7ba461.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:08:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c58af1f2-074a-45bc-81cb-84ab29313c11","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:08:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c58af1f2-074a-45bc-81cb-84ab29313c11","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:08:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c58af1f2-074a-45bc-81cb-84ab29313c11","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7ba461/auth-test-model-7ba461\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:08:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c58af1f2-074a-45bc-81cb-84ab29313c11","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:08:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c58af1f2-074a-45bc-81cb-84ab29313c11","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:08:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c58af1f2-074a-45bc-81cb-84ab29313c11","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:08:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c58af1f2-074a-45bc-81cb-84ab29313c11","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:08:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c58af1f2-074a-45bc-81cb-84ab29313c11","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:08:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"14a24b77-7bec-4e81-a868-a72148b01b0e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:52502","PortSpecifier":{"PortValue":52502}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"14a24b77-7bec-4e81-a868-a72148b01b0e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ebe4df.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:08:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"14a24b77-7bec-4e81-a868-a72148b01b0e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:52502","PortSpecifier":{"PortValue":52502}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368506,"nanos":733176599},"http":{"id":"14a24b77-7bec-4e81-a868-a72148b01b0e","method":"POST","headers":{":authority":"e2e-shared-b-ebe4df.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:08:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"14a24b77-7bec-4e81-a868-a72148b01b0e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:08:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"14a24b77-7bec-4e81-a868-a72148b01b0e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4c5c9b1d-59e4-4c06-9c51-913c43475eb5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b754c299-5a20-40bb-9dad-929c5cb04a96"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14fb9e990410"]}}
{"level":"debug","ts":"2026-07-06T20:08:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"14a24b77-7bec-4e81-a868-a72148b01b0e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14fb9e990410"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b754c299-5a20-40bb-9dad-929c5cb04a96"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4c5c9b1d-59e4-4c06-9c51-913c43475eb5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ebe4df.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:08:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"14a24b77-7bec-4e81-a868-a72148b01b0e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:08:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"14a24b77-7bec-4e81-a868-a72148b01b0e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:08:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"14a24b77-7bec-4e81-a868-a72148b01b0e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ebe4df/auth-test-model-ebe4df\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:08:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"14a24b77-7bec-4e81-a868-a72148b01b0e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:08:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"14a24b77-7bec-4e81-a868-a72148b01b0e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:08:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"14a24b77-7bec-4e81-a868-a72148b01b0e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T20:08:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"14a24b77-7bec-4e81-a868-a72148b01b0e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:08:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"14a24b77-7bec-4e81-a868-a72148b01b0e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:08:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ae7babdc-1b81-4d6f-b87a-07c0e8854bfb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:52518","PortSpecifier":{"PortValue":52518}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ae7babdc-1b81-4d6f-b87a-07c0e8854bfb","method":"GET","path":"/maas-api/v1/api-keys/516aadc8-13a1-40fc-b89d-1bfd6391e947","host":"e2e-shared-b-ebe4df.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:08:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ae7babdc-1b81-4d6f-b87a-07c0e8854bfb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:52518","PortSpecifier":{"PortValue":52518}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368506,"nanos":770326382},"http":{"id":"ae7babdc-1b81-4d6f-b87a-07c0e8854bfb","method":"GET","headers":{":authority":"e2e-shared-b-ebe4df.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/516aadc8-13a1-40fc-b89d-1bfd6391e947",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:08:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ae7babdc-1b81-4d6f-b87a-07c0e8854bfb","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:08:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ae7babdc-1b81-4d6f-b87a-07c0e8854bfb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4c5c9b1d-59e4-4c06-9c51-913c43475eb5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b754c299-5a20-40bb-9dad-929c5cb04a96"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14fb9e990410"]}}
{"level":"debug","ts":"2026-07-06T20:08:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ae7babdc-1b81-4d6f-b87a-07c0e8854bfb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14fb9e990410"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b754c299-5a20-40bb-9dad-929c5cb04a96"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4c5c9b1d-59e4-4c06-9c51-913c43475eb5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ebe4df.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/516aadc8-13a1-40fc-b89d-1bfd6391e947",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:08:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae7babdc-1b81-4d6f-b87a-07c0e8854bfb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:08:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae7babdc-1b81-4d6f-b87a-07c0e8854bfb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:08:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae7babdc-1b81-4d6f-b87a-07c0e8854bfb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ebe4df/auth-test-model-ebe4df\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:08:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ae7babdc-1b81-4d6f-b87a-07c0e8854bfb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:08:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae7babdc-1b81-4d6f-b87a-07c0e8854bfb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:08:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae7babdc-1b81-4d6f-b87a-07c0e8854bfb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T20:08:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ae7babdc-1b81-4d6f-b87a-07c0e8854bfb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:08:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ae7babdc-1b81-4d6f-b87a-07c0e8854bfb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:08:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"feffdfe6-9c31-4ba4-9a30-d61c5308df30","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:40278","PortSpecifier":{"PortValue":40278}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"feffdfe6-9c31-4ba4-9a30-d61c5308df30","method":"GET","path":"/maas-api/v1/api-keys/516aadc8-13a1-40fc-b89d-1bfd6391e947","host":"e2e-shared-a-7ba461.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:08:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"feffdfe6-9c31-4ba4-9a30-d61c5308df30","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:40278","PortSpecifier":{"PortValue":40278}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368506,"nanos":802205995},"http":{"id":"feffdfe6-9c31-4ba4-9a30-d61c5308df30","method":"GET","headers":{":authority":"e2e-shared-a-7ba461.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/516aadc8-13a1-40fc-b89d-1bfd6391e947",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:08:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"feffdfe6-9c31-4ba4-9a30-d61c5308df30","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:08:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"feffdfe6-9c31-4ba4-9a30-d61c5308df30","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4c5c9b1d-59e4-4c06-9c51-913c43475eb5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b754c299-5a20-40bb-9dad-929c5cb04a96"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14fb9e990410"]}}
{"level":"debug","ts":"2026-07-06T20:08:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"feffdfe6-9c31-4ba4-9a30-d61c5308df30","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14fb9e990410"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b754c299-5a20-40bb-9dad-929c5cb04a96"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4c5c9b1d-59e4-4c06-9c51-913c43475eb5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"63ba19f78e4218c5653c2360fddd3e8569d317384c1dd1baab134db6b08446ca"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7ba461.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/516aadc8-13a1-40fc-b89d-1bfd6391e947",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:08:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"feffdfe6-9c31-4ba4-9a30-d61c5308df30","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:08:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"feffdfe6-9c31-4ba4-9a30-d61c5308df30","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:08:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"feffdfe6-9c31-4ba4-9a30-d61c5308df30","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7ba461/auth-test-model-7ba461\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:08:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"feffdfe6-9c31-4ba4-9a30-d61c5308df30","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:08:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"feffdfe6-9c31-4ba4-9a30-d61c5308df30","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:08:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"feffdfe6-9c31-4ba4-9a30-d61c5308df30","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:08:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"feffdfe6-9c31-4ba4-9a30-d61c5308df30","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:08:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"feffdfe6-9c31-4ba4-9a30-d61c5308df30","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:08:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c35f991e-1bee-4796-95cb-bcbc2ee0f29f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:43030","PortSpecifier":{"PortValue":43030}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c35f991e-1bee-4796-95cb-bcbc2ee0f29f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-7ba461.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:08:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c35f991e-1bee-4796-95cb-bcbc2ee0f29f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:43030","PortSpecifier":{"PortValue":43030}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368523,"nanos":864028483},"http":{"id":"c35f991e-1bee-4796-95cb-bcbc2ee0f29f","method":"POST","headers":{":authority":"e2e-shared-a-7ba461.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:08:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c35f991e-1bee-4796-95cb-bcbc2ee0f29f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:08:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c35f991e-1bee-4796-95cb-bcbc2ee0f29f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4c5c9b1d-59e4-4c06-9c51-913c43475eb5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b754c299-5a20-40bb-9dad-929c5cb04a96"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14fb9e990410"]}}
{"level":"debug","ts":"2026-07-06T20:08:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c35f991e-1bee-4796-95cb-bcbc2ee0f29f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14fb9e990410"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b754c299-5a20-40bb-9dad-929c5cb04a96"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4c5c9b1d-59e4-4c06-9c51-913c43475eb5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"63ba19f78e4218c5653c2360fddd3e8569d317384c1dd1baab134db6b08446ca"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7ba461.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:08:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c35f991e-1bee-4796-95cb-bcbc2ee0f29f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:08:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c35f991e-1bee-4796-95cb-bcbc2ee0f29f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:08:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c35f991e-1bee-4796-95cb-bcbc2ee0f29f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7ba461/auth-test-model-7ba461\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:08:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c35f991e-1bee-4796-95cb-bcbc2ee0f29f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:08:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c35f991e-1bee-4796-95cb-bcbc2ee0f29f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:08:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c35f991e-1bee-4796-95cb-bcbc2ee0f29f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:08:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c35f991e-1bee-4796-95cb-bcbc2ee0f29f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:08:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c35f991e-1bee-4796-95cb-bcbc2ee0f29f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:08:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"19d40919-d33d-497a-a80d-dd44962f96cd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:58216","PortSpecifier":{"PortValue":58216}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"19d40919-d33d-497a-a80d-dd44962f96cd","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ebe4df.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:08:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"19d40919-d33d-497a-a80d-dd44962f96cd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:58216","PortSpecifier":{"PortValue":58216}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368523,"nanos":901327743},"http":{"id":"19d40919-d33d-497a-a80d-dd44962f96cd","method":"POST","headers":{":authority":"e2e-shared-b-ebe4df.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:08:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"19d40919-d33d-497a-a80d-dd44962f96cd","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:08:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"19d40919-d33d-497a-a80d-dd44962f96cd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4c5c9b1d-59e4-4c06-9c51-913c43475eb5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b754c299-5a20-40bb-9dad-929c5cb04a96"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14fb9e990410"]}}
{"level":"debug","ts":"2026-07-06T20:08:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"19d40919-d33d-497a-a80d-dd44962f96cd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14fb9e990410"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b754c299-5a20-40bb-9dad-929c5cb04a96"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4c5c9b1d-59e4-4c06-9c51-913c43475eb5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ebe4df.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:08:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"19d40919-d33d-497a-a80d-dd44962f96cd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:08:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"19d40919-d33d-497a-a80d-dd44962f96cd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:08:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"19d40919-d33d-497a-a80d-dd44962f96cd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ebe4df/auth-test-model-ebe4df\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:08:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"19d40919-d33d-497a-a80d-dd44962f96cd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:08:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"19d40919-d33d-497a-a80d-dd44962f96cd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:08:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"19d40919-d33d-497a-a80d-dd44962f96cd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T20:08:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"19d40919-d33d-497a-a80d-dd44962f96cd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:08:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"19d40919-d33d-497a-a80d-dd44962f96cd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:08:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9dccd693-69c0-4822-86f8-e5ecd495a823","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:43032","PortSpecifier":{"PortValue":43032}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9dccd693-69c0-4822-86f8-e5ecd495a823","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-7ba461.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:08:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9dccd693-69c0-4822-86f8-e5ecd495a823","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:43032","PortSpecifier":{"PortValue":43032}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368523,"nanos":935450825},"http":{"id":"9dccd693-69c0-4822-86f8-e5ecd495a823","method":"POST","headers":{":authority":"e2e-shared-a-7ba461.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:08:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9dccd693-69c0-4822-86f8-e5ecd495a823","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-gpmJeYS2pYMOH7pW_jbErEoHRAPPnMNeLXt7bZNGMFNhhLlgIjyvIpW155fa"}
{"level":"debug","ts":"2026-07-06T20:08:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9dccd693-69c0-4822-86f8-e5ecd495a823","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7ba461.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-gpmJeYS2pYMOH7pW_jbErEoHRAPPnMNeLXt7bZNGMFNhhLlgIjyvIpW155fa\"}"}
{"level":"debug","ts":"2026-07-06T20:08:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9dccd693-69c0-4822-86f8-e5ecd495a823","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7ba461.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d01758aa-46c9-47e7-a10c-5def1bf4f7fe","keyName":"e2e-auth-iso-a-b59d02","subscription":"e2e-auth-iso-be3f13","tenant":"e2e-shared-a-7ba461","userId":"d01758aa-46c9-47e7-a10c-5def1bf4f7fe","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:08:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9dccd693-69c0-4822-86f8-e5ecd495a823","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:08:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9dccd693-69c0-4822-86f8-e5ecd495a823","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:08:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9dccd693-69c0-4822-86f8-e5ecd495a823","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:08:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9dccd693-69c0-4822-86f8-e5ecd495a823","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7ba461/auth-test-model-7ba461\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:08:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9dccd693-69c0-4822-86f8-e5ecd495a823","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T20:08:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9dccd693-69c0-4822-86f8-e5ecd495a823","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-be3f13"}
{"level":"debug","ts":"2026-07-06T20:08:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9dccd693-69c0-4822-86f8-e5ecd495a823","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:08:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9dccd693-69c0-4822-86f8-e5ecd495a823","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:08:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9dccd693-69c0-4822-86f8-e5ecd495a823","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:08:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9dccd693-69c0-4822-86f8-e5ecd495a823","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eef94982c756d9c2034e8e02b7fec16519ab4b52f30430eda15e8f98ec6f95ad"}
{"level":"info","ts":"2026-07-06T20:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/777c153fbdb3b785d7ebffee0dde9664ef13aee0c2904afb832467102b23ebe6"}
{"level":"info","ts":"2026-07-06T20:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a995fe0cf8b9fd1f3a1814f93918a8b35c3662d1f0bb6d059c6367c156ad2149"}
{"level":"info","ts":"2026-07-06T20:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6db66237446c263c75582ff3755bf9504707243fb92f9a7eaeb0212e5c4749f1"}
{"level":"info","ts":"2026-07-06T20:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5c9922e735ae2cabd45db5ac5e84057450465dc85e177432db78a9903ad6dddd"}
{"level":"info","ts":"2026-07-06T20:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/44b95e13c57a4d22fd839fb7a9480bbd10d2813dd59d7849a057c280f7265d2c"}
{"level":"info","ts":"2026-07-06T20:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3e39ee9eaa493b814f929a327e6a64086557f7057e50cbc867a58076091429a4"}
{"level":"info","ts":"2026-07-06T20:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/89c05426b04449c77c01b4d844e5c25c6f1e85a2cf5f30b0e2141358ffc7891f"}
{"level":"info","ts":"2026-07-06T20:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/320f5df9448dfffabb7bb7e7cd64df72a1dcc799b62187d6c974b4891a26d7e3"}
{"level":"info","ts":"2026-07-06T20:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/89c3586bcb3a6dd227451f2ca0fce9a1c8ec5d44543af7eb26d04a9bde2ae41c"}
{"level":"info","ts":"2026-07-06T20:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d98f2d2ce6b6d6e2ac8876e1a760adfecf96ac7301bd6946fa689599fc912243"}
{"level":"info","ts":"2026-07-06T20:08:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5403724ff185c3ddf552cdf0b402b12e82f2da8c094b6fb656884795409c438f"}
{"level":"info","ts":"2026-07-06T20:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6b3305c0bb47cb19ad842d5d9b9bcf814da86573dd81d79a3081793bc6d7fe9e"}
{"level":"info","ts":"2026-07-06T20:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c8f907d3ffe38c35729b7da2db968fbb47c9cbca11eeb383ea98d5c5541f0626"}
{"level":"info","ts":"2026-07-06T20:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/431c537a44e87ae8a5e372e396746144c4c62c3a0743ccba0790190cd12ee461"}
{"level":"info","ts":"2026-07-06T20:08:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/557c4218a1db88e526b953323cac54b4acb23ea3c96dbb2f67729ae788086e8e"}
{"level":"debug","ts":"2026-07-06T20:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3"}
{"level":"debug","ts":"2026-07-06T20:09:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3"}
{"level":"debug","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3"}
{"level":"debug","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3"}
{"level":"debug","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3"}
{"level":"debug","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3"}
{"level":"debug","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3"}
{"level":"debug","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3"}
{"level":"debug","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"406f6057d6216dc1a4bb9fb1a927208accf37327252fb6a155d13fa1ce2391aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3"}
{"level":"info","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"406f6057d6216dc1a4bb9fb1a927208accf37327252fb6a155d13fa1ce2391aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/406f6057d6216dc1a4bb9fb1a927208accf37327252fb6a155d13fa1ce2391aa"}
{"level":"info","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"406f6057d6216dc1a4bb9fb1a927208accf37327252fb6a155d13fa1ce2391aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["406f6057d6216dc1a4bb9fb1a927208accf37327252fb6a155d13fa1ce2391aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"406f6057d6216dc1a4bb9fb1a927208accf37327252fb6a155d13fa1ce2391aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3"}
{"level":"info","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"406f6057d6216dc1a4bb9fb1a927208accf37327252fb6a155d13fa1ce2391aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/406f6057d6216dc1a4bb9fb1a927208accf37327252fb6a155d13fa1ce2391aa"}
{"level":"info","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"406f6057d6216dc1a4bb9fb1a927208accf37327252fb6a155d13fa1ce2391aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"406f6057d6216dc1a4bb9fb1a927208accf37327252fb6a155d13fa1ce2391aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["406f6057d6216dc1a4bb9fb1a927208accf37327252fb6a155d13fa1ce2391aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3"}
{"level":"info","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"406f6057d6216dc1a4bb9fb1a927208accf37327252fb6a155d13fa1ce2391aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"406f6057d6216dc1a4bb9fb1a927208accf37327252fb6a155d13fa1ce2391aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/406f6057d6216dc1a4bb9fb1a927208accf37327252fb6a155d13fa1ce2391aa"}
{"level":"info","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"406f6057d6216dc1a4bb9fb1a927208accf37327252fb6a155d13fa1ce2391aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3"}
{"level":"info","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"406f6057d6216dc1a4bb9fb1a927208accf37327252fb6a155d13fa1ce2391aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/406f6057d6216dc1a4bb9fb1a927208accf37327252fb6a155d13fa1ce2391aa"}
{"level":"info","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"406f6057d6216dc1a4bb9fb1a927208accf37327252fb6a155d13fa1ce2391aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["406f6057d6216dc1a4bb9fb1a927208accf37327252fb6a155d13fa1ce2391aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3"}
{"level":"info","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"406f6057d6216dc1a4bb9fb1a927208accf37327252fb6a155d13fa1ce2391aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"406f6057d6216dc1a4bb9fb1a927208accf37327252fb6a155d13fa1ce2391aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3"}
{"level":"debug","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1cb25bf4ba0356155154743a22244a49cb63d3b820567a99767813c6d2eb88e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1cb25bf4ba0356155154743a22244a49cb63d3b820567a99767813c6d2eb88e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/406f6057d6216dc1a4bb9fb1a927208accf37327252fb6a155d13fa1ce2391aa"}
{"level":"info","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1cb25bf4ba0356155154743a22244a49cb63d3b820567a99767813c6d2eb88e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3"}
{"level":"info","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1cb25bf4ba0356155154743a22244a49cb63d3b820567a99767813c6d2eb88e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1cb25bf4ba0356155154743a22244a49cb63d3b820567a99767813c6d2eb88e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1cb25bf4ba0356155154743a22244a49cb63d3b820567a99767813c6d2eb88e"}
{"level":"info","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1cb25bf4ba0356155154743a22244a49cb63d3b820567a99767813c6d2eb88e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1cb25bf4ba0356155154743a22244a49cb63d3b820567a99767813c6d2eb88e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3"}
{"level":"info","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1cb25bf4ba0356155154743a22244a49cb63d3b820567a99767813c6d2eb88e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1cb25bf4ba0356155154743a22244a49cb63d3b820567a99767813c6d2eb88e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1cb25bf4ba0356155154743a22244a49cb63d3b820567a99767813c6d2eb88e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1cb25bf4ba0356155154743a22244a49cb63d3b820567a99767813c6d2eb88e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2cfcaf84541942a9c9e0c1e4d680360886a63a83302bad6a86e16ccf7be9a162","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1cb25bf4ba0356155154743a22244a49cb63d3b820567a99767813c6d2eb88e"}
{"level":"info","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2cfcaf84541942a9c9e0c1e4d680360886a63a83302bad6a86e16ccf7be9a162","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1cb25bf4ba0356155154743a22244a49cb63d3b820567a99767813c6d2eb88e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1cb25bf4ba0356155154743a22244a49cb63d3b820567a99767813c6d2eb88e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3"}
{"level":"info","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1cb25bf4ba0356155154743a22244a49cb63d3b820567a99767813c6d2eb88e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2cfcaf84541942a9c9e0c1e4d680360886a63a83302bad6a86e16ccf7be9a162","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2cfcaf84541942a9c9e0c1e4d680360886a63a83302bad6a86e16ccf7be9a162","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1cb25bf4ba0356155154743a22244a49cb63d3b820567a99767813c6d2eb88e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2cfcaf84541942a9c9e0c1e4d680360886a63a83302bad6a86e16ccf7be9a162","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2cfcaf84541942a9c9e0c1e4d680360886a63a83302bad6a86e16ccf7be9a162"}
{"level":"debug","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2cfcaf84541942a9c9e0c1e4d680360886a63a83302bad6a86e16ccf7be9a162","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2cfcaf84541942a9c9e0c1e4d680360886a63a83302bad6a86e16ccf7be9a162"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1cb25bf4ba0356155154743a22244a49cb63d3b820567a99767813c6d2eb88e"}
{"level":"info","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2cfcaf84541942a9c9e0c1e4d680360886a63a83302bad6a86e16ccf7be9a162","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2cfcaf84541942a9c9e0c1e4d680360886a63a83302bad6a86e16ccf7be9a162","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2cfcaf84541942a9c9e0c1e4d680360886a63a83302bad6a86e16ccf7be9a162","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2cfcaf84541942a9c9e0c1e4d680360886a63a83302bad6a86e16ccf7be9a162","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2cfcaf84541942a9c9e0c1e4d680360886a63a83302bad6a86e16ccf7be9a162"}
{"level":"debug","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2cfcaf84541942a9c9e0c1e4d680360886a63a83302bad6a86e16ccf7be9a162","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2cfcaf84541942a9c9e0c1e4d680360886a63a83302bad6a86e16ccf7be9a162"}
{"level":"debug","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2cfcaf84541942a9c9e0c1e4d680360886a63a83302bad6a86e16ccf7be9a162","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2cfcaf84541942a9c9e0c1e4d680360886a63a83302bad6a86e16ccf7be9a162"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2cfcaf84541942a9c9e0c1e4d680360886a63a83302bad6a86e16ccf7be9a162","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2cfcaf84541942a9c9e0c1e4d680360886a63a83302bad6a86e16ccf7be9a162","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2cfcaf84541942a9c9e0c1e4d680360886a63a83302bad6a86e16ccf7be9a162"}
{"level":"debug","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81"}
{"level":"debug","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81"}
{"level":"debug","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81"}
{"level":"debug","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81"}
{"level":"debug","ts":"2026-07-06T20:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae8920577a4f7673ac7fa7f283fc87a9b14d65dca8c6c87cc7c2c350cab039a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae8920577a4f7673ac7fa7f283fc87a9b14d65dca8c6c87cc7c2c350cab039a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae8920577a4f7673ac7fa7f283fc87a9b14d65dca8c6c87cc7c2c350cab039a2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae8920577a4f7673ac7fa7f283fc87a9b14d65dca8c6c87cc7c2c350cab039a2"}
{"level":"debug","ts":"2026-07-06T20:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae8920577a4f7673ac7fa7f283fc87a9b14d65dca8c6c87cc7c2c350cab039a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae8920577a4f7673ac7fa7f283fc87a9b14d65dca8c6c87cc7c2c350cab039a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae8920577a4f7673ac7fa7f283fc87a9b14d65dca8c6c87cc7c2c350cab039a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae8920577a4f7673ac7fa7f283fc87a9b14d65dca8c6c87cc7c2c350cab039a2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81"}
{"level":"info","ts":"2026-07-06T20:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae8920577a4f7673ac7fa7f283fc87a9b14d65dca8c6c87cc7c2c350cab039a2"}
{"level":"debug","ts":"2026-07-06T20:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7ab0a4343645c2039687df03b8dc513224d5039127d2cb8533d131db17b4a6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7ab0a4343645c2039687df03b8dc513224d5039127d2cb8533d131db17b4a6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7ab0a4343645c2039687df03b8dc513224d5039127d2cb8533d131db17b4a6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7ab0a4343645c2039687df03b8dc513224d5039127d2cb8533d131db17b4a6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7ab0a4343645c2039687df03b8dc513224d5039127d2cb8533d131db17b4a6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7ab0a4343645c2039687df03b8dc513224d5039127d2cb8533d131db17b4a6d"}
{"level":"error","ts":"2026-07-06T20:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a7ab0a4343645c2039687df03b8dc513224d5039127d2cb8533d131db17b4a6d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a7ab0a4343645c2039687df03b8dc513224d5039127d2cb8533d131db17b4a6d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7ab0a4343645c2039687df03b8dc513224d5039127d2cb8533d131db17b4a6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7ab0a4343645c2039687df03b8dc513224d5039127d2cb8533d131db17b4a6d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7ab0a4343645c2039687df03b8dc513224d5039127d2cb8533d131db17b4a6d"}
{"level":"debug","ts":"2026-07-06T20:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cca51b234255b64c840ca9074e859a15aac3cef89669151268395f4838fac49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cca51b234255b64c840ca9074e859a15aac3cef89669151268395f4838fac49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cca51b234255b64c840ca9074e859a15aac3cef89669151268395f4838fac49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cca51b234255b64c840ca9074e859a15aac3cef89669151268395f4838fac49","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cca51b234255b64c840ca9074e859a15aac3cef89669151268395f4838fac49"}
{"level":"debug","ts":"2026-07-06T20:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7ab0a4343645c2039687df03b8dc513224d5039127d2cb8533d131db17b4a6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7ab0a4343645c2039687df03b8dc513224d5039127d2cb8533d131db17b4a6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7ab0a4343645c2039687df03b8dc513224d5039127d2cb8533d131db17b4a6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7ab0a4343645c2039687df03b8dc513224d5039127d2cb8533d131db17b4a6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cca51b234255b64c840ca9074e859a15aac3cef89669151268395f4838fac49","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cca51b234255b64c840ca9074e859a15aac3cef89669151268395f4838fac49"}
{"level":"info","ts":"2026-07-06T20:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7ab0a4343645c2039687df03b8dc513224d5039127d2cb8533d131db17b4a6d"}
{"level":"debug","ts":"2026-07-06T20:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cca51b234255b64c840ca9074e859a15aac3cef89669151268395f4838fac49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5cca51b234255b64c840ca9074e859a15aac3cef89669151268395f4838fac49"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cca51b234255b64c840ca9074e859a15aac3cef89669151268395f4838fac49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cca51b234255b64c840ca9074e859a15aac3cef89669151268395f4838fac49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cca51b234255b64c840ca9074e859a15aac3cef89669151268395f4838fac49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cca51b234255b64c840ca9074e859a15aac3cef89669151268395f4838fac49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cca51b234255b64c840ca9074e859a15aac3cef89669151268395f4838fac49","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cca51b234255b64c840ca9074e859a15aac3cef89669151268395f4838fac49"}
{"level":"debug","ts":"2026-07-06T20:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cca51b234255b64c840ca9074e859a15aac3cef89669151268395f4838fac49","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cca51b234255b64c840ca9074e859a15aac3cef89669151268395f4838fac49"}
{"level":"debug","ts":"2026-07-06T20:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cca51b234255b64c840ca9074e859a15aac3cef89669151268395f4838fac49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5cca51b234255b64c840ca9074e859a15aac3cef89669151268395f4838fac49"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cca51b234255b64c840ca9074e859a15aac3cef89669151268395f4838fac49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cca51b234255b64c840ca9074e859a15aac3cef89669151268395f4838fac49","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cca51b234255b64c840ca9074e859a15aac3cef89669151268395f4838fac49"}
{"level":"debug","ts":"2026-07-06T20:09:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a739902d04841ae07ab6dca46b29de2bc4cf68ba714ee6d21cceab31d2d7b7d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a739902d04841ae07ab6dca46b29de2bc4cf68ba714ee6d21cceab31d2d7b7d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a739902d04841ae07ab6dca46b29de2bc4cf68ba714ee6d21cceab31d2d7b7d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a739902d04841ae07ab6dca46b29de2bc4cf68ba714ee6d21cceab31d2d7b7d5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a739902d04841ae07ab6dca46b29de2bc4cf68ba714ee6d21cceab31d2d7b7d5"}
{"level":"debug","ts":"2026-07-06T20:09:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a739902d04841ae07ab6dca46b29de2bc4cf68ba714ee6d21cceab31d2d7b7d5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a739902d04841ae07ab6dca46b29de2bc4cf68ba714ee6d21cceab31d2d7b7d5"}
{"level":"debug","ts":"2026-07-06T20:09:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a739902d04841ae07ab6dca46b29de2bc4cf68ba714ee6d21cceab31d2d7b7d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a739902d04841ae07ab6dca46b29de2bc4cf68ba714ee6d21cceab31d2d7b7d5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a739902d04841ae07ab6dca46b29de2bc4cf68ba714ee6d21cceab31d2d7b7d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a739902d04841ae07ab6dca46b29de2bc4cf68ba714ee6d21cceab31d2d7b7d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a739902d04841ae07ab6dca46b29de2bc4cf68ba714ee6d21cceab31d2d7b7d5"}
{"level":"info","ts":"2026-07-06T20:09:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a739902d04841ae07ab6dca46b29de2bc4cf68ba714ee6d21cceab31d2d7b7d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a739902d04841ae07ab6dca46b29de2bc4cf68ba714ee6d21cceab31d2d7b7d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a739902d04841ae07ab6dca46b29de2bc4cf68ba714ee6d21cceab31d2d7b7d5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a739902d04841ae07ab6dca46b29de2bc4cf68ba714ee6d21cceab31d2d7b7d5"}
{"level":"info","ts":"2026-07-06T20:09:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a739902d04841ae07ab6dca46b29de2bc4cf68ba714ee6d21cceab31d2d7b7d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a739902d04841ae07ab6dca46b29de2bc4cf68ba714ee6d21cceab31d2d7b7d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a739902d04841ae07ab6dca46b29de2bc4cf68ba714ee6d21cceab31d2d7b7d5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T20:09:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a739902d04841ae07ab6dca46b29de2bc4cf68ba714ee6d21cceab31d2d7b7d5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a739902d04841ae07ab6dca46b29de2bc4cf68ba714ee6d21cceab31d2d7b7d5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:09:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a739902d04841ae07ab6dca46b29de2bc4cf68ba714ee6d21cceab31d2d7b7d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a739902d04841ae07ab6dca46b29de2bc4cf68ba714ee6d21cceab31d2d7b7d5"}
{"level":"info","ts":"2026-07-06T20:09:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a739902d04841ae07ab6dca46b29de2bc4cf68ba714ee6d21cceab31d2d7b7d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a739902d04841ae07ab6dca46b29de2bc4cf68ba714ee6d21cceab31d2d7b7d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a739902d04841ae07ab6dca46b29de2bc4cf68ba714ee6d21cceab31d2d7b7d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a739902d04841ae07ab6dca46b29de2bc4cf68ba714ee6d21cceab31d2d7b7d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a739902d04841ae07ab6dca46b29de2bc4cf68ba714ee6d21cceab31d2d7b7d5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a739902d04841ae07ab6dca46b29de2bc4cf68ba714ee6d21cceab31d2d7b7d5"}
{"level":"debug","ts":"2026-07-06T20:09:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a739902d04841ae07ab6dca46b29de2bc4cf68ba714ee6d21cceab31d2d7b7d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a739902d04841ae07ab6dca46b29de2bc4cf68ba714ee6d21cceab31d2d7b7d5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a739902d04841ae07ab6dca46b29de2bc4cf68ba714ee6d21cceab31d2d7b7d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a739902d04841ae07ab6dca46b29de2bc4cf68ba714ee6d21cceab31d2d7b7d5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a739902d04841ae07ab6dca46b29de2bc4cf68ba714ee6d21cceab31d2d7b7d5"}
{"level":"debug","ts":"2026-07-06T20:09:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31270d31cd7ab12555b1b17bc015dee4c0565b9854bf8d4abd8126b9ea0092a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31270d31cd7ab12555b1b17bc015dee4c0565b9854bf8d4abd8126b9ea0092a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31270d31cd7ab12555b1b17bc015dee4c0565b9854bf8d4abd8126b9ea0092a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31270d31cd7ab12555b1b17bc015dee4c0565b9854bf8d4abd8126b9ea0092a7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31270d31cd7ab12555b1b17bc015dee4c0565b9854bf8d4abd8126b9ea0092a7"}
{"level":"debug","ts":"2026-07-06T20:09:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31270d31cd7ab12555b1b17bc015dee4c0565b9854bf8d4abd8126b9ea0092a7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31270d31cd7ab12555b1b17bc015dee4c0565b9854bf8d4abd8126b9ea0092a7"}
{"level":"debug","ts":"2026-07-06T20:09:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31270d31cd7ab12555b1b17bc015dee4c0565b9854bf8d4abd8126b9ea0092a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31270d31cd7ab12555b1b17bc015dee4c0565b9854bf8d4abd8126b9ea0092a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31270d31cd7ab12555b1b17bc015dee4c0565b9854bf8d4abd8126b9ea0092a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31270d31cd7ab12555b1b17bc015dee4c0565b9854bf8d4abd8126b9ea0092a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31270d31cd7ab12555b1b17bc015dee4c0565b9854bf8d4abd8126b9ea0092a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31270d31cd7ab12555b1b17bc015dee4c0565b9854bf8d4abd8126b9ea0092a7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31270d31cd7ab12555b1b17bc015dee4c0565b9854bf8d4abd8126b9ea0092a7"}
{"level":"debug","ts":"2026-07-06T20:09:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31270d31cd7ab12555b1b17bc015dee4c0565b9854bf8d4abd8126b9ea0092a7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31270d31cd7ab12555b1b17bc015dee4c0565b9854bf8d4abd8126b9ea0092a7"}
{"level":"debug","ts":"2026-07-06T20:09:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31270d31cd7ab12555b1b17bc015dee4c0565b9854bf8d4abd8126b9ea0092a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31270d31cd7ab12555b1b17bc015dee4c0565b9854bf8d4abd8126b9ea0092a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31270d31cd7ab12555b1b17bc015dee4c0565b9854bf8d4abd8126b9ea0092a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31270d31cd7ab12555b1b17bc015dee4c0565b9854bf8d4abd8126b9ea0092a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31270d31cd7ab12555b1b17bc015dee4c0565b9854bf8d4abd8126b9ea0092a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31270d31cd7ab12555b1b17bc015dee4c0565b9854bf8d4abd8126b9ea0092a7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31270d31cd7ab12555b1b17bc015dee4c0565b9854bf8d4abd8126b9ea0092a7"}
{"level":"debug","ts":"2026-07-06T20:09:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31270d31cd7ab12555b1b17bc015dee4c0565b9854bf8d4abd8126b9ea0092a7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31270d31cd7ab12555b1b17bc015dee4c0565b9854bf8d4abd8126b9ea0092a7"}
{"level":"debug","ts":"2026-07-06T20:09:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31270d31cd7ab12555b1b17bc015dee4c0565b9854bf8d4abd8126b9ea0092a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31270d31cd7ab12555b1b17bc015dee4c0565b9854bf8d4abd8126b9ea0092a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31270d31cd7ab12555b1b17bc015dee4c0565b9854bf8d4abd8126b9ea0092a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e691a4020aa1f9550285f6f856c61ddc78c03893fe8503645082d70d3e747a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e691a4020aa1f9550285f6f856c61ddc78c03893fe8503645082d70d3e747a8"}
{"level":"info","ts":"2026-07-06T20:09:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e691a4020aa1f9550285f6f856c61ddc78c03893fe8503645082d70d3e747a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31270d31cd7ab12555b1b17bc015dee4c0565b9854bf8d4abd8126b9ea0092a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31270d31cd7ab12555b1b17bc015dee4c0565b9854bf8d4abd8126b9ea0092a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e691a4020aa1f9550285f6f856c61ddc78c03893fe8503645082d70d3e747a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e691a4020aa1f9550285f6f856c61ddc78c03893fe8503645082d70d3e747a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31270d31cd7ab12555b1b17bc015dee4c0565b9854bf8d4abd8126b9ea0092a7"}
{"level":"info","ts":"2026-07-06T20:09:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e691a4020aa1f9550285f6f856c61ddc78c03893fe8503645082d70d3e747a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31270d31cd7ab12555b1b17bc015dee4c0565b9854bf8d4abd8126b9ea0092a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31270d31cd7ab12555b1b17bc015dee4c0565b9854bf8d4abd8126b9ea0092a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e691a4020aa1f9550285f6f856c61ddc78c03893fe8503645082d70d3e747a8"}
{"level":"info","ts":"2026-07-06T20:09:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31270d31cd7ab12555b1b17bc015dee4c0565b9854bf8d4abd8126b9ea0092a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e691a4020aa1f9550285f6f856c61ddc78c03893fe8503645082d70d3e747a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31270d31cd7ab12555b1b17bc015dee4c0565b9854bf8d4abd8126b9ea0092a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31270d31cd7ab12555b1b17bc015dee4c0565b9854bf8d4abd8126b9ea0092a7"}
{"level":"info","ts":"2026-07-06T20:09:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31270d31cd7ab12555b1b17bc015dee4c0565b9854bf8d4abd8126b9ea0092a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31270d31cd7ab12555b1b17bc015dee4c0565b9854bf8d4abd8126b9ea0092a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31270d31cd7ab12555b1b17bc015dee4c0565b9854bf8d4abd8126b9ea0092a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31270d31cd7ab12555b1b17bc015dee4c0565b9854bf8d4abd8126b9ea0092a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31270d31cd7ab12555b1b17bc015dee4c0565b9854bf8d4abd8126b9ea0092a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31270d31cd7ab12555b1b17bc015dee4c0565b9854bf8d4abd8126b9ea0092a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e691a4020aa1f9550285f6f856c61ddc78c03893fe8503645082d70d3e747a8"}
{"level":"error","ts":"2026-07-06T20:09:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"31270d31cd7ab12555b1b17bc015dee4c0565b9854bf8d4abd8126b9ea0092a7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"31270d31cd7ab12555b1b17bc015dee4c0565b9854bf8d4abd8126b9ea0092a7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:09:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31270d31cd7ab12555b1b17bc015dee4c0565b9854bf8d4abd8126b9ea0092a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31270d31cd7ab12555b1b17bc015dee4c0565b9854bf8d4abd8126b9ea0092a7"}
{"level":"info","ts":"2026-07-06T20:09:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31270d31cd7ab12555b1b17bc015dee4c0565b9854bf8d4abd8126b9ea0092a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31270d31cd7ab12555b1b17bc015dee4c0565b9854bf8d4abd8126b9ea0092a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31270d31cd7ab12555b1b17bc015dee4c0565b9854bf8d4abd8126b9ea0092a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31270d31cd7ab12555b1b17bc015dee4c0565b9854bf8d4abd8126b9ea0092a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31270d31cd7ab12555b1b17bc015dee4c0565b9854bf8d4abd8126b9ea0092a7"}
{"level":"info","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31270d31cd7ab12555b1b17bc015dee4c0565b9854bf8d4abd8126b9ea0092a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31270d31cd7ab12555b1b17bc015dee4c0565b9854bf8d4abd8126b9ea0092a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31270d31cd7ab12555b1b17bc015dee4c0565b9854bf8d4abd8126b9ea0092a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"31270d31cd7ab12555b1b17bc015dee4c0565b9854bf8d4abd8126b9ea0092a7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"31270d31cd7ab12555b1b17bc015dee4c0565b9854bf8d4abd8126b9ea0092a7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31270d31cd7ab12555b1b17bc015dee4c0565b9854bf8d4abd8126b9ea0092a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31270d31cd7ab12555b1b17bc015dee4c0565b9854bf8d4abd8126b9ea0092a7"}
{"level":"info","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31270d31cd7ab12555b1b17bc015dee4c0565b9854bf8d4abd8126b9ea0092a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31270d31cd7ab12555b1b17bc015dee4c0565b9854bf8d4abd8126b9ea0092a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31270d31cd7ab12555b1b17bc015dee4c0565b9854bf8d4abd8126b9ea0092a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19d0c1c4d280799bbc6e9b8cc78ab502fd51a725c6527af2a653db9d11b5f7cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19d0c1c4d280799bbc6e9b8cc78ab502fd51a725c6527af2a653db9d11b5f7cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31270d31cd7ab12555b1b17bc015dee4c0565b9854bf8d4abd8126b9ea0092a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19d0c1c4d280799bbc6e9b8cc78ab502fd51a725c6527af2a653db9d11b5f7cb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31270d31cd7ab12555b1b17bc015dee4c0565b9854bf8d4abd8126b9ea0092a7"}
{"level":"debug","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19d0c1c4d280799bbc6e9b8cc78ab502fd51a725c6527af2a653db9d11b5f7cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19d0c1c4d280799bbc6e9b8cc78ab502fd51a725c6527af2a653db9d11b5f7cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31270d31cd7ab12555b1b17bc015dee4c0565b9854bf8d4abd8126b9ea0092a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31270d31cd7ab12555b1b17bc015dee4c0565b9854bf8d4abd8126b9ea0092a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19d0c1c4d280799bbc6e9b8cc78ab502fd51a725c6527af2a653db9d11b5f7cb"}
{"level":"info","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31270d31cd7ab12555b1b17bc015dee4c0565b9854bf8d4abd8126b9ea0092a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19d0c1c4d280799bbc6e9b8cc78ab502fd51a725c6527af2a653db9d11b5f7cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31270d31cd7ab12555b1b17bc015dee4c0565b9854bf8d4abd8126b9ea0092a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19d0c1c4d280799bbc6e9b8cc78ab502fd51a725c6527af2a653db9d11b5f7cb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19d0c1c4d280799bbc6e9b8cc78ab502fd51a725c6527af2a653db9d11b5f7cb"}
{"level":"info","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31270d31cd7ab12555b1b17bc015dee4c0565b9854bf8d4abd8126b9ea0092a7"}
{"level":"debug","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19d0c1c4d280799bbc6e9b8cc78ab502fd51a725c6527af2a653db9d11b5f7cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19d0c1c4d280799bbc6e9b8cc78ab502fd51a725c6527af2a653db9d11b5f7cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19d0c1c4d280799bbc6e9b8cc78ab502fd51a725c6527af2a653db9d11b5f7cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19d0c1c4d280799bbc6e9b8cc78ab502fd51a725c6527af2a653db9d11b5f7cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19d0c1c4d280799bbc6e9b8cc78ab502fd51a725c6527af2a653db9d11b5f7cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19d0c1c4d280799bbc6e9b8cc78ab502fd51a725c6527af2a653db9d11b5f7cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19d0c1c4d280799bbc6e9b8cc78ab502fd51a725c6527af2a653db9d11b5f7cb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19d0c1c4d280799bbc6e9b8cc78ab502fd51a725c6527af2a653db9d11b5f7cb"}
{"level":"debug","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19d0c1c4d280799bbc6e9b8cc78ab502fd51a725c6527af2a653db9d11b5f7cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"934456f08a512a336358de699c0b60545941d6330a64d99ee82a3d40ebb4df8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19d0c1c4d280799bbc6e9b8cc78ab502fd51a725c6527af2a653db9d11b5f7cb"}
{"level":"info","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"934456f08a512a336358de699c0b60545941d6330a64d99ee82a3d40ebb4df8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"934456f08a512a336358de699c0b60545941d6330a64d99ee82a3d40ebb4df8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"934456f08a512a336358de699c0b60545941d6330a64d99ee82a3d40ebb4df8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19d0c1c4d280799bbc6e9b8cc78ab502fd51a725c6527af2a653db9d11b5f7cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19d0c1c4d280799bbc6e9b8cc78ab502fd51a725c6527af2a653db9d11b5f7cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19d0c1c4d280799bbc6e9b8cc78ab502fd51a725c6527af2a653db9d11b5f7cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"934456f08a512a336358de699c0b60545941d6330a64d99ee82a3d40ebb4df8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19d0c1c4d280799bbc6e9b8cc78ab502fd51a725c6527af2a653db9d11b5f7cb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/934456f08a512a336358de699c0b60545941d6330a64d99ee82a3d40ebb4df8f"}
{"level":"debug","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"934456f08a512a336358de699c0b60545941d6330a64d99ee82a3d40ebb4df8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["934456f08a512a336358de699c0b60545941d6330a64d99ee82a3d40ebb4df8f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19d0c1c4d280799bbc6e9b8cc78ab502fd51a725c6527af2a653db9d11b5f7cb"}
{"level":"info","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"934456f08a512a336358de699c0b60545941d6330a64d99ee82a3d40ebb4df8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"934456f08a512a336358de699c0b60545941d6330a64d99ee82a3d40ebb4df8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"934456f08a512a336358de699c0b60545941d6330a64d99ee82a3d40ebb4df8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"934456f08a512a336358de699c0b60545941d6330a64d99ee82a3d40ebb4df8f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/934456f08a512a336358de699c0b60545941d6330a64d99ee82a3d40ebb4df8f"}
{"level":"debug","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"934456f08a512a336358de699c0b60545941d6330a64d99ee82a3d40ebb4df8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"934456f08a512a336358de699c0b60545941d6330a64d99ee82a3d40ebb4df8f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/934456f08a512a336358de699c0b60545941d6330a64d99ee82a3d40ebb4df8f"}
{"level":"debug","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"934456f08a512a336358de699c0b60545941d6330a64d99ee82a3d40ebb4df8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["934456f08a512a336358de699c0b60545941d6330a64d99ee82a3d40ebb4df8f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"934456f08a512a336358de699c0b60545941d6330a64d99ee82a3d40ebb4df8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"934456f08a512a336358de699c0b60545941d6330a64d99ee82a3d40ebb4df8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb98fd5bb7420566ef2d37a86696b1dd8c3a6af6e7f8e1441d5c0214ceedb01d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/934456f08a512a336358de699c0b60545941d6330a64d99ee82a3d40ebb4df8f"}
{"level":"info","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb98fd5bb7420566ef2d37a86696b1dd8c3a6af6e7f8e1441d5c0214ceedb01d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb98fd5bb7420566ef2d37a86696b1dd8c3a6af6e7f8e1441d5c0214ceedb01d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb98fd5bb7420566ef2d37a86696b1dd8c3a6af6e7f8e1441d5c0214ceedb01d"}
{"level":"info","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb98fd5bb7420566ef2d37a86696b1dd8c3a6af6e7f8e1441d5c0214ceedb01d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb98fd5bb7420566ef2d37a86696b1dd8c3a6af6e7f8e1441d5c0214ceedb01d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"fb98fd5bb7420566ef2d37a86696b1dd8c3a6af6e7f8e1441d5c0214ceedb01d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"fb98fd5bb7420566ef2d37a86696b1dd8c3a6af6e7f8e1441d5c0214ceedb01d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb98fd5bb7420566ef2d37a86696b1dd8c3a6af6e7f8e1441d5c0214ceedb01d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb98fd5bb7420566ef2d37a86696b1dd8c3a6af6e7f8e1441d5c0214ceedb01d"}
{"level":"debug","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb98fd5bb7420566ef2d37a86696b1dd8c3a6af6e7f8e1441d5c0214ceedb01d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb98fd5bb7420566ef2d37a86696b1dd8c3a6af6e7f8e1441d5c0214ceedb01d"}
{"level":"debug","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb98fd5bb7420566ef2d37a86696b1dd8c3a6af6e7f8e1441d5c0214ceedb01d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fb98fd5bb7420566ef2d37a86696b1dd8c3a6af6e7f8e1441d5c0214ceedb01d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb98fd5bb7420566ef2d37a86696b1dd8c3a6af6e7f8e1441d5c0214ceedb01d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb98fd5bb7420566ef2d37a86696b1dd8c3a6af6e7f8e1441d5c0214ceedb01d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb98fd5bb7420566ef2d37a86696b1dd8c3a6af6e7f8e1441d5c0214ceedb01d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb98fd5bb7420566ef2d37a86696b1dd8c3a6af6e7f8e1441d5c0214ceedb01d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb98fd5bb7420566ef2d37a86696b1dd8c3a6af6e7f8e1441d5c0214ceedb01d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb98fd5bb7420566ef2d37a86696b1dd8c3a6af6e7f8e1441d5c0214ceedb01d"}
{"level":"debug","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b971e3a7d19f06b4471ad2d40ebac7b987e20e61e569fcb2de26421c435b10e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb98fd5bb7420566ef2d37a86696b1dd8c3a6af6e7f8e1441d5c0214ceedb01d"}
{"level":"info","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b971e3a7d19f06b4471ad2d40ebac7b987e20e61e569fcb2de26421c435b10e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb98fd5bb7420566ef2d37a86696b1dd8c3a6af6e7f8e1441d5c0214ceedb01d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fb98fd5bb7420566ef2d37a86696b1dd8c3a6af6e7f8e1441d5c0214ceedb01d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb98fd5bb7420566ef2d37a86696b1dd8c3a6af6e7f8e1441d5c0214ceedb01d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b971e3a7d19f06b4471ad2d40ebac7b987e20e61e569fcb2de26421c435b10e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b971e3a7d19f06b4471ad2d40ebac7b987e20e61e569fcb2de26421c435b10e2"}
{"level":"info","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b971e3a7d19f06b4471ad2d40ebac7b987e20e61e569fcb2de26421c435b10e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb98fd5bb7420566ef2d37a86696b1dd8c3a6af6e7f8e1441d5c0214ceedb01d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb98fd5bb7420566ef2d37a86696b1dd8c3a6af6e7f8e1441d5c0214ceedb01d"}
{"level":"info","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb98fd5bb7420566ef2d37a86696b1dd8c3a6af6e7f8e1441d5c0214ceedb01d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b971e3a7d19f06b4471ad2d40ebac7b987e20e61e569fcb2de26421c435b10e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb98fd5bb7420566ef2d37a86696b1dd8c3a6af6e7f8e1441d5c0214ceedb01d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fb98fd5bb7420566ef2d37a86696b1dd8c3a6af6e7f8e1441d5c0214ceedb01d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb98fd5bb7420566ef2d37a86696b1dd8c3a6af6e7f8e1441d5c0214ceedb01d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb98fd5bb7420566ef2d37a86696b1dd8c3a6af6e7f8e1441d5c0214ceedb01d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fb98fd5bb7420566ef2d37a86696b1dd8c3a6af6e7f8e1441d5c0214ceedb01d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b971e3a7d19f06b4471ad2d40ebac7b987e20e61e569fcb2de26421c435b10e2"}
{"level":"error","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"fb98fd5bb7420566ef2d37a86696b1dd8c3a6af6e7f8e1441d5c0214ceedb01d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"fb98fd5bb7420566ef2d37a86696b1dd8c3a6af6e7f8e1441d5c0214ceedb01d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b971e3a7d19f06b4471ad2d40ebac7b987e20e61e569fcb2de26421c435b10e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b971e3a7d19f06b4471ad2d40ebac7b987e20e61e569fcb2de26421c435b10e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b971e3a7d19f06b4471ad2d40ebac7b987e20e61e569fcb2de26421c435b10e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb98fd5bb7420566ef2d37a86696b1dd8c3a6af6e7f8e1441d5c0214ceedb01d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb98fd5bb7420566ef2d37a86696b1dd8c3a6af6e7f8e1441d5c0214ceedb01d"}
{"level":"info","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb98fd5bb7420566ef2d37a86696b1dd8c3a6af6e7f8e1441d5c0214ceedb01d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b971e3a7d19f06b4471ad2d40ebac7b987e20e61e569fcb2de26421c435b10e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b971e3a7d19f06b4471ad2d40ebac7b987e20e61e569fcb2de26421c435b10e2"}
{"level":"info","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b971e3a7d19f06b4471ad2d40ebac7b987e20e61e569fcb2de26421c435b10e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb98fd5bb7420566ef2d37a86696b1dd8c3a6af6e7f8e1441d5c0214ceedb01d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28887c07f1f8d5d641f620811cafcc6cdef3b215782023490a1442223feb7e82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb98fd5bb7420566ef2d37a86696b1dd8c3a6af6e7f8e1441d5c0214ceedb01d"}
{"level":"info","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28887c07f1f8d5d641f620811cafcc6cdef3b215782023490a1442223feb7e82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b971e3a7d19f06b4471ad2d40ebac7b987e20e61e569fcb2de26421c435b10e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b971e3a7d19f06b4471ad2d40ebac7b987e20e61e569fcb2de26421c435b10e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b971e3a7d19f06b4471ad2d40ebac7b987e20e61e569fcb2de26421c435b10e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28887c07f1f8d5d641f620811cafcc6cdef3b215782023490a1442223feb7e82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28887c07f1f8d5d641f620811cafcc6cdef3b215782023490a1442223feb7e82"}
{"level":"info","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28887c07f1f8d5d641f620811cafcc6cdef3b215782023490a1442223feb7e82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb98fd5bb7420566ef2d37a86696b1dd8c3a6af6e7f8e1441d5c0214ceedb01d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fb98fd5bb7420566ef2d37a86696b1dd8c3a6af6e7f8e1441d5c0214ceedb01d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b971e3a7d19f06b4471ad2d40ebac7b987e20e61e569fcb2de26421c435b10e2"}
{"level":"info","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb98fd5bb7420566ef2d37a86696b1dd8c3a6af6e7f8e1441d5c0214ceedb01d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b971e3a7d19f06b4471ad2d40ebac7b987e20e61e569fcb2de26421c435b10e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28887c07f1f8d5d641f620811cafcc6cdef3b215782023490a1442223feb7e82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb98fd5bb7420566ef2d37a86696b1dd8c3a6af6e7f8e1441d5c0214ceedb01d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28887c07f1f8d5d641f620811cafcc6cdef3b215782023490a1442223feb7e82","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28887c07f1f8d5d641f620811cafcc6cdef3b215782023490a1442223feb7e82"}
{"level":"info","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb98fd5bb7420566ef2d37a86696b1dd8c3a6af6e7f8e1441d5c0214ceedb01d"}
{"level":"debug","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28887c07f1f8d5d641f620811cafcc6cdef3b215782023490a1442223feb7e82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28887c07f1f8d5d641f620811cafcc6cdef3b215782023490a1442223feb7e82"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28887c07f1f8d5d641f620811cafcc6cdef3b215782023490a1442223feb7e82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28887c07f1f8d5d641f620811cafcc6cdef3b215782023490a1442223feb7e82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28887c07f1f8d5d641f620811cafcc6cdef3b215782023490a1442223feb7e82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28887c07f1f8d5d641f620811cafcc6cdef3b215782023490a1442223feb7e82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28887c07f1f8d5d641f620811cafcc6cdef3b215782023490a1442223feb7e82","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28887c07f1f8d5d641f620811cafcc6cdef3b215782023490a1442223feb7e82"}
{"level":"debug","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28887c07f1f8d5d641f620811cafcc6cdef3b215782023490a1442223feb7e82","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28887c07f1f8d5d641f620811cafcc6cdef3b215782023490a1442223feb7e82"}
{"level":"debug","ts":"2026-07-06T20:09:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28887c07f1f8d5d641f620811cafcc6cdef3b215782023490a1442223feb7e82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28887c07f1f8d5d641f620811cafcc6cdef3b215782023490a1442223feb7e82"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28887c07f1f8d5d641f620811cafcc6cdef3b215782023490a1442223feb7e82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28887c07f1f8d5d641f620811cafcc6cdef3b215782023490a1442223feb7e82","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28887c07f1f8d5d641f620811cafcc6cdef3b215782023490a1442223feb7e82"}
{"level":"debug","ts":"2026-07-06T20:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"406f6057d6216dc1a4bb9fb1a927208accf37327252fb6a155d13fa1ce2391aa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/406f6057d6216dc1a4bb9fb1a927208accf37327252fb6a155d13fa1ce2391aa"}
{"level":"debug","ts":"2026-07-06T20:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3"}
{"level":"debug","ts":"2026-07-06T20:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3"}
{"level":"debug","ts":"2026-07-06T20:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3"}
{"level":"info","ts":"2026-07-06T20:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3"}
{"level":"debug","ts":"2026-07-06T20:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3"}
{"level":"debug","ts":"2026-07-06T20:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b971e3a7d19f06b4471ad2d40ebac7b987e20e61e569fcb2de26421c435b10e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b971e3a7d19f06b4471ad2d40ebac7b987e20e61e569fcb2de26421c435b10e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b971e3a7d19f06b4471ad2d40ebac7b987e20e61e569fcb2de26421c435b10e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b971e3a7d19f06b4471ad2d40ebac7b987e20e61e569fcb2de26421c435b10e2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b971e3a7d19f06b4471ad2d40ebac7b987e20e61e569fcb2de26421c435b10e2"}
{"level":"debug","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b971e3a7d19f06b4471ad2d40ebac7b987e20e61e569fcb2de26421c435b10e2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b971e3a7d19f06b4471ad2d40ebac7b987e20e61e569fcb2de26421c435b10e2"}
{"level":"debug","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b971e3a7d19f06b4471ad2d40ebac7b987e20e61e569fcb2de26421c435b10e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b971e3a7d19f06b4471ad2d40ebac7b987e20e61e569fcb2de26421c435b10e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b971e3a7d19f06b4471ad2d40ebac7b987e20e61e569fcb2de26421c435b10e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b971e3a7d19f06b4471ad2d40ebac7b987e20e61e569fcb2de26421c435b10e2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b971e3a7d19f06b4471ad2d40ebac7b987e20e61e569fcb2de26421c435b10e2"}
{"level":"debug","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81"}
{"level":"debug","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81"}
{"level":"debug","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e691a4020aa1f9550285f6f856c61ddc78c03893fe8503645082d70d3e747a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81"}
{"level":"debug","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e691a4020aa1f9550285f6f856c61ddc78c03893fe8503645082d70d3e747a8"}
{"level":"info","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81"}
{"level":"info","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81"}
{"level":"debug","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81"}
{"level":"debug","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81"}
{"level":"debug","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a739902d04841ae07ab6dca46b29de2bc4cf68ba714ee6d21cceab31d2d7b7d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81"}
{"level":"info","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a739902d04841ae07ab6dca46b29de2bc4cf68ba714ee6d21cceab31d2d7b7d5"}
{"level":"debug","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81"}
{"level":"debug","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81"}
{"level":"debug","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81"}
{"level":"debug","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63ba19f78e4218c5653c2360fddd3e8569d317384c1dd1baab134db6b08446ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81"}
{"level":"info","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63ba19f78e4218c5653c2360fddd3e8569d317384c1dd1baab134db6b08446ca"}
{"level":"debug","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81"}
{"level":"debug","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81"}
{"level":"debug","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba"}
{"level":"debug","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba"}
{"level":"info","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81"}
{"level":"info","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba"}
{"level":"info","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31270d31cd7ab12555b1b17bc015dee4c0565b9854bf8d4abd8126b9ea0092a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81"}
{"level":"info","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31270d31cd7ab12555b1b17bc015dee4c0565b9854bf8d4abd8126b9ea0092a7"}
{"level":"info","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba"}
{"level":"info","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81"}
{"level":"debug","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7ab0a4343645c2039687df03b8dc513224d5039127d2cb8533d131db17b4a6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8b6352daa7124999985572acb226e88b9be9d252320328902475045fcda4922","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7ab0a4343645c2039687df03b8dc513224d5039127d2cb8533d131db17b4a6d"}
{"level":"debug","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"934456f08a512a336358de699c0b60545941d6330a64d99ee82a3d40ebb4df8f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8b6352daa7124999985572acb226e88b9be9d252320328902475045fcda4922"}
{"level":"debug","ts":"2026-07-06T20:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb98fd5bb7420566ef2d37a86696b1dd8c3a6af6e7f8e1441d5c0214ceedb01d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/934456f08a512a336358de699c0b60545941d6330a64d99ee82a3d40ebb4df8f"}
{"level":"debug","ts":"2026-07-06T20:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cca51b234255b64c840ca9074e859a15aac3cef89669151268395f4838fac49","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb98fd5bb7420566ef2d37a86696b1dd8c3a6af6e7f8e1441d5c0214ceedb01d"}
{"level":"debug","ts":"2026-07-06T20:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19d0c1c4d280799bbc6e9b8cc78ab502fd51a725c6527af2a653db9d11b5f7cb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cca51b234255b64c840ca9074e859a15aac3cef89669151268395f4838fac49"}
{"level":"debug","ts":"2026-07-06T20:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae8920577a4f7673ac7fa7f283fc87a9b14d65dca8c6c87cc7c2c350cab039a2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19d0c1c4d280799bbc6e9b8cc78ab502fd51a725c6527af2a653db9d11b5f7cb"}
{"level":"debug","ts":"2026-07-06T20:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9dc9f8553d3205d669cb60c0e9ad4425386f0eaa69f409d7e1545fa2d5bc546","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae8920577a4f7673ac7fa7f283fc87a9b14d65dca8c6c87cc7c2c350cab039a2"}
{"level":"debug","ts":"2026-07-06T20:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1cb25bf4ba0356155154743a22244a49cb63d3b820567a99767813c6d2eb88e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9dc9f8553d3205d669cb60c0e9ad4425386f0eaa69f409d7e1545fa2d5bc546"}
{"level":"info","ts":"2026-07-06T20:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1cb25bf4ba0356155154743a22244a49cb63d3b820567a99767813c6d2eb88e"}
{"level":"debug","ts":"2026-07-06T20:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28887c07f1f8d5d641f620811cafcc6cdef3b215782023490a1442223feb7e82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28887c07f1f8d5d641f620811cafcc6cdef3b215782023490a1442223feb7e82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28887c07f1f8d5d641f620811cafcc6cdef3b215782023490a1442223feb7e82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2cfcaf84541942a9c9e0c1e4d680360886a63a83302bad6a86e16ccf7be9a162","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28887c07f1f8d5d641f620811cafcc6cdef3b215782023490a1442223feb7e82","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28887c07f1f8d5d641f620811cafcc6cdef3b215782023490a1442223feb7e82"}
{"level":"debug","ts":"2026-07-06T20:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28887c07f1f8d5d641f620811cafcc6cdef3b215782023490a1442223feb7e82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28887c07f1f8d5d641f620811cafcc6cdef3b215782023490a1442223feb7e82"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2cfcaf84541942a9c9e0c1e4d680360886a63a83302bad6a86e16ccf7be9a162"}
{"level":"info","ts":"2026-07-06T20:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28887c07f1f8d5d641f620811cafcc6cdef3b215782023490a1442223feb7e82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28887c07f1f8d5d641f620811cafcc6cdef3b215782023490a1442223feb7e82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28887c07f1f8d5d641f620811cafcc6cdef3b215782023490a1442223feb7e82"}
{"level":"info","ts":"2026-07-06T20:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28887c07f1f8d5d641f620811cafcc6cdef3b215782023490a1442223feb7e82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28887c07f1f8d5d641f620811cafcc6cdef3b215782023490a1442223feb7e82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28887c07f1f8d5d641f620811cafcc6cdef3b215782023490a1442223feb7e82","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28887c07f1f8d5d641f620811cafcc6cdef3b215782023490a1442223feb7e82"}
{"level":"debug","ts":"2026-07-06T20:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28887c07f1f8d5d641f620811cafcc6cdef3b215782023490a1442223feb7e82","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28887c07f1f8d5d641f620811cafcc6cdef3b215782023490a1442223feb7e82"}
{"level":"debug","ts":"2026-07-06T20:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28887c07f1f8d5d641f620811cafcc6cdef3b215782023490a1442223feb7e82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28887c07f1f8d5d641f620811cafcc6cdef3b215782023490a1442223feb7e82"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28887c07f1f8d5d641f620811cafcc6cdef3b215782023490a1442223feb7e82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28887c07f1f8d5d641f620811cafcc6cdef3b215782023490a1442223feb7e82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:09:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:09:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28887c07f1f8d5d641f620811cafcc6cdef3b215782023490a1442223feb7e82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28887c07f1f8d5d641f620811cafcc6cdef3b215782023490a1442223feb7e82","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28887c07f1f8d5d641f620811cafcc6cdef3b215782023490a1442223feb7e82"}
{"level":"debug","ts":"2026-07-06T20:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28887c07f1f8d5d641f620811cafcc6cdef3b215782023490a1442223feb7e82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28887c07f1f8d5d641f620811cafcc6cdef3b215782023490a1442223feb7e82","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28887c07f1f8d5d641f620811cafcc6cdef3b215782023490a1442223feb7e82"}
{"level":"debug","ts":"2026-07-06T20:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28887c07f1f8d5d641f620811cafcc6cdef3b215782023490a1442223feb7e82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:09:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:09:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28887c07f1f8d5d641f620811cafcc6cdef3b215782023490a1442223feb7e82"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28887c07f1f8d5d641f620811cafcc6cdef3b215782023490a1442223feb7e82","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28887c07f1f8d5d641f620811cafcc6cdef3b215782023490a1442223feb7e82","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28887c07f1f8d5d641f620811cafcc6cdef3b215782023490a1442223feb7e82"}
{"level":"info","ts":"2026-07-06T20:09:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"278b5f30-04ac-465e-99e9-9cec9e402ba1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:59484","PortSpecifier":{"PortValue":59484}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"278b5f30-04ac-465e-99e9-9cec9e402ba1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-7ba461.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:09:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"278b5f30-04ac-465e-99e9-9cec9e402ba1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:59484","PortSpecifier":{"PortValue":59484}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368591,"nanos":885748147},"http":{"id":"278b5f30-04ac-465e-99e9-9cec9e402ba1","method":"POST","headers":{":authority":"e2e-shared-a-7ba461.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:09:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"278b5f30-04ac-465e-99e9-9cec9e402ba1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:09:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"278b5f30-04ac-465e-99e9-9cec9e402ba1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4c5c9b1d-59e4-4c06-9c51-913c43475eb5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b754c299-5a20-40bb-9dad-929c5cb04a96"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14fb9e990410"]}}
{"level":"debug","ts":"2026-07-06T20:09:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"278b5f30-04ac-465e-99e9-9cec9e402ba1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14fb9e990410"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b754c299-5a20-40bb-9dad-929c5cb04a96"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4c5c9b1d-59e4-4c06-9c51-913c43475eb5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"63ba19f78e4218c5653c2360fddd3e8569d317384c1dd1baab134db6b08446ca"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7ba461.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:09:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"278b5f30-04ac-465e-99e9-9cec9e402ba1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:09:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"278b5f30-04ac-465e-99e9-9cec9e402ba1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:09:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"278b5f30-04ac-465e-99e9-9cec9e402ba1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7ba461/sub-test-model-7ba461\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:09:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"278b5f30-04ac-465e-99e9-9cec9e402ba1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:09:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"278b5f30-04ac-465e-99e9-9cec9e402ba1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:09:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"278b5f30-04ac-465e-99e9-9cec9e402ba1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:09:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"278b5f30-04ac-465e-99e9-9cec9e402ba1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:09:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"278b5f30-04ac-465e-99e9-9cec9e402ba1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:09:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7e0b30a6-b964-4fad-969f-be9c8906acd7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:48322","PortSpecifier":{"PortValue":48322}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7e0b30a6-b964-4fad-969f-be9c8906acd7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ebe4df.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:09:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7e0b30a6-b964-4fad-969f-be9c8906acd7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:48322","PortSpecifier":{"PortValue":48322}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368591,"nanos":925294787},"http":{"id":"7e0b30a6-b964-4fad-969f-be9c8906acd7","method":"POST","headers":{":authority":"e2e-shared-b-ebe4df.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:09:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7e0b30a6-b964-4fad-969f-be9c8906acd7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:09:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7e0b30a6-b964-4fad-969f-be9c8906acd7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4c5c9b1d-59e4-4c06-9c51-913c43475eb5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b754c299-5a20-40bb-9dad-929c5cb04a96"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14fb9e990410"]}}
{"level":"debug","ts":"2026-07-06T20:09:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7e0b30a6-b964-4fad-969f-be9c8906acd7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14fb9e990410"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b754c299-5a20-40bb-9dad-929c5cb04a96"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4c5c9b1d-59e4-4c06-9c51-913c43475eb5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ebe4df.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:09:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7e0b30a6-b964-4fad-969f-be9c8906acd7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:09:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7e0b30a6-b964-4fad-969f-be9c8906acd7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:09:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7e0b30a6-b964-4fad-969f-be9c8906acd7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ebe4df/sub-test-model-ebe4df\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:09:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7e0b30a6-b964-4fad-969f-be9c8906acd7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:09:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7e0b30a6-b964-4fad-969f-be9c8906acd7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:09:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7e0b30a6-b964-4fad-969f-be9c8906acd7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T20:09:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7e0b30a6-b964-4fad-969f-be9c8906acd7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:09:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7e0b30a6-b964-4fad-969f-be9c8906acd7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:09:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3b809981-41a8-433b-9477-55255ba0e621","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:59494","PortSpecifier":{"PortValue":59494}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3b809981-41a8-433b-9477-55255ba0e621","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-7ba461.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:09:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3b809981-41a8-433b-9477-55255ba0e621","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:59494","PortSpecifier":{"PortValue":59494}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368591,"nanos":963109966},"http":{"id":"3b809981-41a8-433b-9477-55255ba0e621","method":"GET","headers":{":authority":"e2e-shared-a-7ba461.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:09:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3b809981-41a8-433b-9477-55255ba0e621","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-VRTRlOo73CUzlzqy_eUFjo1cVrgNQX456biYS9CMpvOSlfAaHQnQ4VkRP4XG"}
{"level":"debug","ts":"2026-07-06T20:09:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3b809981-41a8-433b-9477-55255ba0e621","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7ba461.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-VRTRlOo73CUzlzqy_eUFjo1cVrgNQX456biYS9CMpvOSlfAaHQnQ4VkRP4XG\"}"}
{"level":"debug","ts":"2026-07-06T20:09:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3b809981-41a8-433b-9477-55255ba0e621","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7ba461.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"731872e7-dd99-47d1-91e6-281a7a1c7822","keyName":"e2e-sub-iso-19791c","subscription":"e2e-a-only-7583cd","tenant":"e2e-shared-a-7ba461","userId":"731872e7-dd99-47d1-91e6-281a7a1c7822","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:09:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3b809981-41a8-433b-9477-55255ba0e621","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:09:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b809981-41a8-433b-9477-55255ba0e621","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:09:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b809981-41a8-433b-9477-55255ba0e621","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:09:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b809981-41a8-433b-9477-55255ba0e621","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7ba461/sub-test-model-7ba461\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:09:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b809981-41a8-433b-9477-55255ba0e621","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:09:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3b809981-41a8-433b-9477-55255ba0e621","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T20:09:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b809981-41a8-433b-9477-55255ba0e621","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:09:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b809981-41a8-433b-9477-55255ba0e621","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-7583cd"}
{"level":"info","ts":"2026-07-06T20:09:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3b809981-41a8-433b-9477-55255ba0e621","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:09:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3b809981-41a8-433b-9477-55255ba0e621","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:09:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"75b2f4a4-bf1b-408d-ae40-f4af1fe0e056","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:48338","PortSpecifier":{"PortValue":48338}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"75b2f4a4-bf1b-408d-ae40-f4af1fe0e056","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-ebe4df.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:09:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"75b2f4a4-bf1b-408d-ae40-f4af1fe0e056","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:48338","PortSpecifier":{"PortValue":48338}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368592,"nanos":6756116},"http":{"id":"75b2f4a4-bf1b-408d-ae40-f4af1fe0e056","method":"GET","headers":{":authority":"e2e-shared-b-ebe4df.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:09:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"75b2f4a4-bf1b-408d-ae40-f4af1fe0e056","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-8njrlykEHFDZ9HI1_i49aVjMFeDKR6Kb09Sigpcw6tPtUBXCdKr57elpCJ5G"}
{"level":"debug","ts":"2026-07-06T20:09:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"75b2f4a4-bf1b-408d-ae40-f4af1fe0e056","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-ebe4df.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-8njrlykEHFDZ9HI1_i49aVjMFeDKR6Kb09Sigpcw6tPtUBXCdKr57elpCJ5G\"}"}
{"level":"debug","ts":"2026-07-06T20:09:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"75b2f4a4-bf1b-408d-ae40-f4af1fe0e056","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-ebe4df.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3d78ac08-17d3-4db3-9954-a232a23e25d8","keyName":"e2e-sub-iso-4fc31f","subscription":"e2e-b-only-7583cd","tenant":"e2e-shared-b-ebe4df","userId":"3d78ac08-17d3-4db3-9954-a232a23e25d8","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:09:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"75b2f4a4-bf1b-408d-ae40-f4af1fe0e056","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:09:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75b2f4a4-bf1b-408d-ae40-f4af1fe0e056","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:09:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75b2f4a4-bf1b-408d-ae40-f4af1fe0e056","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:09:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75b2f4a4-bf1b-408d-ae40-f4af1fe0e056","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ebe4df/sub-test-model-ebe4df\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:09:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"75b2f4a4-bf1b-408d-ae40-f4af1fe0e056","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:09:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"75b2f4a4-bf1b-408d-ae40-f4af1fe0e056","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:09:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"75b2f4a4-bf1b-408d-ae40-f4af1fe0e056","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-7583cd"}
{"level":"debug","ts":"2026-07-06T20:09:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"75b2f4a4-bf1b-408d-ae40-f4af1fe0e056","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-06T20:09:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"75b2f4a4-bf1b-408d-ae40-f4af1fe0e056","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:09:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"75b2f4a4-bf1b-408d-ae40-f4af1fe0e056","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:10:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"18beb1d5-d1d2-4780-9f4a-75c54b6ef823","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:44412","PortSpecifier":{"PortValue":44412}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"18beb1d5-d1d2-4780-9f4a-75c54b6ef823","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-7ba461.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:10:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"18beb1d5-d1d2-4780-9f4a-75c54b6ef823","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:44412","PortSpecifier":{"PortValue":44412}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368610,"nanos":486973528},"http":{"id":"18beb1d5-d1d2-4780-9f4a-75c54b6ef823","method":"POST","headers":{":authority":"e2e-shared-a-7ba461.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:10:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"18beb1d5-d1d2-4780-9f4a-75c54b6ef823","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:10:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"18beb1d5-d1d2-4780-9f4a-75c54b6ef823","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4c5c9b1d-59e4-4c06-9c51-913c43475eb5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b754c299-5a20-40bb-9dad-929c5cb04a96"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14fb9e990410"]}}
{"level":"debug","ts":"2026-07-06T20:10:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"18beb1d5-d1d2-4780-9f4a-75c54b6ef823","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14fb9e990410"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b754c299-5a20-40bb-9dad-929c5cb04a96"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4c5c9b1d-59e4-4c06-9c51-913c43475eb5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"63ba19f78e4218c5653c2360fddd3e8569d317384c1dd1baab134db6b08446ca"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7ba461.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:10:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"18beb1d5-d1d2-4780-9f4a-75c54b6ef823","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:10:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"18beb1d5-d1d2-4780-9f4a-75c54b6ef823","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:10:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"18beb1d5-d1d2-4780-9f4a-75c54b6ef823","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7ba461/sub-test-model-7ba461\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:10:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"18beb1d5-d1d2-4780-9f4a-75c54b6ef823","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:10:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"18beb1d5-d1d2-4780-9f4a-75c54b6ef823","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:10:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"18beb1d5-d1d2-4780-9f4a-75c54b6ef823","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:10:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"18beb1d5-d1d2-4780-9f4a-75c54b6ef823","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:10:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"18beb1d5-d1d2-4780-9f4a-75c54b6ef823","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:10:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"be42e359-a5a2-46b8-a4c5-f4f916d8e2db","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:33910","PortSpecifier":{"PortValue":33910}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"be42e359-a5a2-46b8-a4c5-f4f916d8e2db","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ebe4df.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:10:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"be42e359-a5a2-46b8-a4c5-f4f916d8e2db","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:33910","PortSpecifier":{"PortValue":33910}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368610,"nanos":521381805},"http":{"id":"be42e359-a5a2-46b8-a4c5-f4f916d8e2db","method":"POST","headers":{":authority":"e2e-shared-b-ebe4df.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:10:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"be42e359-a5a2-46b8-a4c5-f4f916d8e2db","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:10:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"be42e359-a5a2-46b8-a4c5-f4f916d8e2db","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4c5c9b1d-59e4-4c06-9c51-913c43475eb5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b754c299-5a20-40bb-9dad-929c5cb04a96"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14fb9e990410"]}}
{"level":"debug","ts":"2026-07-06T20:10:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"be42e359-a5a2-46b8-a4c5-f4f916d8e2db","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14fb9e990410"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b754c299-5a20-40bb-9dad-929c5cb04a96"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4c5c9b1d-59e4-4c06-9c51-913c43475eb5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ebe4df.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:10:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be42e359-a5a2-46b8-a4c5-f4f916d8e2db","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:10:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be42e359-a5a2-46b8-a4c5-f4f916d8e2db","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:10:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be42e359-a5a2-46b8-a4c5-f4f916d8e2db","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ebe4df/sub-test-model-ebe4df\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:10:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"be42e359-a5a2-46b8-a4c5-f4f916d8e2db","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:10:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be42e359-a5a2-46b8-a4c5-f4f916d8e2db","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:10:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be42e359-a5a2-46b8-a4c5-f4f916d8e2db","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:10:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"be42e359-a5a2-46b8-a4c5-f4f916d8e2db","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:10:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"be42e359-a5a2-46b8-a4c5-f4f916d8e2db","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:10:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2290ea13-6b91-4cc8-a45b-9ac3a09b86ea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:44418","PortSpecifier":{"PortValue":44418}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2290ea13-6b91-4cc8-a45b-9ac3a09b86ea","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-7ba461.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:10:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2290ea13-6b91-4cc8-a45b-9ac3a09b86ea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:44418","PortSpecifier":{"PortValue":44418}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368610,"nanos":557644275},"http":{"id":"2290ea13-6b91-4cc8-a45b-9ac3a09b86ea","method":"POST","headers":{":authority":"e2e-shared-a-7ba461.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:10:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2290ea13-6b91-4cc8-a45b-9ac3a09b86ea","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-rIg37Grjr6a6V0rB_G3fk3biZNSGJHt7HR1IMPm8KPi7okuqeAon6DaQoLBT"}
{"level":"debug","ts":"2026-07-06T20:10:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2290ea13-6b91-4cc8-a45b-9ac3a09b86ea","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7ba461.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-rIg37Grjr6a6V0rB_G3fk3biZNSGJHt7HR1IMPm8KPi7okuqeAon6DaQoLBT\"}"}
{"level":"debug","ts":"2026-07-06T20:10:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2290ea13-6b91-4cc8-a45b-9ac3a09b86ea","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7ba461.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e191cab9-67eb-4982-98da-b1c0f716d227","keyName":"e2e-sub-iso-615497","subscription":"e2e-shared-sub-b55c80","tenant":"e2e-shared-a-7ba461","userId":"e191cab9-67eb-4982-98da-b1c0f716d227","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:10:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2290ea13-6b91-4cc8-a45b-9ac3a09b86ea","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:10:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2290ea13-6b91-4cc8-a45b-9ac3a09b86ea","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:10:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2290ea13-6b91-4cc8-a45b-9ac3a09b86ea","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:10:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2290ea13-6b91-4cc8-a45b-9ac3a09b86ea","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7ba461/sub-test-model-7ba461\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:10:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2290ea13-6b91-4cc8-a45b-9ac3a09b86ea","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T20:10:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2290ea13-6b91-4cc8-a45b-9ac3a09b86ea","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:10:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2290ea13-6b91-4cc8-a45b-9ac3a09b86ea","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-b55c80"}
{"level":"debug","ts":"2026-07-06T20:10:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2290ea13-6b91-4cc8-a45b-9ac3a09b86ea","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:10:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2290ea13-6b91-4cc8-a45b-9ac3a09b86ea","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:10:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2290ea13-6b91-4cc8-a45b-9ac3a09b86ea","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:10:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"100afa93-57a2-459f-9a68-a5b36a388236","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:33916","PortSpecifier":{"PortValue":33916}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"100afa93-57a2-459f-9a68-a5b36a388236","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-ebe4df.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:10:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"100afa93-57a2-459f-9a68-a5b36a388236","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:33916","PortSpecifier":{"PortValue":33916}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368610,"nanos":585037813},"http":{"id":"100afa93-57a2-459f-9a68-a5b36a388236","method":"POST","headers":{":authority":"e2e-shared-b-ebe4df.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:10:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"100afa93-57a2-459f-9a68-a5b36a388236","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-lUCaf7VJO3DIgSjp_CfrbgGg02YT1jaBlTWJU679b7j2tTLjhPOi6syAcoPe"}
{"level":"debug","ts":"2026-07-06T20:10:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"100afa93-57a2-459f-9a68-a5b36a388236","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-ebe4df.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-lUCaf7VJO3DIgSjp_CfrbgGg02YT1jaBlTWJU679b7j2tTLjhPOi6syAcoPe\"}"}
{"level":"debug","ts":"2026-07-06T20:10:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"100afa93-57a2-459f-9a68-a5b36a388236","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-ebe4df.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"24ffc8cf-a0d6-472c-9318-7dba24e7080b","keyName":"e2e-sub-iso-34d5ba","subscription":"e2e-shared-sub-b55c80","tenant":"e2e-shared-b-ebe4df","userId":"24ffc8cf-a0d6-472c-9318-7dba24e7080b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:10:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"100afa93-57a2-459f-9a68-a5b36a388236","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:10:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"100afa93-57a2-459f-9a68-a5b36a388236","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:10:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"100afa93-57a2-459f-9a68-a5b36a388236","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:10:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"100afa93-57a2-459f-9a68-a5b36a388236","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ebe4df/sub-test-model-ebe4df\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:10:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"100afa93-57a2-459f-9a68-a5b36a388236","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:10:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"100afa93-57a2-459f-9a68-a5b36a388236","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-b55c80"}
{"level":"debug","ts":"2026-07-06T20:10:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"100afa93-57a2-459f-9a68-a5b36a388236","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:10:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"100afa93-57a2-459f-9a68-a5b36a388236","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-06T20:10:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"100afa93-57a2-459f-9a68-a5b36a388236","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:10:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"100afa93-57a2-459f-9a68-a5b36a388236","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94a522b91ddc5afb6660d3129491f2872e5572d2d0accc3e8683f3024ef01b57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:10:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:10:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94a522b91ddc5afb6660d3129491f2872e5572d2d0accc3e8683f3024ef01b57","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94a522b91ddc5afb6660d3129491f2872e5572d2d0accc3e8683f3024ef01b57"}
{"level":"debug","ts":"2026-07-06T20:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94a522b91ddc5afb6660d3129491f2872e5572d2d0accc3e8683f3024ef01b57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:10:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:10:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["94a522b91ddc5afb6660d3129491f2872e5572d2d0accc3e8683f3024ef01b57"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94a522b91ddc5afb6660d3129491f2872e5572d2d0accc3e8683f3024ef01b57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94a522b91ddc5afb6660d3129491f2872e5572d2d0accc3e8683f3024ef01b57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:10:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:10:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94a522b91ddc5afb6660d3129491f2872e5572d2d0accc3e8683f3024ef01b57"}
{"level":"error","ts":"2026-07-06T20:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"94a522b91ddc5afb6660d3129491f2872e5572d2d0accc3e8683f3024ef01b57","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"94a522b91ddc5afb6660d3129491f2872e5572d2d0accc3e8683f3024ef01b57\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94a522b91ddc5afb6660d3129491f2872e5572d2d0accc3e8683f3024ef01b57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:10:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:10:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94a522b91ddc5afb6660d3129491f2872e5572d2d0accc3e8683f3024ef01b57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94a522b91ddc5afb6660d3129491f2872e5572d2d0accc3e8683f3024ef01b57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:10:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:10:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94a522b91ddc5afb6660d3129491f2872e5572d2d0accc3e8683f3024ef01b57"}
{"level":"error","ts":"2026-07-06T20:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"94a522b91ddc5afb6660d3129491f2872e5572d2d0accc3e8683f3024ef01b57","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"94a522b91ddc5afb6660d3129491f2872e5572d2d0accc3e8683f3024ef01b57\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94a522b91ddc5afb6660d3129491f2872e5572d2d0accc3e8683f3024ef01b57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94a522b91ddc5afb6660d3129491f2872e5572d2d0accc3e8683f3024ef01b57","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94a522b91ddc5afb6660d3129491f2872e5572d2d0accc3e8683f3024ef01b57"}
{"level":"debug","ts":"2026-07-06T20:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94a522b91ddc5afb6660d3129491f2872e5572d2d0accc3e8683f3024ef01b57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:10:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:10:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["94a522b91ddc5afb6660d3129491f2872e5572d2d0accc3e8683f3024ef01b57"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94a522b91ddc5afb6660d3129491f2872e5572d2d0accc3e8683f3024ef01b57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94a522b91ddc5afb6660d3129491f2872e5572d2d0accc3e8683f3024ef01b57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:10:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:10:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94a522b91ddc5afb6660d3129491f2872e5572d2d0accc3e8683f3024ef01b57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94a522b91ddc5afb6660d3129491f2872e5572d2d0accc3e8683f3024ef01b57","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94a522b91ddc5afb6660d3129491f2872e5572d2d0accc3e8683f3024ef01b57"}
{"level":"debug","ts":"2026-07-06T20:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94a522b91ddc5afb6660d3129491f2872e5572d2d0accc3e8683f3024ef01b57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94a522b91ddc5afb6660d3129491f2872e5572d2d0accc3e8683f3024ef01b57","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94a522b91ddc5afb6660d3129491f2872e5572d2d0accc3e8683f3024ef01b57"}
{"level":"debug","ts":"2026-07-06T20:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94a522b91ddc5afb6660d3129491f2872e5572d2d0accc3e8683f3024ef01b57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:10:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:10:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["94a522b91ddc5afb6660d3129491f2872e5572d2d0accc3e8683f3024ef01b57"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94a522b91ddc5afb6660d3129491f2872e5572d2d0accc3e8683f3024ef01b57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94a522b91ddc5afb6660d3129491f2872e5572d2d0accc3e8683f3024ef01b57","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94a522b91ddc5afb6660d3129491f2872e5572d2d0accc3e8683f3024ef01b57"}
{"level":"debug","ts":"2026-07-06T20:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa3471bd660168d2d231595e247b23b360cfaafc1387924f67f6a1133e6d085d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:10:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:10:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa3471bd660168d2d231595e247b23b360cfaafc1387924f67f6a1133e6d085d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa3471bd660168d2d231595e247b23b360cfaafc1387924f67f6a1133e6d085d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa3471bd660168d2d231595e247b23b360cfaafc1387924f67f6a1133e6d085d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa3471bd660168d2d231595e247b23b360cfaafc1387924f67f6a1133e6d085d"}
{"level":"debug","ts":"2026-07-06T20:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa3471bd660168d2d231595e247b23b360cfaafc1387924f67f6a1133e6d085d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa3471bd660168d2d231595e247b23b360cfaafc1387924f67f6a1133e6d085d"}
{"level":"debug","ts":"2026-07-06T20:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa3471bd660168d2d231595e247b23b360cfaafc1387924f67f6a1133e6d085d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:10:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:10:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa3471bd660168d2d231595e247b23b360cfaafc1387924f67f6a1133e6d085d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa3471bd660168d2d231595e247b23b360cfaafc1387924f67f6a1133e6d085d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa3471bd660168d2d231595e247b23b360cfaafc1387924f67f6a1133e6d085d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa3471bd660168d2d231595e247b23b360cfaafc1387924f67f6a1133e6d085d"}
{"level":"debug","ts":"2026-07-06T20:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b50fa30465011cd9450d00d400aad9bd8e0936e356f0b209c01b9aa8cdfc6746","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:10:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:10:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b50fa30465011cd9450d00d400aad9bd8e0936e356f0b209c01b9aa8cdfc6746"}
{"level":"info","ts":"2026-07-06T20:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b50fa30465011cd9450d00d400aad9bd8e0936e356f0b209c01b9aa8cdfc6746","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b50fa30465011cd9450d00d400aad9bd8e0936e356f0b209c01b9aa8cdfc6746","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b50fa30465011cd9450d00d400aad9bd8e0936e356f0b209c01b9aa8cdfc6746","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b50fa30465011cd9450d00d400aad9bd8e0936e356f0b209c01b9aa8cdfc6746"}
{"level":"debug","ts":"2026-07-06T20:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b50fa30465011cd9450d00d400aad9bd8e0936e356f0b209c01b9aa8cdfc6746","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:10:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:10:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b50fa30465011cd9450d00d400aad9bd8e0936e356f0b209c01b9aa8cdfc6746"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b50fa30465011cd9450d00d400aad9bd8e0936e356f0b209c01b9aa8cdfc6746","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b50fa30465011cd9450d00d400aad9bd8e0936e356f0b209c01b9aa8cdfc6746","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:10:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:10:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b50fa30465011cd9450d00d400aad9bd8e0936e356f0b209c01b9aa8cdfc6746","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b50fa30465011cd9450d00d400aad9bd8e0936e356f0b209c01b9aa8cdfc6746","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b50fa30465011cd9450d00d400aad9bd8e0936e356f0b209c01b9aa8cdfc6746"}
{"level":"debug","ts":"2026-07-06T20:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b50fa30465011cd9450d00d400aad9bd8e0936e356f0b209c01b9aa8cdfc6746","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aeaa1ed27db1275255afd77a1c64cb484085cc98f28d259153e41de348d17f42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:10:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:10:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b50fa30465011cd9450d00d400aad9bd8e0936e356f0b209c01b9aa8cdfc6746"}
{"level":"info","ts":"2026-07-06T20:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aeaa1ed27db1275255afd77a1c64cb484085cc98f28d259153e41de348d17f42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b50fa30465011cd9450d00d400aad9bd8e0936e356f0b209c01b9aa8cdfc6746","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:10:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:10:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b50fa30465011cd9450d00d400aad9bd8e0936e356f0b209c01b9aa8cdfc6746"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aeaa1ed27db1275255afd77a1c64cb484085cc98f28d259153e41de348d17f42"}
{"level":"info","ts":"2026-07-06T20:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b50fa30465011cd9450d00d400aad9bd8e0936e356f0b209c01b9aa8cdfc6746","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9cefd3244f3098dcf4281b2ff4f6f796d6eff1642593f8001d53a2f65e5e7b3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:10:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:10:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cefd3244f3098dcf4281b2ff4f6f796d6eff1642593f8001d53a2f65e5e7b3b"}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9cefd3244f3098dcf4281b2ff4f6f796d6eff1642593f8001d53a2f65e5e7b3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aeaa1ed27db1275255afd77a1c64cb484085cc98f28d259153e41de348d17f42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:10:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:10:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aeaa1ed27db1275255afd77a1c64cb484085cc98f28d259153e41de348d17f42"}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aeaa1ed27db1275255afd77a1c64cb484085cc98f28d259153e41de348d17f42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b50fa30465011cd9450d00d400aad9bd8e0936e356f0b209c01b9aa8cdfc6746","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:10:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:10:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b50fa30465011cd9450d00d400aad9bd8e0936e356f0b209c01b9aa8cdfc6746","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9cefd3244f3098dcf4281b2ff4f6f796d6eff1642593f8001d53a2f65e5e7b3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:10:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:10:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9cefd3244f3098dcf4281b2ff4f6f796d6eff1642593f8001d53a2f65e5e7b3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b50fa30465011cd9450d00d400aad9bd8e0936e356f0b209c01b9aa8cdfc6746"}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9cefd3244f3098dcf4281b2ff4f6f796d6eff1642593f8001d53a2f65e5e7b3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aeaa1ed27db1275255afd77a1c64cb484085cc98f28d259153e41de348d17f42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:10:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:10:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aeaa1ed27db1275255afd77a1c64cb484085cc98f28d259153e41de348d17f42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cefd3244f3098dcf4281b2ff4f6f796d6eff1642593f8001d53a2f65e5e7b3b"}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aeaa1ed27db1275255afd77a1c64cb484085cc98f28d259153e41de348d17f42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b50fa30465011cd9450d00d400aad9bd8e0936e356f0b209c01b9aa8cdfc6746","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:10:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:10:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b50fa30465011cd9450d00d400aad9bd8e0936e356f0b209c01b9aa8cdfc6746"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aeaa1ed27db1275255afd77a1c64cb484085cc98f28d259153e41de348d17f42"}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b50fa30465011cd9450d00d400aad9bd8e0936e356f0b209c01b9aa8cdfc6746","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c7076e53d8315ef3b72f093887c14680228b37ece2db41f87610e08c1f5ddee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:10:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:10:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b50fa30465011cd9450d00d400aad9bd8e0936e356f0b209c01b9aa8cdfc6746"}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c7076e53d8315ef3b72f093887c14680228b37ece2db41f87610e08c1f5ddee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9cefd3244f3098dcf4281b2ff4f6f796d6eff1642593f8001d53a2f65e5e7b3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aeaa1ed27db1275255afd77a1c64cb484085cc98f28d259153e41de348d17f42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b50fa30465011cd9450d00d400aad9bd8e0936e356f0b209c01b9aa8cdfc6746","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c7076e53d8315ef3b72f093887c14680228b37ece2db41f87610e08c1f5ddee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:10:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:10:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c7076e53d8315ef3b72f093887c14680228b37ece2db41f87610e08c1f5ddee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c7076e53d8315ef3b72f093887c14680228b37ece2db41f87610e08c1f5ddee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:10:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:10:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c7076e53d8315ef3b72f093887c14680228b37ece2db41f87610e08c1f5ddee"}
{"level":"error","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4c7076e53d8315ef3b72f093887c14680228b37ece2db41f87610e08c1f5ddee","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4c7076e53d8315ef3b72f093887c14680228b37ece2db41f87610e08c1f5ddee\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c7076e53d8315ef3b72f093887c14680228b37ece2db41f87610e08c1f5ddee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:10:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:10:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4c7076e53d8315ef3b72f093887c14680228b37ece2db41f87610e08c1f5ddee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c7076e53d8315ef3b72f093887c14680228b37ece2db41f87610e08c1f5ddee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b48b66e9ecbb1c0ddbf7dfff34187e3200ed0d48998823ad2cb5bebc348828cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:10:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:10:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cefd3244f3098dcf4281b2ff4f6f796d6eff1642593f8001d53a2f65e5e7b3b"}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b48b66e9ecbb1c0ddbf7dfff34187e3200ed0d48998823ad2cb5bebc348828cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c7076e53d8315ef3b72f093887c14680228b37ece2db41f87610e08c1f5ddee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b48b66e9ecbb1c0ddbf7dfff34187e3200ed0d48998823ad2cb5bebc348828cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b48b66e9ecbb1c0ddbf7dfff34187e3200ed0d48998823ad2cb5bebc348828cc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aeaa1ed27db1275255afd77a1c64cb484085cc98f28d259153e41de348d17f42"}
{"level":"debug","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b48b66e9ecbb1c0ddbf7dfff34187e3200ed0d48998823ad2cb5bebc348828cc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b50fa30465011cd9450d00d400aad9bd8e0936e356f0b209c01b9aa8cdfc6746"}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c7076e53d8315ef3b72f093887c14680228b37ece2db41f87610e08c1f5ddee"}
{"level":"debug","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b48b66e9ecbb1c0ddbf7dfff34187e3200ed0d48998823ad2cb5bebc348828cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:10:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:10:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b48b66e9ecbb1c0ddbf7dfff34187e3200ed0d48998823ad2cb5bebc348828cc"}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b48b66e9ecbb1c0ddbf7dfff34187e3200ed0d48998823ad2cb5bebc348828cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b48b66e9ecbb1c0ddbf7dfff34187e3200ed0d48998823ad2cb5bebc348828cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"660839c60ec7435d2c86d921e8a0d59af7ed25b768b675c965964fe6cf08c2af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:10:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:10:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"660839c60ec7435d2c86d921e8a0d59af7ed25b768b675c965964fe6cf08c2af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"660839c60ec7435d2c86d921e8a0d59af7ed25b768b675c965964fe6cf08c2af","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b48b66e9ecbb1c0ddbf7dfff34187e3200ed0d48998823ad2cb5bebc348828cc"}
{"level":"debug","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"660839c60ec7435d2c86d921e8a0d59af7ed25b768b675c965964fe6cf08c2af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:10:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:10:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/660839c60ec7435d2c86d921e8a0d59af7ed25b768b675c965964fe6cf08c2af"}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e1cb25bf4ba0356155154743a22244a49cb63d3b820567a99767813c6d2eb88e"}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a7ab0a4343645c2039687df03b8dc513224d5039127d2cb8533d131db17b4a6d"}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"660839c60ec7435d2c86d921e8a0d59af7ed25b768b675c965964fe6cf08c2af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"660839c60ec7435d2c86d921e8a0d59af7ed25b768b675c965964fe6cf08c2af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:10:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:10:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["660839c60ec7435d2c86d921e8a0d59af7ed25b768b675c965964fe6cf08c2af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"660839c60ec7435d2c86d921e8a0d59af7ed25b768b675c965964fe6cf08c2af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"660839c60ec7435d2c86d921e8a0d59af7ed25b768b675c965964fe6cf08c2af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:10:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:10:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/660839c60ec7435d2c86d921e8a0d59af7ed25b768b675c965964fe6cf08c2af"}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"660839c60ec7435d2c86d921e8a0d59af7ed25b768b675c965964fe6cf08c2af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b48b66e9ecbb1c0ddbf7dfff34187e3200ed0d48998823ad2cb5bebc348828cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:10:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:10:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b48b66e9ecbb1c0ddbf7dfff34187e3200ed0d48998823ad2cb5bebc348828cc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/660839c60ec7435d2c86d921e8a0d59af7ed25b768b675c965964fe6cf08c2af"}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b48b66e9ecbb1c0ddbf7dfff34187e3200ed0d48998823ad2cb5bebc348828cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"660839c60ec7435d2c86d921e8a0d59af7ed25b768b675c965964fe6cf08c2af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b48b66e9ecbb1c0ddbf7dfff34187e3200ed0d48998823ad2cb5bebc348828cc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/660839c60ec7435d2c86d921e8a0d59af7ed25b768b675c965964fe6cf08c2af"}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fb98fd5bb7420566ef2d37a86696b1dd8c3a6af6e7f8e1441d5c0214ceedb01d"}
{"level":"debug","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"660839c60ec7435d2c86d921e8a0d59af7ed25b768b675c965964fe6cf08c2af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:10:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:10:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["660839c60ec7435d2c86d921e8a0d59af7ed25b768b675c965964fe6cf08c2af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"660839c60ec7435d2c86d921e8a0d59af7ed25b768b675c965964fe6cf08c2af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"660839c60ec7435d2c86d921e8a0d59af7ed25b768b675c965964fe6cf08c2af","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b48b66e9ecbb1c0ddbf7dfff34187e3200ed0d48998823ad2cb5bebc348828cc"}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ae8920577a4f7673ac7fa7f283fc87a9b14d65dca8c6c87cc7c2c350cab039a2"}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2cfcaf84541942a9c9e0c1e4d680360886a63a83302bad6a86e16ccf7be9a162"}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/660839c60ec7435d2c86d921e8a0d59af7ed25b768b675c965964fe6cf08c2af"}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b971e3a7d19f06b4471ad2d40ebac7b987e20e61e569fcb2de26421c435b10e2"}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5cca51b234255b64c840ca9074e859a15aac3cef89669151268395f4838fac49"}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/31270d31cd7ab12555b1b17bc015dee4c0565b9854bf8d4abd8126b9ea0092a7"}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/28887c07f1f8d5d641f620811cafcc6cdef3b215782023490a1442223feb7e82"}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/406f6057d6216dc1a4bb9fb1a927208accf37327252fb6a155d13fa1ce2391aa"}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81"}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4e691a4020aa1f9550285f6f856c61ddc78c03893fe8503645082d70d3e747a8"}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a739902d04841ae07ab6dca46b29de2bc4cf68ba714ee6d21cceab31d2d7b7d5"}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/934456f08a512a336358de699c0b60545941d6330a64d99ee82a3d40ebb4df8f"}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/19d0c1c4d280799bbc6e9b8cc78ab502fd51a725c6527af2a653db9d11b5f7cb"}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3"}
{"level":"debug","ts":"2026-07-06T20:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd71a86b569ce80bdd38149f7d9e33bcbddaef74b868ce611a0c027afc720ddb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:10:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:10:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd71a86b569ce80bdd38149f7d9e33bcbddaef74b868ce611a0c027afc720ddb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd71a86b569ce80bdd38149f7d9e33bcbddaef74b868ce611a0c027afc720ddb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:10:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:10:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd71a86b569ce80bdd38149f7d9e33bcbddaef74b868ce611a0c027afc720ddb"}
{"level":"info","ts":"2026-07-06T20:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd71a86b569ce80bdd38149f7d9e33bcbddaef74b868ce611a0c027afc720ddb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd71a86b569ce80bdd38149f7d9e33bcbddaef74b868ce611a0c027afc720ddb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:10:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:10:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd71a86b569ce80bdd38149f7d9e33bcbddaef74b868ce611a0c027afc720ddb"}
{"level":"error","ts":"2026-07-06T20:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cd71a86b569ce80bdd38149f7d9e33bcbddaef74b868ce611a0c027afc720ddb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cd71a86b569ce80bdd38149f7d9e33bcbddaef74b868ce611a0c027afc720ddb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd71a86b569ce80bdd38149f7d9e33bcbddaef74b868ce611a0c027afc720ddb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd71a86b569ce80bdd38149f7d9e33bcbddaef74b868ce611a0c027afc720ddb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd71a86b569ce80bdd38149f7d9e33bcbddaef74b868ce611a0c027afc720ddb"}
{"level":"debug","ts":"2026-07-06T20:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd71a86b569ce80bdd38149f7d9e33bcbddaef74b868ce611a0c027afc720ddb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:10:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:10:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd71a86b569ce80bdd38149f7d9e33bcbddaef74b868ce611a0c027afc720ddb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd71a86b569ce80bdd38149f7d9e33bcbddaef74b868ce611a0c027afc720ddb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd71a86b569ce80bdd38149f7d9e33bcbddaef74b868ce611a0c027afc720ddb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:10:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:10:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd71a86b569ce80bdd38149f7d9e33bcbddaef74b868ce611a0c027afc720ddb"}
{"level":"info","ts":"2026-07-06T20:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd71a86b569ce80bdd38149f7d9e33bcbddaef74b868ce611a0c027afc720ddb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd71a86b569ce80bdd38149f7d9e33bcbddaef74b868ce611a0c027afc720ddb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd71a86b569ce80bdd38149f7d9e33bcbddaef74b868ce611a0c027afc720ddb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd71a86b569ce80bdd38149f7d9e33bcbddaef74b868ce611a0c027afc720ddb"}
{"level":"debug","ts":"2026-07-06T20:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd71a86b569ce80bdd38149f7d9e33bcbddaef74b868ce611a0c027afc720ddb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:10:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:10:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd71a86b569ce80bdd38149f7d9e33bcbddaef74b868ce611a0c027afc720ddb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd71a86b569ce80bdd38149f7d9e33bcbddaef74b868ce611a0c027afc720ddb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd71a86b569ce80bdd38149f7d9e33bcbddaef74b868ce611a0c027afc720ddb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd71a86b569ce80bdd38149f7d9e33bcbddaef74b868ce611a0c027afc720ddb"}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a979ffa78306320309aea2135140855ae439d06813c635c1cbc1368581f82b04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a979ffa78306320309aea2135140855ae439d06813c635c1cbc1368581f82b04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a979ffa78306320309aea2135140855ae439d06813c635c1cbc1368581f82b04","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a979ffa78306320309aea2135140855ae439d06813c635c1cbc1368581f82b04"}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a979ffa78306320309aea2135140855ae439d06813c635c1cbc1368581f82b04","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a979ffa78306320309aea2135140855ae439d06813c635c1cbc1368581f82b04"}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a979ffa78306320309aea2135140855ae439d06813c635c1cbc1368581f82b04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a979ffa78306320309aea2135140855ae439d06813c635c1cbc1368581f82b04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a979ffa78306320309aea2135140855ae439d06813c635c1cbc1368581f82b04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a979ffa78306320309aea2135140855ae439d06813c635c1cbc1368581f82b04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a979ffa78306320309aea2135140855ae439d06813c635c1cbc1368581f82b04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a979ffa78306320309aea2135140855ae439d06813c635c1cbc1368581f82b04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a979ffa78306320309aea2135140855ae439d06813c635c1cbc1368581f82b04","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a979ffa78306320309aea2135140855ae439d06813c635c1cbc1368581f82b04"}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a979ffa78306320309aea2135140855ae439d06813c635c1cbc1368581f82b04","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a979ffa78306320309aea2135140855ae439d06813c635c1cbc1368581f82b04"}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a979ffa78306320309aea2135140855ae439d06813c635c1cbc1368581f82b04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a979ffa78306320309aea2135140855ae439d06813c635c1cbc1368581f82b04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a979ffa78306320309aea2135140855ae439d06813c635c1cbc1368581f82b04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a979ffa78306320309aea2135140855ae439d06813c635c1cbc1368581f82b04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a979ffa78306320309aea2135140855ae439d06813c635c1cbc1368581f82b04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a979ffa78306320309aea2135140855ae439d06813c635c1cbc1368581f82b04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6aeeac26bbe5d7e79d2b94e585c52b63637ed2d4a927f478b928eebdce97a632","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a979ffa78306320309aea2135140855ae439d06813c635c1cbc1368581f82b04"}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6aeeac26bbe5d7e79d2b94e585c52b63637ed2d4a927f478b928eebdce97a632","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a979ffa78306320309aea2135140855ae439d06813c635c1cbc1368581f82b04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a979ffa78306320309aea2135140855ae439d06813c635c1cbc1368581f82b04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a979ffa78306320309aea2135140855ae439d06813c635c1cbc1368581f82b04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6aeeac26bbe5d7e79d2b94e585c52b63637ed2d4a927f478b928eebdce97a632","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6aeeac26bbe5d7e79d2b94e585c52b63637ed2d4a927f478b928eebdce97a632","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a979ffa78306320309aea2135140855ae439d06813c635c1cbc1368581f82b04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6aeeac26bbe5d7e79d2b94e585c52b63637ed2d4a927f478b928eebdce97a632","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6aeeac26bbe5d7e79d2b94e585c52b63637ed2d4a927f478b928eebdce97a632"}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6aeeac26bbe5d7e79d2b94e585c52b63637ed2d4a927f478b928eebdce97a632","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6aeeac26bbe5d7e79d2b94e585c52b63637ed2d4a927f478b928eebdce97a632"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6aeeac26bbe5d7e79d2b94e585c52b63637ed2d4a927f478b928eebdce97a632","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6aeeac26bbe5d7e79d2b94e585c52b63637ed2d4a927f478b928eebdce97a632","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a979ffa78306320309aea2135140855ae439d06813c635c1cbc1368581f82b04"}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e88afde50b37a5adc835a0c14708bab9837ea14dc0f22b62940251ed78ed7c2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6aeeac26bbe5d7e79d2b94e585c52b63637ed2d4a927f478b928eebdce97a632"}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e88afde50b37a5adc835a0c14708bab9837ea14dc0f22b62940251ed78ed7c2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e88afde50b37a5adc835a0c14708bab9837ea14dc0f22b62940251ed78ed7c2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e88afde50b37a5adc835a0c14708bab9837ea14dc0f22b62940251ed78ed7c2f"}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e88afde50b37a5adc835a0c14708bab9837ea14dc0f22b62940251ed78ed7c2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e88afde50b37a5adc835a0c14708bab9837ea14dc0f22b62940251ed78ed7c2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e88afde50b37a5adc835a0c14708bab9837ea14dc0f22b62940251ed78ed7c2f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e88afde50b37a5adc835a0c14708bab9837ea14dc0f22b62940251ed78ed7c2f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e88afde50b37a5adc835a0c14708bab9837ea14dc0f22b62940251ed78ed7c2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e88afde50b37a5adc835a0c14708bab9837ea14dc0f22b62940251ed78ed7c2f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e88afde50b37a5adc835a0c14708bab9837ea14dc0f22b62940251ed78ed7c2f"}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e88afde50b37a5adc835a0c14708bab9837ea14dc0f22b62940251ed78ed7c2f"}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e88afde50b37a5adc835a0c14708bab9837ea14dc0f22b62940251ed78ed7c2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e88afde50b37a5adc835a0c14708bab9837ea14dc0f22b62940251ed78ed7c2f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e88afde50b37a5adc835a0c14708bab9837ea14dc0f22b62940251ed78ed7c2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a5132d83cae638cf97d81af99b823c1867c88bdf92f6ef2fd3e69379cac96bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a5132d83cae638cf97d81af99b823c1867c88bdf92f6ef2fd3e69379cac96bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e88afde50b37a5adc835a0c14708bab9837ea14dc0f22b62940251ed78ed7c2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a5132d83cae638cf97d81af99b823c1867c88bdf92f6ef2fd3e69379cac96bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a5132d83cae638cf97d81af99b823c1867c88bdf92f6ef2fd3e69379cac96bf"}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a5132d83cae638cf97d81af99b823c1867c88bdf92f6ef2fd3e69379cac96bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a5132d83cae638cf97d81af99b823c1867c88bdf92f6ef2fd3e69379cac96bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e88afde50b37a5adc835a0c14708bab9837ea14dc0f22b62940251ed78ed7c2f"}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a5132d83cae638cf97d81af99b823c1867c88bdf92f6ef2fd3e69379cac96bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a5132d83cae638cf97d81af99b823c1867c88bdf92f6ef2fd3e69379cac96bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a5132d83cae638cf97d81af99b823c1867c88bdf92f6ef2fd3e69379cac96bf"}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a5132d83cae638cf97d81af99b823c1867c88bdf92f6ef2fd3e69379cac96bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a5132d83cae638cf97d81af99b823c1867c88bdf92f6ef2fd3e69379cac96bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a5132d83cae638cf97d81af99b823c1867c88bdf92f6ef2fd3e69379cac96bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a5132d83cae638cf97d81af99b823c1867c88bdf92f6ef2fd3e69379cac96bf"}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a5132d83cae638cf97d81af99b823c1867c88bdf92f6ef2fd3e69379cac96bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c1a67bccaed10a61fc41b6982eb34a5b8cfb0ab86f22157319199c42430eb22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a5132d83cae638cf97d81af99b823c1867c88bdf92f6ef2fd3e69379cac96bf"}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c1a67bccaed10a61fc41b6982eb34a5b8cfb0ab86f22157319199c42430eb22","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c1a67bccaed10a61fc41b6982eb34a5b8cfb0ab86f22157319199c42430eb22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c1a67bccaed10a61fc41b6982eb34a5b8cfb0ab86f22157319199c42430eb22"}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c1a67bccaed10a61fc41b6982eb34a5b8cfb0ab86f22157319199c42430eb22","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a5132d83cae638cf97d81af99b823c1867c88bdf92f6ef2fd3e69379cac96bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a5132d83cae638cf97d81af99b823c1867c88bdf92f6ef2fd3e69379cac96bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a5132d83cae638cf97d81af99b823c1867c88bdf92f6ef2fd3e69379cac96bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c1a67bccaed10a61fc41b6982eb34a5b8cfb0ab86f22157319199c42430eb22","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c1a67bccaed10a61fc41b6982eb34a5b8cfb0ab86f22157319199c42430eb22"}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a5132d83cae638cf97d81af99b823c1867c88bdf92f6ef2fd3e69379cac96bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c1a67bccaed10a61fc41b6982eb34a5b8cfb0ab86f22157319199c42430eb22","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c1a67bccaed10a61fc41b6982eb34a5b8cfb0ab86f22157319199c42430eb22"}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08b5a57e5f307ff731d3db9d35406455a3e4e34c67f634b3b1076c193816c4c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a5132d83cae638cf97d81af99b823c1867c88bdf92f6ef2fd3e69379cac96bf"}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08b5a57e5f307ff731d3db9d35406455a3e4e34c67f634b3b1076c193816c4c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08b5a57e5f307ff731d3db9d35406455a3e4e34c67f634b3b1076c193816c4c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08b5a57e5f307ff731d3db9d35406455a3e4e34c67f634b3b1076c193816c4c9"}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08b5a57e5f307ff731d3db9d35406455a3e4e34c67f634b3b1076c193816c4c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c1a67bccaed10a61fc41b6982eb34a5b8cfb0ab86f22157319199c42430eb22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c1a67bccaed10a61fc41b6982eb34a5b8cfb0ab86f22157319199c42430eb22"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08b5a57e5f307ff731d3db9d35406455a3e4e34c67f634b3b1076c193816c4c9"}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c1a67bccaed10a61fc41b6982eb34a5b8cfb0ab86f22157319199c42430eb22","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08b5a57e5f307ff731d3db9d35406455a3e4e34c67f634b3b1076c193816c4c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c1a67bccaed10a61fc41b6982eb34a5b8cfb0ab86f22157319199c42430eb22","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08b5a57e5f307ff731d3db9d35406455a3e4e34c67f634b3b1076c193816c4c9"}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08b5a57e5f307ff731d3db9d35406455a3e4e34c67f634b3b1076c193816c4c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08b5a57e5f307ff731d3db9d35406455a3e4e34c67f634b3b1076c193816c4c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c1a67bccaed10a61fc41b6982eb34a5b8cfb0ab86f22157319199c42430eb22"}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08b5a57e5f307ff731d3db9d35406455a3e4e34c67f634b3b1076c193816c4c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08b5a57e5f307ff731d3db9d35406455a3e4e34c67f634b3b1076c193816c4c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08b5a57e5f307ff731d3db9d35406455a3e4e34c67f634b3b1076c193816c4c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39370ebbcd6c79e11364c6b59db0e56106f6fc062e081cf5d45b95f0b61bc988","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08b5a57e5f307ff731d3db9d35406455a3e4e34c67f634b3b1076c193816c4c9"}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39370ebbcd6c79e11364c6b59db0e56106f6fc062e081cf5d45b95f0b61bc988","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08b5a57e5f307ff731d3db9d35406455a3e4e34c67f634b3b1076c193816c4c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08b5a57e5f307ff731d3db9d35406455a3e4e34c67f634b3b1076c193816c4c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39370ebbcd6c79e11364c6b59db0e56106f6fc062e081cf5d45b95f0b61bc988"}
{"level":"info","ts":"2026-07-06T20:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08b5a57e5f307ff731d3db9d35406455a3e4e34c67f634b3b1076c193816c4c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39370ebbcd6c79e11364c6b59db0e56106f6fc062e081cf5d45b95f0b61bc988","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:10:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:10:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39370ebbcd6c79e11364c6b59db0e56106f6fc062e081cf5d45b95f0b61bc988"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08b5a57e5f307ff731d3db9d35406455a3e4e34c67f634b3b1076c193816c4c9"}
{"level":"info","ts":"2026-07-06T20:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39370ebbcd6c79e11364c6b59db0e56106f6fc062e081cf5d45b95f0b61bc988","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08b5a57e5f307ff731d3db9d35406455a3e4e34c67f634b3b1076c193816c4c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39370ebbcd6c79e11364c6b59db0e56106f6fc062e081cf5d45b95f0b61bc988","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:10:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:10:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39370ebbcd6c79e11364c6b59db0e56106f6fc062e081cf5d45b95f0b61bc988","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39370ebbcd6c79e11364c6b59db0e56106f6fc062e081cf5d45b95f0b61bc988","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39370ebbcd6c79e11364c6b59db0e56106f6fc062e081cf5d45b95f0b61bc988"}
{"level":"debug","ts":"2026-07-06T20:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39370ebbcd6c79e11364c6b59db0e56106f6fc062e081cf5d45b95f0b61bc988","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:10:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:10:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39370ebbcd6c79e11364c6b59db0e56106f6fc062e081cf5d45b95f0b61bc988"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39370ebbcd6c79e11364c6b59db0e56106f6fc062e081cf5d45b95f0b61bc988","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39370ebbcd6c79e11364c6b59db0e56106f6fc062e081cf5d45b95f0b61bc988","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08b5a57e5f307ff731d3db9d35406455a3e4e34c67f634b3b1076c193816c4c9"}
{"level":"info","ts":"2026-07-06T20:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39370ebbcd6c79e11364c6b59db0e56106f6fc062e081cf5d45b95f0b61bc988"}
{"level":"debug","ts":"2026-07-06T20:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd71a86b569ce80bdd38149f7d9e33bcbddaef74b868ce611a0c027afc720ddb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd71a86b569ce80bdd38149f7d9e33bcbddaef74b868ce611a0c027afc720ddb"}
{"level":"debug","ts":"2026-07-06T20:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:11:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:11:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba"}
{"level":"debug","ts":"2026-07-06T20:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba"}
{"level":"debug","ts":"2026-07-06T20:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:11:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:11:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:11:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:11:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba"}
{"level":"debug","ts":"2026-07-06T20:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94a522b91ddc5afb6660d3129491f2872e5572d2d0accc3e8683f3024ef01b57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba"}
{"level":"info","ts":"2026-07-06T20:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94a522b91ddc5afb6660d3129491f2872e5572d2d0accc3e8683f3024ef01b57"}
{"level":"debug","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:11:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:11:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba"}
{"level":"debug","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a979ffa78306320309aea2135140855ae439d06813c635c1cbc1368581f82b04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:11:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:11:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a979ffa78306320309aea2135140855ae439d06813c635c1cbc1368581f82b04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a979ffa78306320309aea2135140855ae439d06813c635c1cbc1368581f82b04","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a979ffa78306320309aea2135140855ae439d06813c635c1cbc1368581f82b04"}
{"level":"debug","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a979ffa78306320309aea2135140855ae439d06813c635c1cbc1368581f82b04","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a979ffa78306320309aea2135140855ae439d06813c635c1cbc1368581f82b04"}
{"level":"debug","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a979ffa78306320309aea2135140855ae439d06813c635c1cbc1368581f82b04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:11:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:11:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a979ffa78306320309aea2135140855ae439d06813c635c1cbc1368581f82b04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a979ffa78306320309aea2135140855ae439d06813c635c1cbc1368581f82b04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a979ffa78306320309aea2135140855ae439d06813c635c1cbc1368581f82b04","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a979ffa78306320309aea2135140855ae439d06813c635c1cbc1368581f82b04"}
{"level":"debug","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"660839c60ec7435d2c86d921e8a0d59af7ed25b768b675c965964fe6cf08c2af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:11:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:11:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"660839c60ec7435d2c86d921e8a0d59af7ed25b768b675c965964fe6cf08c2af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"660839c60ec7435d2c86d921e8a0d59af7ed25b768b675c965964fe6cf08c2af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"660839c60ec7435d2c86d921e8a0d59af7ed25b768b675c965964fe6cf08c2af","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/660839c60ec7435d2c86d921e8a0d59af7ed25b768b675c965964fe6cf08c2af"}
{"level":"debug","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"660839c60ec7435d2c86d921e8a0d59af7ed25b768b675c965964fe6cf08c2af","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/660839c60ec7435d2c86d921e8a0d59af7ed25b768b675c965964fe6cf08c2af"}
{"level":"debug","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"660839c60ec7435d2c86d921e8a0d59af7ed25b768b675c965964fe6cf08c2af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:11:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:11:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["660839c60ec7435d2c86d921e8a0d59af7ed25b768b675c965964fe6cf08c2af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"660839c60ec7435d2c86d921e8a0d59af7ed25b768b675c965964fe6cf08c2af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"660839c60ec7435d2c86d921e8a0d59af7ed25b768b675c965964fe6cf08c2af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:11:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:11:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"660839c60ec7435d2c86d921e8a0d59af7ed25b768b675c965964fe6cf08c2af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08b5a57e5f307ff731d3db9d35406455a3e4e34c67f634b3b1076c193816c4c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"660839c60ec7435d2c86d921e8a0d59af7ed25b768b675c965964fe6cf08c2af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"660839c60ec7435d2c86d921e8a0d59af7ed25b768b675c965964fe6cf08c2af","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/660839c60ec7435d2c86d921e8a0d59af7ed25b768b675c965964fe6cf08c2af"}
{"level":"debug","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"660839c60ec7435d2c86d921e8a0d59af7ed25b768b675c965964fe6cf08c2af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:11:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:11:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["660839c60ec7435d2c86d921e8a0d59af7ed25b768b675c965964fe6cf08c2af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"660839c60ec7435d2c86d921e8a0d59af7ed25b768b675c965964fe6cf08c2af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"660839c60ec7435d2c86d921e8a0d59af7ed25b768b675c965964fe6cf08c2af","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08b5a57e5f307ff731d3db9d35406455a3e4e34c67f634b3b1076c193816c4c9"}
{"level":"debug","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63ba19f78e4218c5653c2360fddd3e8569d317384c1dd1baab134db6b08446ca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/660839c60ec7435d2c86d921e8a0d59af7ed25b768b675c965964fe6cf08c2af"}
{"level":"info","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63ba19f78e4218c5653c2360fddd3e8569d317384c1dd1baab134db6b08446ca"}
{"level":"debug","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6aeeac26bbe5d7e79d2b94e585c52b63637ed2d4a927f478b928eebdce97a632","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6aeeac26bbe5d7e79d2b94e585c52b63637ed2d4a927f478b928eebdce97a632"}
{"level":"debug","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aeaa1ed27db1275255afd77a1c64cb484085cc98f28d259153e41de348d17f42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:11:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:11:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aeaa1ed27db1275255afd77a1c64cb484085cc98f28d259153e41de348d17f42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aeaa1ed27db1275255afd77a1c64cb484085cc98f28d259153e41de348d17f42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aeaa1ed27db1275255afd77a1c64cb484085cc98f28d259153e41de348d17f42","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aeaa1ed27db1275255afd77a1c64cb484085cc98f28d259153e41de348d17f42"}
{"level":"debug","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aeaa1ed27db1275255afd77a1c64cb484085cc98f28d259153e41de348d17f42","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aeaa1ed27db1275255afd77a1c64cb484085cc98f28d259153e41de348d17f42"}
{"level":"debug","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aeaa1ed27db1275255afd77a1c64cb484085cc98f28d259153e41de348d17f42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:11:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:11:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aeaa1ed27db1275255afd77a1c64cb484085cc98f28d259153e41de348d17f42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aeaa1ed27db1275255afd77a1c64cb484085cc98f28d259153e41de348d17f42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aeaa1ed27db1275255afd77a1c64cb484085cc98f28d259153e41de348d17f42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8b6352daa7124999985572acb226e88b9be9d252320328902475045fcda4922","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aeaa1ed27db1275255afd77a1c64cb484085cc98f28d259153e41de348d17f42"}
{"level":"info","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8b6352daa7124999985572acb226e88b9be9d252320328902475045fcda4922"}
{"level":"debug","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e88afde50b37a5adc835a0c14708bab9837ea14dc0f22b62940251ed78ed7c2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa3471bd660168d2d231595e247b23b360cfaafc1387924f67f6a1133e6d085d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e88afde50b37a5adc835a0c14708bab9837ea14dc0f22b62940251ed78ed7c2f"}
{"level":"debug","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b48b66e9ecbb1c0ddbf7dfff34187e3200ed0d48998823ad2cb5bebc348828cc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa3471bd660168d2d231595e247b23b360cfaafc1387924f67f6a1133e6d085d"}
{"level":"debug","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b50fa30465011cd9450d00d400aad9bd8e0936e356f0b209c01b9aa8cdfc6746","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9dc9f8553d3205d669cb60c0e9ad4425386f0eaa69f409d7e1545fa2d5bc546","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b48b66e9ecbb1c0ddbf7dfff34187e3200ed0d48998823ad2cb5bebc348828cc"}
{"level":"debug","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39370ebbcd6c79e11364c6b59db0e56106f6fc062e081cf5d45b95f0b61bc988","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b50fa30465011cd9450d00d400aad9bd8e0936e356f0b209c01b9aa8cdfc6746"}
{"level":"debug","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9cefd3244f3098dcf4281b2ff4f6f796d6eff1642593f8001d53a2f65e5e7b3b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9dc9f8553d3205d669cb60c0e9ad4425386f0eaa69f409d7e1545fa2d5bc546"}
{"level":"debug","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c7076e53d8315ef3b72f093887c14680228b37ece2db41f87610e08c1f5ddee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39370ebbcd6c79e11364c6b59db0e56106f6fc062e081cf5d45b95f0b61bc988"}
{"level":"debug","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a5132d83cae638cf97d81af99b823c1867c88bdf92f6ef2fd3e69379cac96bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cefd3244f3098dcf4281b2ff4f6f796d6eff1642593f8001d53a2f65e5e7b3b"}
{"level":"info","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c7076e53d8315ef3b72f093887c14680228b37ece2db41f87610e08c1f5ddee"}
{"level":"debug","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c1a67bccaed10a61fc41b6982eb34a5b8cfb0ab86f22157319199c42430eb22","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a5132d83cae638cf97d81af99b823c1867c88bdf92f6ef2fd3e69379cac96bf"}
{"level":"info","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c1a67bccaed10a61fc41b6982eb34a5b8cfb0ab86f22157319199c42430eb22"}
{"level":"info","ts":"2026-07-06T20:11:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ee1ae3f8-0fd7-491e-a51b-5cf7793af95b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:40778","PortSpecifier":{"PortValue":40778}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ee1ae3f8-0fd7-491e-a51b-5cf7793af95b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-7ba461.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:11:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ee1ae3f8-0fd7-491e-a51b-5cf7793af95b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:40778","PortSpecifier":{"PortValue":40778}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368663,"nanos":780806394},"http":{"id":"ee1ae3f8-0fd7-491e-a51b-5cf7793af95b","method":"POST","headers":{":authority":"e2e-shared-a-7ba461.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:11:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ee1ae3f8-0fd7-491e-a51b-5cf7793af95b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:11:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ee1ae3f8-0fd7-491e-a51b-5cf7793af95b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4c5c9b1d-59e4-4c06-9c51-913c43475eb5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b754c299-5a20-40bb-9dad-929c5cb04a96"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14fb9e990410"]}}
{"level":"debug","ts":"2026-07-06T20:11:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ee1ae3f8-0fd7-491e-a51b-5cf7793af95b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14fb9e990410"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b754c299-5a20-40bb-9dad-929c5cb04a96"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4c5c9b1d-59e4-4c06-9c51-913c43475eb5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"63ba19f78e4218c5653c2360fddd3e8569d317384c1dd1baab134db6b08446ca"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7ba461.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:11:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ee1ae3f8-0fd7-491e-a51b-5cf7793af95b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ee1ae3f8-0fd7-491e-a51b-5cf7793af95b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ee1ae3f8-0fd7-491e-a51b-5cf7793af95b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7ba461/rate-test-model-7ba461\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ee1ae3f8-0fd7-491e-a51b-5cf7793af95b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:11:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ee1ae3f8-0fd7-491e-a51b-5cf7793af95b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:11:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ee1ae3f8-0fd7-491e-a51b-5cf7793af95b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:11:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ee1ae3f8-0fd7-491e-a51b-5cf7793af95b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:11:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ee1ae3f8-0fd7-491e-a51b-5cf7793af95b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:11:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f246d640-5747-477f-b673-b349365973b8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34840","PortSpecifier":{"PortValue":34840}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f246d640-5747-477f-b673-b349365973b8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ebe4df.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:11:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f246d640-5747-477f-b673-b349365973b8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34840","PortSpecifier":{"PortValue":34840}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368663,"nanos":820272589},"http":{"id":"f246d640-5747-477f-b673-b349365973b8","method":"POST","headers":{":authority":"e2e-shared-b-ebe4df.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:11:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f246d640-5747-477f-b673-b349365973b8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:11:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f246d640-5747-477f-b673-b349365973b8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4c5c9b1d-59e4-4c06-9c51-913c43475eb5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b754c299-5a20-40bb-9dad-929c5cb04a96"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14fb9e990410"]}}
{"level":"debug","ts":"2026-07-06T20:11:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f246d640-5747-477f-b673-b349365973b8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14fb9e990410"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b754c299-5a20-40bb-9dad-929c5cb04a96"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4c5c9b1d-59e4-4c06-9c51-913c43475eb5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ebe4df.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:11:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f246d640-5747-477f-b673-b349365973b8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f246d640-5747-477f-b673-b349365973b8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f246d640-5747-477f-b673-b349365973b8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ebe4df/rate-test-model-ebe4df\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f246d640-5747-477f-b673-b349365973b8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:11:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f246d640-5747-477f-b673-b349365973b8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:11:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f246d640-5747-477f-b673-b349365973b8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:11:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f246d640-5747-477f-b673-b349365973b8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:11:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f246d640-5747-477f-b673-b349365973b8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:11:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b3aae402-eb0c-4cb2-9ec4-69a572679972","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:40794","PortSpecifier":{"PortValue":40794}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b3aae402-eb0c-4cb2-9ec4-69a572679972","method":"POST","path":"/ai-tenant-e2e-shared-a-7ba461/rate-test-model-7ba461/v1/completions","host":"e2e-shared-a-7ba461.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:11:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b3aae402-eb0c-4cb2-9ec4-69a572679972","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:40794","PortSpecifier":{"PortValue":40794}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368663,"nanos":859043256},"http":{"id":"b3aae402-eb0c-4cb2-9ec4-69a572679972","method":"POST","headers":{":authority":"e2e-shared-a-7ba461.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7ba461/rate-test-model-7ba461/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:11:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b3aae402-eb0c-4cb2-9ec4-69a572679972","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Ekaka42lAvtkwugj_ZfcwlR1bg4Cz5vO9lOQC92cAAaZjlT5VkKoBcgzhtIz"}
{"level":"debug","ts":"2026-07-06T20:11:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b3aae402-eb0c-4cb2-9ec4-69a572679972","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7ba461.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Ekaka42lAvtkwugj_ZfcwlR1bg4Cz5vO9lOQC92cAAaZjlT5VkKoBcgzhtIz\"}"}
{"level":"debug","ts":"2026-07-06T20:11:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b3aae402-eb0c-4cb2-9ec4-69a572679972","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7ba461.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"bb16abb0-5c37-4584-8a2e-63e524cd30f2","keyName":"e2e-rate-a-16fffd","subscription":"e2e-rate-iso-a-16fffd","tenant":"e2e-shared-a-7ba461","userId":"bb16abb0-5c37-4584-8a2e-63e524cd30f2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:11:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b3aae402-eb0c-4cb2-9ec4-69a572679972","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7ba461.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7ba461/rate-test-model-7ba461\",\"requestedSubscription\":\"e2e-rate-iso-a-16fffd\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T20:11:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b3aae402-eb0c-4cb2-9ec4-69a572679972","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7ba461.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7ba461","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-16fffd","namespace":"ai-tenant-e2e-shared-a-7ba461","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T20:11:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b3aae402-eb0c-4cb2-9ec4-69a572679972","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:11:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3aae402-eb0c-4cb2-9ec4-69a572679972","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3aae402-eb0c-4cb2-9ec4-69a572679972","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3aae402-eb0c-4cb2-9ec4-69a572679972","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7ba461/rate-test-model-7ba461\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3aae402-eb0c-4cb2-9ec4-69a572679972","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b3aae402-eb0c-4cb2-9ec4-69a572679972","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:11:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b3aae402-eb0c-4cb2-9ec4-69a572679972","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:11:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b3aae402-eb0c-4cb2-9ec4-69a572679972","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-16fffd"}
{"level":"debug","ts":"2026-07-06T20:11:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b3aae402-eb0c-4cb2-9ec4-69a572679972","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"bb16abb0-5c37-4584-8a2e-63e524cd30f2","keyName":"e2e-rate-a-16fffd","selected_subscription":"e2e-rate-iso-a-16fffd","selected_subscription_key":"ai-tenant-e2e-shared-a-7ba461/e2e-rate-iso-a-16fffd@ai-tenant-e2e-shared-a-7ba461/rate-test-model-7ba461","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7ba461","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-16fffd","namespace":"ai-tenant-e2e-shared-a-7ba461","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T20:11:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b3aae402-eb0c-4cb2-9ec4-69a572679972","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:11:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b3aae402-eb0c-4cb2-9ec4-69a572679972","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:11:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d6460022-eb69-4eac-9ca8-256ec1ce8ef8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:40806","PortSpecifier":{"PortValue":40806}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d6460022-eb69-4eac-9ca8-256ec1ce8ef8","method":"POST","path":"/ai-tenant-e2e-shared-a-7ba461/rate-test-model-7ba461/v1/completions","host":"e2e-shared-a-7ba461.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d6460022-eb69-4eac-9ca8-256ec1ce8ef8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:40806","PortSpecifier":{"PortValue":40806}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368664,"nanos":909753521},"http":{"id":"d6460022-eb69-4eac-9ca8-256ec1ce8ef8","method":"POST","headers":{":authority":"e2e-shared-a-7ba461.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7ba461/rate-test-model-7ba461/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d6460022-eb69-4eac-9ca8-256ec1ce8ef8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Ekaka42lAvtkwugj_ZfcwlR1bg4Cz5vO9lOQC92cAAaZjlT5VkKoBcgzhtIz"}
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d6460022-eb69-4eac-9ca8-256ec1ce8ef8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7ba461.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Ekaka42lAvtkwugj_ZfcwlR1bg4Cz5vO9lOQC92cAAaZjlT5VkKoBcgzhtIz\"}"}
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d6460022-eb69-4eac-9ca8-256ec1ce8ef8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7ba461.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"bb16abb0-5c37-4584-8a2e-63e524cd30f2","keyName":"e2e-rate-a-16fffd","subscription":"e2e-rate-iso-a-16fffd","tenant":"e2e-shared-a-7ba461","userId":"bb16abb0-5c37-4584-8a2e-63e524cd30f2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d6460022-eb69-4eac-9ca8-256ec1ce8ef8","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7ba461.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7ba461/rate-test-model-7ba461\",\"requestedSubscription\":\"e2e-rate-iso-a-16fffd\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d6460022-eb69-4eac-9ca8-256ec1ce8ef8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7ba461.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7ba461","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-16fffd","namespace":"ai-tenant-e2e-shared-a-7ba461","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d6460022-eb69-4eac-9ca8-256ec1ce8ef8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d6460022-eb69-4eac-9ca8-256ec1ce8ef8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d6460022-eb69-4eac-9ca8-256ec1ce8ef8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d6460022-eb69-4eac-9ca8-256ec1ce8ef8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7ba461/rate-test-model-7ba461\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d6460022-eb69-4eac-9ca8-256ec1ce8ef8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d6460022-eb69-4eac-9ca8-256ec1ce8ef8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d6460022-eb69-4eac-9ca8-256ec1ce8ef8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d6460022-eb69-4eac-9ca8-256ec1ce8ef8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-16fffd"}
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d6460022-eb69-4eac-9ca8-256ec1ce8ef8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"bb16abb0-5c37-4584-8a2e-63e524cd30f2","keyName":"e2e-rate-a-16fffd","selected_subscription":"e2e-rate-iso-a-16fffd","selected_subscription_key":"ai-tenant-e2e-shared-a-7ba461/e2e-rate-iso-a-16fffd@ai-tenant-e2e-shared-a-7ba461/rate-test-model-7ba461","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7ba461","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-16fffd","namespace":"ai-tenant-e2e-shared-a-7ba461","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T20:11:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d6460022-eb69-4eac-9ca8-256ec1ce8ef8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d6460022-eb69-4eac-9ca8-256ec1ce8ef8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:11:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"13763abb-5bbe-44b6-ba02-1ce0ce41f745","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:40810","PortSpecifier":{"PortValue":40810}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"13763abb-5bbe-44b6-ba02-1ce0ce41f745","method":"POST","path":"/ai-tenant-e2e-shared-a-7ba461/rate-test-model-7ba461/v1/completions","host":"e2e-shared-a-7ba461.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:11:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"13763abb-5bbe-44b6-ba02-1ce0ce41f745","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:40810","PortSpecifier":{"PortValue":40810}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368665,"nanos":950008827},"http":{"id":"13763abb-5bbe-44b6-ba02-1ce0ce41f745","method":"POST","headers":{":authority":"e2e-shared-a-7ba461.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7ba461/rate-test-model-7ba461/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:11:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"13763abb-5bbe-44b6-ba02-1ce0ce41f745","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Ekaka42lAvtkwugj_ZfcwlR1bg4Cz5vO9lOQC92cAAaZjlT5VkKoBcgzhtIz"}
{"level":"debug","ts":"2026-07-06T20:11:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"13763abb-5bbe-44b6-ba02-1ce0ce41f745","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7ba461.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Ekaka42lAvtkwugj_ZfcwlR1bg4Cz5vO9lOQC92cAAaZjlT5VkKoBcgzhtIz\"}"}
{"level":"debug","ts":"2026-07-06T20:11:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"13763abb-5bbe-44b6-ba02-1ce0ce41f745","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7ba461.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"bb16abb0-5c37-4584-8a2e-63e524cd30f2","keyName":"e2e-rate-a-16fffd","subscription":"e2e-rate-iso-a-16fffd","tenant":"e2e-shared-a-7ba461","userId":"bb16abb0-5c37-4584-8a2e-63e524cd30f2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:11:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"13763abb-5bbe-44b6-ba02-1ce0ce41f745","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7ba461.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7ba461/rate-test-model-7ba461\",\"requestedSubscription\":\"e2e-rate-iso-a-16fffd\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T20:11:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"13763abb-5bbe-44b6-ba02-1ce0ce41f745","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7ba461.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7ba461","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-16fffd","namespace":"ai-tenant-e2e-shared-a-7ba461","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T20:11:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"13763abb-5bbe-44b6-ba02-1ce0ce41f745","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:11:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13763abb-5bbe-44b6-ba02-1ce0ce41f745","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13763abb-5bbe-44b6-ba02-1ce0ce41f745","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13763abb-5bbe-44b6-ba02-1ce0ce41f745","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7ba461/rate-test-model-7ba461\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13763abb-5bbe-44b6-ba02-1ce0ce41f745","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13763abb-5bbe-44b6-ba02-1ce0ce41f745","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:11:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13763abb-5bbe-44b6-ba02-1ce0ce41f745","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-16fffd"}
{"level":"debug","ts":"2026-07-06T20:11:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13763abb-5bbe-44b6-ba02-1ce0ce41f745","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:11:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13763abb-5bbe-44b6-ba02-1ce0ce41f745","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"bb16abb0-5c37-4584-8a2e-63e524cd30f2","keyName":"e2e-rate-a-16fffd","selected_subscription":"e2e-rate-iso-a-16fffd","selected_subscription_key":"ai-tenant-e2e-shared-a-7ba461/e2e-rate-iso-a-16fffd@ai-tenant-e2e-shared-a-7ba461/rate-test-model-7ba461","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7ba461","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-16fffd","namespace":"ai-tenant-e2e-shared-a-7ba461","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T20:11:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"13763abb-5bbe-44b6-ba02-1ce0ce41f745","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:11:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"13763abb-5bbe-44b6-ba02-1ce0ce41f745","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:11:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"44cecc0f-d941-4dfb-a113-3c38d991dbfa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:60706","PortSpecifier":{"PortValue":60706}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"44cecc0f-d941-4dfb-a113-3c38d991dbfa","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-7ba461.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:11:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"44cecc0f-d941-4dfb-a113-3c38d991dbfa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:60706","PortSpecifier":{"PortValue":60706}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368678,"nanos":886294607},"http":{"id":"44cecc0f-d941-4dfb-a113-3c38d991dbfa","method":"POST","headers":{":authority":"e2e-shared-a-7ba461.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:11:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"44cecc0f-d941-4dfb-a113-3c38d991dbfa","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:11:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"44cecc0f-d941-4dfb-a113-3c38d991dbfa","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4c5c9b1d-59e4-4c06-9c51-913c43475eb5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b754c299-5a20-40bb-9dad-929c5cb04a96"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14fb9e990410"]}}
{"level":"debug","ts":"2026-07-06T20:11:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"44cecc0f-d941-4dfb-a113-3c38d991dbfa","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14fb9e990410"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b754c299-5a20-40bb-9dad-929c5cb04a96"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4c5c9b1d-59e4-4c06-9c51-913c43475eb5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"63ba19f78e4218c5653c2360fddd3e8569d317384c1dd1baab134db6b08446ca"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7ba461.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:11:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44cecc0f-d941-4dfb-a113-3c38d991dbfa","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44cecc0f-d941-4dfb-a113-3c38d991dbfa","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44cecc0f-d941-4dfb-a113-3c38d991dbfa","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7ba461/rate-test-model-7ba461\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"44cecc0f-d941-4dfb-a113-3c38d991dbfa","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:11:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"44cecc0f-d941-4dfb-a113-3c38d991dbfa","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:11:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"44cecc0f-d941-4dfb-a113-3c38d991dbfa","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T20:11:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"44cecc0f-d941-4dfb-a113-3c38d991dbfa","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:11:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"44cecc0f-d941-4dfb-a113-3c38d991dbfa","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:11:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6efe31c9-3b33-4cb5-ac8f-8edcb93ec7cf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:49036","PortSpecifier":{"PortValue":49036}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6efe31c9-3b33-4cb5-ac8f-8edcb93ec7cf","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ebe4df.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:11:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6efe31c9-3b33-4cb5-ac8f-8edcb93ec7cf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:49036","PortSpecifier":{"PortValue":49036}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368678,"nanos":947291005},"http":{"id":"6efe31c9-3b33-4cb5-ac8f-8edcb93ec7cf","method":"POST","headers":{":authority":"e2e-shared-b-ebe4df.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:11:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6efe31c9-3b33-4cb5-ac8f-8edcb93ec7cf","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:11:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6efe31c9-3b33-4cb5-ac8f-8edcb93ec7cf","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4c5c9b1d-59e4-4c06-9c51-913c43475eb5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b754c299-5a20-40bb-9dad-929c5cb04a96"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14fb9e990410"]}}
{"level":"debug","ts":"2026-07-06T20:11:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6efe31c9-3b33-4cb5-ac8f-8edcb93ec7cf","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14fb9e990410"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b754c299-5a20-40bb-9dad-929c5cb04a96"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4c5c9b1d-59e4-4c06-9c51-913c43475eb5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ebe4df.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:11:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6efe31c9-3b33-4cb5-ac8f-8edcb93ec7cf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6efe31c9-3b33-4cb5-ac8f-8edcb93ec7cf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6efe31c9-3b33-4cb5-ac8f-8edcb93ec7cf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ebe4df/rate-test-model-ebe4df\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6efe31c9-3b33-4cb5-ac8f-8edcb93ec7cf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:11:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6efe31c9-3b33-4cb5-ac8f-8edcb93ec7cf","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:11:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6efe31c9-3b33-4cb5-ac8f-8edcb93ec7cf","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:11:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6efe31c9-3b33-4cb5-ac8f-8edcb93ec7cf","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:11:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6efe31c9-3b33-4cb5-ac8f-8edcb93ec7cf","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:11:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"50785627-ea54-4f65-b391-c8fb17da43c5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:60708","PortSpecifier":{"PortValue":60708}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"50785627-ea54-4f65-b391-c8fb17da43c5","method":"POST","path":"/ai-tenant-e2e-shared-a-7ba461/rate-test-model-7ba461/v1/completions","host":"e2e-shared-a-7ba461.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:11:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"50785627-ea54-4f65-b391-c8fb17da43c5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:60708","PortSpecifier":{"PortValue":60708}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368678,"nanos":983237881},"http":{"id":"50785627-ea54-4f65-b391-c8fb17da43c5","method":"POST","headers":{":authority":"e2e-shared-a-7ba461.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7ba461/rate-test-model-7ba461/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:11:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"50785627-ea54-4f65-b391-c8fb17da43c5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-gjK6qfochzD6EvcT_5ByYVEWyxQoIn1v8XSXmrdOIaOGxxJXH8ZRcSR9mltl"}
{"level":"debug","ts":"2026-07-06T20:11:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"50785627-ea54-4f65-b391-c8fb17da43c5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7ba461.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-gjK6qfochzD6EvcT_5ByYVEWyxQoIn1v8XSXmrdOIaOGxxJXH8ZRcSR9mltl\"}"}
{"level":"debug","ts":"2026-07-06T20:11:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"50785627-ea54-4f65-b391-c8fb17da43c5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7ba461.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"96779a3a-55c8-4f88-913d-9d70c3806fec","keyName":"e2e-rate-a-cb6f9b","subscription":"e2e-rate-iso-a-cb6f9b","tenant":"e2e-shared-a-7ba461","userId":"96779a3a-55c8-4f88-913d-9d70c3806fec","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:11:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"50785627-ea54-4f65-b391-c8fb17da43c5","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7ba461.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7ba461/rate-test-model-7ba461\",\"requestedSubscription\":\"e2e-rate-iso-a-cb6f9b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T20:11:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"50785627-ea54-4f65-b391-c8fb17da43c5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7ba461.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7ba461","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cb6f9b","namespace":"ai-tenant-e2e-shared-a-7ba461","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T20:11:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"50785627-ea54-4f65-b391-c8fb17da43c5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:11:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50785627-ea54-4f65-b391-c8fb17da43c5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50785627-ea54-4f65-b391-c8fb17da43c5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50785627-ea54-4f65-b391-c8fb17da43c5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7ba461/rate-test-model-7ba461\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50785627-ea54-4f65-b391-c8fb17da43c5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50785627-ea54-4f65-b391-c8fb17da43c5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-cb6f9b"}
{"level":"debug","ts":"2026-07-06T20:11:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50785627-ea54-4f65-b391-c8fb17da43c5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:11:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50785627-ea54-4f65-b391-c8fb17da43c5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:11:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50785627-ea54-4f65-b391-c8fb17da43c5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"96779a3a-55c8-4f88-913d-9d70c3806fec","keyName":"e2e-rate-a-cb6f9b","selected_subscription":"e2e-rate-iso-a-cb6f9b","selected_subscription_key":"ai-tenant-e2e-shared-a-7ba461/e2e-rate-iso-a-cb6f9b@ai-tenant-e2e-shared-a-7ba461/rate-test-model-7ba461","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7ba461","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cb6f9b","namespace":"ai-tenant-e2e-shared-a-7ba461","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T20:11:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"50785627-ea54-4f65-b391-c8fb17da43c5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:11:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"50785627-ea54-4f65-b391-c8fb17da43c5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:11:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7ed2533d-b7dd-4c24-bedd-472e5a2d886e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:60720","PortSpecifier":{"PortValue":60720}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7ed2533d-b7dd-4c24-bedd-472e5a2d886e","method":"POST","path":"/ai-tenant-e2e-shared-a-7ba461/rate-test-model-7ba461/v1/completions","host":"e2e-shared-a-7ba461.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:11:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7ed2533d-b7dd-4c24-bedd-472e5a2d886e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:60720","PortSpecifier":{"PortValue":60720}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368680,"nanos":29020342},"http":{"id":"7ed2533d-b7dd-4c24-bedd-472e5a2d886e","method":"POST","headers":{":authority":"e2e-shared-a-7ba461.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7ba461/rate-test-model-7ba461/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:11:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7ed2533d-b7dd-4c24-bedd-472e5a2d886e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-gjK6qfochzD6EvcT_5ByYVEWyxQoIn1v8XSXmrdOIaOGxxJXH8ZRcSR9mltl"}
{"level":"debug","ts":"2026-07-06T20:11:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7ed2533d-b7dd-4c24-bedd-472e5a2d886e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7ba461.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-gjK6qfochzD6EvcT_5ByYVEWyxQoIn1v8XSXmrdOIaOGxxJXH8ZRcSR9mltl\"}"}
{"level":"debug","ts":"2026-07-06T20:11:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7ed2533d-b7dd-4c24-bedd-472e5a2d886e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7ba461.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"96779a3a-55c8-4f88-913d-9d70c3806fec","keyName":"e2e-rate-a-cb6f9b","subscription":"e2e-rate-iso-a-cb6f9b","tenant":"e2e-shared-a-7ba461","userId":"96779a3a-55c8-4f88-913d-9d70c3806fec","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:11:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7ed2533d-b7dd-4c24-bedd-472e5a2d886e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7ba461.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7ba461/rate-test-model-7ba461\",\"requestedSubscription\":\"e2e-rate-iso-a-cb6f9b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T20:11:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7ed2533d-b7dd-4c24-bedd-472e5a2d886e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7ba461.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7ba461","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cb6f9b","namespace":"ai-tenant-e2e-shared-a-7ba461","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T20:11:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7ed2533d-b7dd-4c24-bedd-472e5a2d886e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:11:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ed2533d-b7dd-4c24-bedd-472e5a2d886e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ed2533d-b7dd-4c24-bedd-472e5a2d886e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ed2533d-b7dd-4c24-bedd-472e5a2d886e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ed2533d-b7dd-4c24-bedd-472e5a2d886e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7ba461/rate-test-model-7ba461\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ed2533d-b7dd-4c24-bedd-472e5a2d886e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:11:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ed2533d-b7dd-4c24-bedd-472e5a2d886e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:11:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ed2533d-b7dd-4c24-bedd-472e5a2d886e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-cb6f9b"}
{"level":"debug","ts":"2026-07-06T20:11:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ed2533d-b7dd-4c24-bedd-472e5a2d886e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"96779a3a-55c8-4f88-913d-9d70c3806fec","keyName":"e2e-rate-a-cb6f9b","selected_subscription":"e2e-rate-iso-a-cb6f9b","selected_subscription_key":"ai-tenant-e2e-shared-a-7ba461/e2e-rate-iso-a-cb6f9b@ai-tenant-e2e-shared-a-7ba461/rate-test-model-7ba461","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7ba461","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cb6f9b","namespace":"ai-tenant-e2e-shared-a-7ba461","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T20:11:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7ed2533d-b7dd-4c24-bedd-472e5a2d886e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:11:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7ed2533d-b7dd-4c24-bedd-472e5a2d886e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:11:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"128cd9ad-23a1-48e3-8bf0-b60002bf35dc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:60734","PortSpecifier":{"PortValue":60734}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"128cd9ad-23a1-48e3-8bf0-b60002bf35dc","method":"POST","path":"/ai-tenant-e2e-shared-a-7ba461/rate-test-model-7ba461/v1/completions","host":"e2e-shared-a-7ba461.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:11:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"128cd9ad-23a1-48e3-8bf0-b60002bf35dc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:60734","PortSpecifier":{"PortValue":60734}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368681,"nanos":70640519},"http":{"id":"128cd9ad-23a1-48e3-8bf0-b60002bf35dc","method":"POST","headers":{":authority":"e2e-shared-a-7ba461.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7ba461/rate-test-model-7ba461/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:11:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"128cd9ad-23a1-48e3-8bf0-b60002bf35dc","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-gjK6qfochzD6EvcT_5ByYVEWyxQoIn1v8XSXmrdOIaOGxxJXH8ZRcSR9mltl"}
{"level":"debug","ts":"2026-07-06T20:11:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"128cd9ad-23a1-48e3-8bf0-b60002bf35dc","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7ba461.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-gjK6qfochzD6EvcT_5ByYVEWyxQoIn1v8XSXmrdOIaOGxxJXH8ZRcSR9mltl\"}"}
{"level":"debug","ts":"2026-07-06T20:11:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"128cd9ad-23a1-48e3-8bf0-b60002bf35dc","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7ba461.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"96779a3a-55c8-4f88-913d-9d70c3806fec","keyName":"e2e-rate-a-cb6f9b","subscription":"e2e-rate-iso-a-cb6f9b","tenant":"e2e-shared-a-7ba461","userId":"96779a3a-55c8-4f88-913d-9d70c3806fec","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:11:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"128cd9ad-23a1-48e3-8bf0-b60002bf35dc","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7ba461.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7ba461/rate-test-model-7ba461\",\"requestedSubscription\":\"e2e-rate-iso-a-cb6f9b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T20:11:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"128cd9ad-23a1-48e3-8bf0-b60002bf35dc","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7ba461.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7ba461","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cb6f9b","namespace":"ai-tenant-e2e-shared-a-7ba461","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T20:11:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"128cd9ad-23a1-48e3-8bf0-b60002bf35dc","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:11:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"128cd9ad-23a1-48e3-8bf0-b60002bf35dc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"128cd9ad-23a1-48e3-8bf0-b60002bf35dc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"128cd9ad-23a1-48e3-8bf0-b60002bf35dc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7ba461/rate-test-model-7ba461\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"128cd9ad-23a1-48e3-8bf0-b60002bf35dc","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"128cd9ad-23a1-48e3-8bf0-b60002bf35dc","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:11:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"128cd9ad-23a1-48e3-8bf0-b60002bf35dc","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-cb6f9b"}
{"level":"debug","ts":"2026-07-06T20:11:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"128cd9ad-23a1-48e3-8bf0-b60002bf35dc","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:11:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"128cd9ad-23a1-48e3-8bf0-b60002bf35dc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"96779a3a-55c8-4f88-913d-9d70c3806fec","keyName":"e2e-rate-a-cb6f9b","selected_subscription":"e2e-rate-iso-a-cb6f9b","selected_subscription_key":"ai-tenant-e2e-shared-a-7ba461/e2e-rate-iso-a-cb6f9b@ai-tenant-e2e-shared-a-7ba461/rate-test-model-7ba461","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7ba461","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cb6f9b","namespace":"ai-tenant-e2e-shared-a-7ba461","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T20:11:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"128cd9ad-23a1-48e3-8bf0-b60002bf35dc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:11:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"128cd9ad-23a1-48e3-8bf0-b60002bf35dc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:11:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c9b16a47-9e57-4ae6-b7bd-b6f894579c2e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:49052","PortSpecifier":{"PortValue":49052}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c9b16a47-9e57-4ae6-b7bd-b6f894579c2e","method":"POST","path":"/ai-tenant-e2e-shared-b-ebe4df/rate-test-model-ebe4df/v1/completions","host":"e2e-shared-b-ebe4df.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:11:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c9b16a47-9e57-4ae6-b7bd-b6f894579c2e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:49052","PortSpecifier":{"PortValue":49052}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368681,"nanos":113189480},"http":{"id":"c9b16a47-9e57-4ae6-b7bd-b6f894579c2e","method":"POST","headers":{":authority":"e2e-shared-b-ebe4df.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-ebe4df/rate-test-model-ebe4df/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:11:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c9b16a47-9e57-4ae6-b7bd-b6f894579c2e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-3p8Hv9EK3bTQ3P37_l6qCTxCdd95Wbn3KJrMdsSaE6kRNQhr46QDCCxVztJx"}
{"level":"debug","ts":"2026-07-06T20:11:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c9b16a47-9e57-4ae6-b7bd-b6f894579c2e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-ebe4df.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-3p8Hv9EK3bTQ3P37_l6qCTxCdd95Wbn3KJrMdsSaE6kRNQhr46QDCCxVztJx\"}"}
{"level":"debug","ts":"2026-07-06T20:11:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c9b16a47-9e57-4ae6-b7bd-b6f894579c2e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-ebe4df.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"163d0ae1-1265-4173-bdc1-5eadf2d87415","keyName":"e2e-rate-b-cb6f9b","subscription":"e2e-rate-iso-b-cb6f9b","tenant":"e2e-shared-b-ebe4df","userId":"163d0ae1-1265-4173-bdc1-5eadf2d87415","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:11:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c9b16a47-9e57-4ae6-b7bd-b6f894579c2e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-ebe4df.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-ebe4df/rate-test-model-ebe4df\",\"requestedSubscription\":\"e2e-rate-iso-b-cb6f9b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T20:11:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c9b16a47-9e57-4ae6-b7bd-b6f894579c2e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-ebe4df.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ebe4df","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-cb6f9b","namespace":"ai-tenant-e2e-shared-b-ebe4df","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T20:11:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c9b16a47-9e57-4ae6-b7bd-b6f894579c2e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:11:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9b16a47-9e57-4ae6-b7bd-b6f894579c2e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9b16a47-9e57-4ae6-b7bd-b6f894579c2e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9b16a47-9e57-4ae6-b7bd-b6f894579c2e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ebe4df/rate-test-model-ebe4df\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9b16a47-9e57-4ae6-b7bd-b6f894579c2e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9b16a47-9e57-4ae6-b7bd-b6f894579c2e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:11:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9b16a47-9e57-4ae6-b7bd-b6f894579c2e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:11:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9b16a47-9e57-4ae6-b7bd-b6f894579c2e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-cb6f9b"}
{"level":"debug","ts":"2026-07-06T20:11:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9b16a47-9e57-4ae6-b7bd-b6f894579c2e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"163d0ae1-1265-4173-bdc1-5eadf2d87415","keyName":"e2e-rate-b-cb6f9b","selected_subscription":"e2e-rate-iso-b-cb6f9b","selected_subscription_key":"ai-tenant-e2e-shared-b-ebe4df/e2e-rate-iso-b-cb6f9b@ai-tenant-e2e-shared-b-ebe4df/rate-test-model-ebe4df","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ebe4df","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-cb6f9b","namespace":"ai-tenant-e2e-shared-b-ebe4df","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T20:11:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c9b16a47-9e57-4ae6-b7bd-b6f894579c2e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:11:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c9b16a47-9e57-4ae6-b7bd-b6f894579c2e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:11:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/63ba19f78e4218c5653c2360fddd3e8569d317384c1dd1baab134db6b08446ca"}
{"level":"info","ts":"2026-07-06T20:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b48b66e9ecbb1c0ddbf7dfff34187e3200ed0d48998823ad2cb5bebc348828cc"}
{"level":"info","ts":"2026-07-06T20:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/94a522b91ddc5afb6660d3129491f2872e5572d2d0accc3e8683f3024ef01b57"}
{"level":"info","ts":"2026-07-06T20:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9cefd3244f3098dcf4281b2ff4f6f796d6eff1642593f8001d53a2f65e5e7b3b"}
{"level":"info","ts":"2026-07-06T20:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aa3471bd660168d2d231595e247b23b360cfaafc1387924f67f6a1133e6d085d"}
{"level":"info","ts":"2026-07-06T20:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a8b6352daa7124999985572acb226e88b9be9d252320328902475045fcda4922"}
{"level":"info","ts":"2026-07-06T20:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aeaa1ed27db1275255afd77a1c64cb484085cc98f28d259153e41de348d17f42"}
{"level":"info","ts":"2026-07-06T20:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a979ffa78306320309aea2135140855ae439d06813c635c1cbc1368581f82b04"}
{"level":"info","ts":"2026-07-06T20:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cd71a86b569ce80bdd38149f7d9e33bcbddaef74b868ce611a0c027afc720ddb"}
{"level":"info","ts":"2026-07-06T20:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/660839c60ec7435d2c86d921e8a0d59af7ed25b768b675c965964fe6cf08c2af"}
{"level":"info","ts":"2026-07-06T20:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b50fa30465011cd9450d00d400aad9bd8e0936e356f0b209c01b9aa8cdfc6746"}
{"level":"info","ts":"2026-07-06T20:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/39370ebbcd6c79e11364c6b59db0e56106f6fc062e081cf5d45b95f0b61bc988"}
{"level":"info","ts":"2026-07-06T20:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/08b5a57e5f307ff731d3db9d35406455a3e4e34c67f634b3b1076c193816c4c9"}
{"level":"info","ts":"2026-07-06T20:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7a5132d83cae638cf97d81af99b823c1867c88bdf92f6ef2fd3e69379cac96bf"}
{"level":"info","ts":"2026-07-06T20:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6aeeac26bbe5d7e79d2b94e585c52b63637ed2d4a927f478b928eebdce97a632"}
{"level":"info","ts":"2026-07-06T20:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e88afde50b37a5adc835a0c14708bab9837ea14dc0f22b62940251ed78ed7c2f"}
{"level":"info","ts":"2026-07-06T20:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4c7076e53d8315ef3b72f093887c14680228b37ece2db41f87610e08c1f5ddee"}
{"level":"info","ts":"2026-07-06T20:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7c1a67bccaed10a61fc41b6982eb34a5b8cfb0ab86f22157319199c42430eb22"}
{"level":"info","ts":"2026-07-06T20:11:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b9dc9f8553d3205d669cb60c0e9ad4425386f0eaa69f409d7e1545fa2d5bc546"}
{"level":"info","ts":"2026-07-06T20:11:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba"}