--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"debug","ts":"2026-07-20T17:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:12:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:12:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a"}
{"level":"info","ts":"2026-07-20T17:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:12:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:12:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f"}
{"level":"info","ts":"2026-07-20T17:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:12:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:12:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:12:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:12:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a"}
{"level":"info","ts":"2026-07-20T17:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:12:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:12:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:12:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:12:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f"}
{"level":"info","ts":"2026-07-20T17:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:12:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:12:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a"}
{"level":"info","ts":"2026-07-20T17:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:12:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:12:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b"}
{"level":"info","ts":"2026-07-20T17:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:12:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:12:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f"}
{"level":"info","ts":"2026-07-20T17:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:12:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:12:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a"}
{"level":"info","ts":"2026-07-20T17:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b"}
{"level":"info","ts":"2026-07-20T17:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e538336a636d01c87f16c56787fedf8558d125d0abe1a0dd6c1be243b760ffde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:12:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:12:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e538336a636d01c87f16c56787fedf8558d125d0abe1a0dd6c1be243b760ffde"}
{"level":"info","ts":"2026-07-20T17:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e538336a636d01c87f16c56787fedf8558d125d0abe1a0dd6c1be243b760ffde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d38e9531f2948c98d6561c7a5375095b2dfb55c0a8132008db0b9a4e8c078bd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:12:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:12:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f"}
{"level":"info","ts":"2026-07-20T17:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d38e9531f2948c98d6561c7a5375095b2dfb55c0a8132008db0b9a4e8c078bd7"}
{"level":"info","ts":"2026-07-20T17:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d38e9531f2948c98d6561c7a5375095b2dfb55c0a8132008db0b9a4e8c078bd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:12:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:12:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b"}
{"level":"info","ts":"2026-07-20T17:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e538336a636d01c87f16c56787fedf8558d125d0abe1a0dd6c1be243b760ffde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:12:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:12:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d38e9531f2948c98d6561c7a5375095b2dfb55c0a8132008db0b9a4e8c078bd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:12:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:12:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d38e9531f2948c98d6561c7a5375095b2dfb55c0a8132008db0b9a4e8c078bd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e538336a636d01c87f16c56787fedf8558d125d0abe1a0dd6c1be243b760ffde"}
{"level":"info","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d38e9531f2948c98d6561c7a5375095b2dfb55c0a8132008db0b9a4e8c078bd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:12:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:12:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d38e9531f2948c98d6561c7a5375095b2dfb55c0a8132008db0b9a4e8c078bd7"}
{"level":"info","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e538336a636d01c87f16c56787fedf8558d125d0abe1a0dd6c1be243b760ffde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:12:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:12:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e538336a636d01c87f16c56787fedf8558d125d0abe1a0dd6c1be243b760ffde"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b"}
{"level":"info","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e538336a636d01c87f16c56787fedf8558d125d0abe1a0dd6c1be243b760ffde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:12:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:12:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d38e9531f2948c98d6561c7a5375095b2dfb55c0a8132008db0b9a4e8c078bd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:12:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:12:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f"}
{"level":"info","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e538336a636d01c87f16c56787fedf8558d125d0abe1a0dd6c1be243b760ffde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:12:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:12:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d38e9531f2948c98d6561c7a5375095b2dfb55c0a8132008db0b9a4e8c078bd7"}
{"level":"info","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:12:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:12:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1"}
{"level":"info","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:12:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:12:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:12:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:12:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b"}
{"level":"error","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e538336a636d01c87f16c56787fedf8558d125d0abe1a0dd6c1be243b760ffde"}
{"level":"info","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f"}
{"level":"info","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1"}
{"level":"debug","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"372abb7ebadb5aaa3c594bbe00c4718c27f4e9986afdbbd27a99fab7f6721e85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:12:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:12:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"372abb7ebadb5aaa3c594bbe00c4718c27f4e9986afdbbd27a99fab7f6721e85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"372abb7ebadb5aaa3c594bbe00c4718c27f4e9986afdbbd27a99fab7f6721e85","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/372abb7ebadb5aaa3c594bbe00c4718c27f4e9986afdbbd27a99fab7f6721e85"}
{"level":"debug","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"372abb7ebadb5aaa3c594bbe00c4718c27f4e9986afdbbd27a99fab7f6721e85","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/372abb7ebadb5aaa3c594bbe00c4718c27f4e9986afdbbd27a99fab7f6721e85"}
{"level":"debug","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"372abb7ebadb5aaa3c594bbe00c4718c27f4e9986afdbbd27a99fab7f6721e85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:12:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:12:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["372abb7ebadb5aaa3c594bbe00c4718c27f4e9986afdbbd27a99fab7f6721e85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"372abb7ebadb5aaa3c594bbe00c4718c27f4e9986afdbbd27a99fab7f6721e85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"372abb7ebadb5aaa3c594bbe00c4718c27f4e9986afdbbd27a99fab7f6721e85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:12:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:12:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"372abb7ebadb5aaa3c594bbe00c4718c27f4e9986afdbbd27a99fab7f6721e85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"372abb7ebadb5aaa3c594bbe00c4718c27f4e9986afdbbd27a99fab7f6721e85","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/372abb7ebadb5aaa3c594bbe00c4718c27f4e9986afdbbd27a99fab7f6721e85"}
{"level":"debug","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"372abb7ebadb5aaa3c594bbe00c4718c27f4e9986afdbbd27a99fab7f6721e85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0e68c7cbb366a1148181d6858592ce38edfa4aee52635b435f6587a92000874","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:12:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:12:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/372abb7ebadb5aaa3c594bbe00c4718c27f4e9986afdbbd27a99fab7f6721e85"}
{"level":"info","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0e68c7cbb366a1148181d6858592ce38edfa4aee52635b435f6587a92000874","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"372abb7ebadb5aaa3c594bbe00c4718c27f4e9986afdbbd27a99fab7f6721e85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:12:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:12:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["372abb7ebadb5aaa3c594bbe00c4718c27f4e9986afdbbd27a99fab7f6721e85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0e68c7cbb366a1148181d6858592ce38edfa4aee52635b435f6587a92000874"}
{"level":"info","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"372abb7ebadb5aaa3c594bbe00c4718c27f4e9986afdbbd27a99fab7f6721e85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0e68c7cbb366a1148181d6858592ce38edfa4aee52635b435f6587a92000874","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:12:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:12:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0e68c7cbb366a1148181d6858592ce38edfa4aee52635b435f6587a92000874"}
{"level":"info","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0e68c7cbb366a1148181d6858592ce38edfa4aee52635b435f6587a92000874","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"372abb7ebadb5aaa3c594bbe00c4718c27f4e9986afdbbd27a99fab7f6721e85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:12:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:12:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/372abb7ebadb5aaa3c594bbe00c4718c27f4e9986afdbbd27a99fab7f6721e85"}
{"level":"info","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"372abb7ebadb5aaa3c594bbe00c4718c27f4e9986afdbbd27a99fab7f6721e85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0e68c7cbb366a1148181d6858592ce38edfa4aee52635b435f6587a92000874","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"372abb7ebadb5aaa3c594bbe00c4718c27f4e9986afdbbd27a99fab7f6721e85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:12:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:12:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["372abb7ebadb5aaa3c594bbe00c4718c27f4e9986afdbbd27a99fab7f6721e85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0e68c7cbb366a1148181d6858592ce38edfa4aee52635b435f6587a92000874"}
{"level":"info","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"372abb7ebadb5aaa3c594bbe00c4718c27f4e9986afdbbd27a99fab7f6721e85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"372abb7ebadb5aaa3c594bbe00c4718c27f4e9986afdbbd27a99fab7f6721e85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"372abb7ebadb5aaa3c594bbe00c4718c27f4e9986afdbbd27a99fab7f6721e85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:12:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:12:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/372abb7ebadb5aaa3c594bbe00c4718c27f4e9986afdbbd27a99fab7f6721e85"}
{"level":"info","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"372abb7ebadb5aaa3c594bbe00c4718c27f4e9986afdbbd27a99fab7f6721e85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0e68c7cbb366a1148181d6858592ce38edfa4aee52635b435f6587a92000874","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:12:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:12:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0e68c7cbb366a1148181d6858592ce38edfa4aee52635b435f6587a92000874"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38"}
{"level":"info","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0e68c7cbb366a1148181d6858592ce38edfa4aee52635b435f6587a92000874","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:12:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:12:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"372abb7ebadb5aaa3c594bbe00c4718c27f4e9986afdbbd27a99fab7f6721e85","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/372abb7ebadb5aaa3c594bbe00c4718c27f4e9986afdbbd27a99fab7f6721e85"}
{"level":"debug","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0e68c7cbb366a1148181d6858592ce38edfa4aee52635b435f6587a92000874","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0e68c7cbb366a1148181d6858592ce38edfa4aee52635b435f6587a92000874"}
{"level":"debug","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"372abb7ebadb5aaa3c594bbe00c4718c27f4e9986afdbbd27a99fab7f6721e85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:12:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:12:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["372abb7ebadb5aaa3c594bbe00c4718c27f4e9986afdbbd27a99fab7f6721e85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"372abb7ebadb5aaa3c594bbe00c4718c27f4e9986afdbbd27a99fab7f6721e85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"372abb7ebadb5aaa3c594bbe00c4718c27f4e9986afdbbd27a99fab7f6721e85","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38"}
{"level":"info","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/372abb7ebadb5aaa3c594bbe00c4718c27f4e9986afdbbd27a99fab7f6721e85"}
{"level":"debug","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:12:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:12:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:12:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:12:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1"}
{"level":"info","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:12:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:12:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1"}
{"level":"error","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1"}
{"level":"debug","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3278584cbc942b64161acc41575a3b14a0a179f5b36855d908d0018c6ec58815","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:12:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:12:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3278584cbc942b64161acc41575a3b14a0a179f5b36855d908d0018c6ec58815","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3278584cbc942b64161acc41575a3b14a0a179f5b36855d908d0018c6ec58815","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3278584cbc942b64161acc41575a3b14a0a179f5b36855d908d0018c6ec58815"}
{"level":"debug","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3278584cbc942b64161acc41575a3b14a0a179f5b36855d908d0018c6ec58815","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:12:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:12:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3278584cbc942b64161acc41575a3b14a0a179f5b36855d908d0018c6ec58815"}
{"level":"info","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3278584cbc942b64161acc41575a3b14a0a179f5b36855d908d0018c6ec58815","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:12:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:12:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3278584cbc942b64161acc41575a3b14a0a179f5b36855d908d0018c6ec58815"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3278584cbc942b64161acc41575a3b14a0a179f5b36855d908d0018c6ec58815","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:12:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:12:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1"}
{"level":"info","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3278584cbc942b64161acc41575a3b14a0a179f5b36855d908d0018c6ec58815","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:12:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:12:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3278584cbc942b64161acc41575a3b14a0a179f5b36855d908d0018c6ec58815"}
{"level":"info","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3278584cbc942b64161acc41575a3b14a0a179f5b36855d908d0018c6ec58815","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3278584cbc942b64161acc41575a3b14a0a179f5b36855d908d0018c6ec58815","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:12:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:12:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3278584cbc942b64161acc41575a3b14a0a179f5b36855d908d0018c6ec58815"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3278584cbc942b64161acc41575a3b14a0a179f5b36855d908d0018c6ec58815","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3278584cbc942b64161acc41575a3b14a0a179f5b36855d908d0018c6ec58815","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:12:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:12:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3278584cbc942b64161acc41575a3b14a0a179f5b36855d908d0018c6ec58815"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3278584cbc942b64161acc41575a3b14a0a179f5b36855d908d0018c6ec58815","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3278584cbc942b64161acc41575a3b14a0a179f5b36855d908d0018c6ec58815\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3278584cbc942b64161acc41575a3b14a0a179f5b36855d908d0018c6ec58815","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3278584cbc942b64161acc41575a3b14a0a179f5b36855d908d0018c6ec58815","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1"}
{"level":"info","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3278584cbc942b64161acc41575a3b14a0a179f5b36855d908d0018c6ec58815"}
{"level":"debug","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:12:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:12:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:12:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1"}
{"level":"info","ts":"2026-07-20T17:12:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"01ffd0ad-fb53-421d-aa65-5820e4285131","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:37514","PortSpecifier":{"PortValue":37514}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"01ffd0ad-fb53-421d-aa65-5820e4285131","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T17:12:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"01ffd0ad-fb53-421d-aa65-5820e4285131","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:37514","PortSpecifier":{"PortValue":37514}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784567562,"nanos":259660240},"http":{"id":"01ffd0ad-fb53-421d-aa65-5820e4285131","method":"POST","headers":{":authority":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:12:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"01ffd0ad-fb53-421d-aa65-5820e4285131","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-20T17:12:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"01ffd0ad-fb53-421d-aa65-5820e4285131","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1b91b571-c80d-4224-bb2b-6fe9d0687db6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8940b42d-6f21-40dc-a902-53f729cc3b47"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/187485271a22"]}}
{"level":"debug","ts":"2026-07-20T17:12:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"01ffd0ad-fb53-421d-aa65-5820e4285131","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/187485271a22"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8940b42d-6f21-40dc-a902-53f729cc3b47"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1b91b571-c80d-4224-bb2b-6fe9d0687db6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ad5c0a14cddabf54b41d68e875c01ed6288ff6f33e99b4c5d95955894887a6f3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:12:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01ffd0ad-fb53-421d-aa65-5820e4285131","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:12:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01ffd0ad-fb53-421d-aa65-5820e4285131","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:12:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01ffd0ad-fb53-421d-aa65-5820e4285131","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a16895/auth-test-model-a16895\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a16895/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:12:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"01ffd0ad-fb53-421d-aa65-5820e4285131","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-20T17:12:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"01ffd0ad-fb53-421d-aa65-5820e4285131","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T17:12:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"01ffd0ad-fb53-421d-aa65-5820e4285131","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-20T17:12:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"01ffd0ad-fb53-421d-aa65-5820e4285131","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T17:12:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"01ffd0ad-fb53-421d-aa65-5820e4285131","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T17:12:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1410c997-709c-42a2-8efd-a987276c6c16","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:52236","PortSpecifier":{"PortValue":52236}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1410c997-709c-42a2-8efd-a987276c6c16","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e142d5.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T17:12:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1410c997-709c-42a2-8efd-a987276c6c16","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:52236","PortSpecifier":{"PortValue":52236}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784567562,"nanos":299715570},"http":{"id":"1410c997-709c-42a2-8efd-a987276c6c16","method":"POST","headers":{":authority":"e2e-shared-b-e142d5.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:12:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1410c997-709c-42a2-8efd-a987276c6c16","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-20T17:12:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1410c997-709c-42a2-8efd-a987276c6c16","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1b91b571-c80d-4224-bb2b-6fe9d0687db6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8940b42d-6f21-40dc-a902-53f729cc3b47"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/187485271a22"]}}
{"level":"debug","ts":"2026-07-20T17:12:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1410c997-709c-42a2-8efd-a987276c6c16","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/187485271a22"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8940b42d-6f21-40dc-a902-53f729cc3b47"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1b91b571-c80d-4224-bb2b-6fe9d0687db6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e142d5.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:12:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1410c997-709c-42a2-8efd-a987276c6c16","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:12:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1410c997-709c-42a2-8efd-a987276c6c16","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:12:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1410c997-709c-42a2-8efd-a987276c6c16","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e142d5/auth-test-model-e142d5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-e142d5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:12:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1410c997-709c-42a2-8efd-a987276c6c16","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-20T17:12:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1410c997-709c-42a2-8efd-a987276c6c16","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T17:12:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1410c997-709c-42a2-8efd-a987276c6c16","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-20T17:12:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1410c997-709c-42a2-8efd-a987276c6c16","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T17:12:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1410c997-709c-42a2-8efd-a987276c6c16","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T17:12:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f7673014-ebff-4383-92e0-b413f0f626ad","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:52250","PortSpecifier":{"PortValue":52250}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f7673014-ebff-4383-92e0-b413f0f626ad","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-e142d5.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T17:12:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f7673014-ebff-4383-92e0-b413f0f626ad","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:52250","PortSpecifier":{"PortValue":52250}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784567562,"nanos":340915102},"http":{"id":"f7673014-ebff-4383-92e0-b413f0f626ad","method":"GET","headers":{":authority":"e2e-shared-b-e142d5.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:12:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f7673014-ebff-4383-92e0-b413f0f626ad","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1JwWcOGEE3EhRRwNj_PZjDE12ydxdyCVEjwmy4s174xOWohyzqrfR89Xc6WIz"}
{"level":"debug","ts":"2026-07-20T17:12:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f7673014-ebff-4383-92e0-b413f0f626ad","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-e142d5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1JwWcOGEE3EhRRwNj_PZjDE12ydxdyCVEjwmy4s174xOWohyzqrfR89Xc6WIz\"}"}
{"level":"debug","ts":"2026-07-20T17:12:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f7673014-ebff-4383-92e0-b413f0f626ad","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-e142d5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-20T17:12:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f7673014-ebff-4383-92e0-b413f0f626ad","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e142d5.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:12:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7673014-ebff-4383-92e0-b413f0f626ad","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:12:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"f7673014-ebff-4383-92e0-b413f0f626ad","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-20T17:12:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f7673014-ebff-4383-92e0-b413f0f626ad","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-20T17:12:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f7673014-ebff-4383-92e0-b413f0f626ad","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-20T17:12:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/625354f2f12cc3abaa7508f9f92a56de8bdaac41bc1cdb5837d65605dd45ef25"}
{"level":"info","ts":"2026-07-20T17:12:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f"}
{"level":"info","ts":"2026-07-20T17:12:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b0e68c7cbb366a1148181d6858592ce38edfa4aee52635b435f6587a92000874"}
{"level":"info","ts":"2026-07-20T17:12:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a"}
{"level":"info","ts":"2026-07-20T17:12:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1"}
{"level":"info","ts":"2026-07-20T17:12:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d38e9531f2948c98d6561c7a5375095b2dfb55c0a8132008db0b9a4e8c078bd7"}
{"level":"info","ts":"2026-07-20T17:12:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b"}
{"level":"info","ts":"2026-07-20T17:12:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/372abb7ebadb5aaa3c594bbe00c4718c27f4e9986afdbbd27a99fab7f6721e85"}
{"level":"info","ts":"2026-07-20T17:12:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3278584cbc942b64161acc41575a3b14a0a179f5b36855d908d0018c6ec58815"}
{"level":"info","ts":"2026-07-20T17:12:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38"}
{"level":"info","ts":"2026-07-20T17:12:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1"}
{"level":"info","ts":"2026-07-20T17:12:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e538336a636d01c87f16c56787fedf8558d125d0abe1a0dd6c1be243b760ffde"}
{"level":"debug","ts":"2026-07-20T17:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:12:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:12:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:12:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:12:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38"}
{"level":"info","ts":"2026-07-20T17:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:12:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:12:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-20T17:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-20T17:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38"}
{"level":"info","ts":"2026-07-20T17:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38"}
{"level":"debug","ts":"2026-07-20T17:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:12:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:12:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:12:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:12:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38"}
{"level":"debug","ts":"2026-07-20T17:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38"}
{"level":"debug","ts":"2026-07-20T17:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:12:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:12:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:12:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:12:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38"}
{"level":"debug","ts":"2026-07-20T17:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38"}
{"level":"debug","ts":"2026-07-20T17:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:12:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:12:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38"}
{"level":"debug","ts":"2026-07-20T17:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"625354f2f12cc3abaa7508f9f92a56de8bdaac41bc1cdb5837d65605dd45ef25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:12:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:12:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"625354f2f12cc3abaa7508f9f92a56de8bdaac41bc1cdb5837d65605dd45ef25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"625354f2f12cc3abaa7508f9f92a56de8bdaac41bc1cdb5837d65605dd45ef25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:12:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:12:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/625354f2f12cc3abaa7508f9f92a56de8bdaac41bc1cdb5837d65605dd45ef25"}
{"level":"info","ts":"2026-07-20T17:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/625354f2f12cc3abaa7508f9f92a56de8bdaac41bc1cdb5837d65605dd45ef25"}
{"level":"info","ts":"2026-07-20T17:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"625354f2f12cc3abaa7508f9f92a56de8bdaac41bc1cdb5837d65605dd45ef25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"625354f2f12cc3abaa7508f9f92a56de8bdaac41bc1cdb5837d65605dd45ef25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:12:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:12:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["625354f2f12cc3abaa7508f9f92a56de8bdaac41bc1cdb5837d65605dd45ef25"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"625354f2f12cc3abaa7508f9f92a56de8bdaac41bc1cdb5837d65605dd45ef25","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"625354f2f12cc3abaa7508f9f92a56de8bdaac41bc1cdb5837d65605dd45ef25\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"625354f2f12cc3abaa7508f9f92a56de8bdaac41bc1cdb5837d65605dd45ef25","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/625354f2f12cc3abaa7508f9f92a56de8bdaac41bc1cdb5837d65605dd45ef25"}
{"level":"debug","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"625354f2f12cc3abaa7508f9f92a56de8bdaac41bc1cdb5837d65605dd45ef25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:12:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:12:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["625354f2f12cc3abaa7508f9f92a56de8bdaac41bc1cdb5837d65605dd45ef25"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"625354f2f12cc3abaa7508f9f92a56de8bdaac41bc1cdb5837d65605dd45ef25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"625354f2f12cc3abaa7508f9f92a56de8bdaac41bc1cdb5837d65605dd45ef25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:12:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:12:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"625354f2f12cc3abaa7508f9f92a56de8bdaac41bc1cdb5837d65605dd45ef25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"625354f2f12cc3abaa7508f9f92a56de8bdaac41bc1cdb5837d65605dd45ef25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"625354f2f12cc3abaa7508f9f92a56de8bdaac41bc1cdb5837d65605dd45ef25","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/625354f2f12cc3abaa7508f9f92a56de8bdaac41bc1cdb5837d65605dd45ef25"}
{"level":"debug","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"625354f2f12cc3abaa7508f9f92a56de8bdaac41bc1cdb5837d65605dd45ef25","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/625354f2f12cc3abaa7508f9f92a56de8bdaac41bc1cdb5837d65605dd45ef25"}
{"level":"debug","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"625354f2f12cc3abaa7508f9f92a56de8bdaac41bc1cdb5837d65605dd45ef25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:12:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:12:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["625354f2f12cc3abaa7508f9f92a56de8bdaac41bc1cdb5837d65605dd45ef25"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"625354f2f12cc3abaa7508f9f92a56de8bdaac41bc1cdb5837d65605dd45ef25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"625354f2f12cc3abaa7508f9f92a56de8bdaac41bc1cdb5837d65605dd45ef25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"372abb7ebadb5aaa3c594bbe00c4718c27f4e9986afdbbd27a99fab7f6721e85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:12:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:12:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"372abb7ebadb5aaa3c594bbe00c4718c27f4e9986afdbbd27a99fab7f6721e85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"372abb7ebadb5aaa3c594bbe00c4718c27f4e9986afdbbd27a99fab7f6721e85","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/625354f2f12cc3abaa7508f9f92a56de8bdaac41bc1cdb5837d65605dd45ef25"}
{"level":"debug","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"372abb7ebadb5aaa3c594bbe00c4718c27f4e9986afdbbd27a99fab7f6721e85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:12:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:12:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/372abb7ebadb5aaa3c594bbe00c4718c27f4e9986afdbbd27a99fab7f6721e85"}
{"level":"info","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"372abb7ebadb5aaa3c594bbe00c4718c27f4e9986afdbbd27a99fab7f6721e85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"372abb7ebadb5aaa3c594bbe00c4718c27f4e9986afdbbd27a99fab7f6721e85","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/372abb7ebadb5aaa3c594bbe00c4718c27f4e9986afdbbd27a99fab7f6721e85"}
{"level":"debug","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"372abb7ebadb5aaa3c594bbe00c4718c27f4e9986afdbbd27a99fab7f6721e85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:12:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:12:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["372abb7ebadb5aaa3c594bbe00c4718c27f4e9986afdbbd27a99fab7f6721e85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"372abb7ebadb5aaa3c594bbe00c4718c27f4e9986afdbbd27a99fab7f6721e85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"372abb7ebadb5aaa3c594bbe00c4718c27f4e9986afdbbd27a99fab7f6721e85","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/372abb7ebadb5aaa3c594bbe00c4718c27f4e9986afdbbd27a99fab7f6721e85"}
{"level":"debug","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3278584cbc942b64161acc41575a3b14a0a179f5b36855d908d0018c6ec58815","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:12:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:12:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3278584cbc942b64161acc41575a3b14a0a179f5b36855d908d0018c6ec58815","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3278584cbc942b64161acc41575a3b14a0a179f5b36855d908d0018c6ec58815","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3278584cbc942b64161acc41575a3b14a0a179f5b36855d908d0018c6ec58815"}
{"level":"debug","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3278584cbc942b64161acc41575a3b14a0a179f5b36855d908d0018c6ec58815","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3278584cbc942b64161acc41575a3b14a0a179f5b36855d908d0018c6ec58815"}
{"level":"debug","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3278584cbc942b64161acc41575a3b14a0a179f5b36855d908d0018c6ec58815","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:12:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:12:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3278584cbc942b64161acc41575a3b14a0a179f5b36855d908d0018c6ec58815"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3278584cbc942b64161acc41575a3b14a0a179f5b36855d908d0018c6ec58815","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3278584cbc942b64161acc41575a3b14a0a179f5b36855d908d0018c6ec58815","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:12:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:12:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3278584cbc942b64161acc41575a3b14a0a179f5b36855d908d0018c6ec58815","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3278584cbc942b64161acc41575a3b14a0a179f5b36855d908d0018c6ec58815","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3278584cbc942b64161acc41575a3b14a0a179f5b36855d908d0018c6ec58815","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3278584cbc942b64161acc41575a3b14a0a179f5b36855d908d0018c6ec58815"}
{"level":"debug","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:12:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:12:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3278584cbc942b64161acc41575a3b14a0a179f5b36855d908d0018c6ec58815"}
{"level":"info","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3278584cbc942b64161acc41575a3b14a0a179f5b36855d908d0018c6ec58815","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:12:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:12:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3278584cbc942b64161acc41575a3b14a0a179f5b36855d908d0018c6ec58815"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1"}
{"level":"info","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3278584cbc942b64161acc41575a3b14a0a179f5b36855d908d0018c6ec58815","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:12:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:12:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3278584cbc942b64161acc41575a3b14a0a179f5b36855d908d0018c6ec58815","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1"}
{"level":"debug","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:12:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:12:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3278584cbc942b64161acc41575a3b14a0a179f5b36855d908d0018c6ec58815"}
{"level":"info","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:12:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:12:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1"}
{"level":"debug","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:12:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:12:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1"}
{"level":"info","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:12:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:12:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f"}
{"level":"info","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:12:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:12:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f"}
{"level":"debug","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:12:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:12:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1"}
{"level":"info","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:12:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:12:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f"}
{"level":"info","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d38e9531f2948c98d6561c7a5375095b2dfb55c0a8132008db0b9a4e8c078bd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:12:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:12:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f"}
{"level":"info","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d38e9531f2948c98d6561c7a5375095b2dfb55c0a8132008db0b9a4e8c078bd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:12:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:12:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d38e9531f2948c98d6561c7a5375095b2dfb55c0a8132008db0b9a4e8c078bd7"}
{"level":"info","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:12:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:12:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f"}
{"level":"info","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d38e9531f2948c98d6561c7a5375095b2dfb55c0a8132008db0b9a4e8c078bd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:12:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:12:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d38e9531f2948c98d6561c7a5375095b2dfb55c0a8132008db0b9a4e8c078bd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b"}
{"level":"info","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d38e9531f2948c98d6561c7a5375095b2dfb55c0a8132008db0b9a4e8c078bd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:12:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:12:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d38e9531f2948c98d6561c7a5375095b2dfb55c0a8132008db0b9a4e8c078bd7"}
{"level":"info","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d38e9531f2948c98d6561c7a5375095b2dfb55c0a8132008db0b9a4e8c078bd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0e68c7cbb366a1148181d6858592ce38edfa4aee52635b435f6587a92000874","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:12:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:12:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f"}
{"level":"info","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0e68c7cbb366a1148181d6858592ce38edfa4aee52635b435f6587a92000874","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:12:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:12:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0e68c7cbb366a1148181d6858592ce38edfa4aee52635b435f6587a92000874","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b"}
{"level":"debug","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:12:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:12:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0e68c7cbb366a1148181d6858592ce38edfa4aee52635b435f6587a92000874","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d38e9531f2948c98d6561c7a5375095b2dfb55c0a8132008db0b9a4e8c078bd7"}
{"level":"debug","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0e68c7cbb366a1148181d6858592ce38edfa4aee52635b435f6587a92000874","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:12:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:12:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0e68c7cbb366a1148181d6858592ce38edfa4aee52635b435f6587a92000874"}
{"level":"info","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0e68c7cbb366a1148181d6858592ce38edfa4aee52635b435f6587a92000874","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0e68c7cbb366a1148181d6858592ce38edfa4aee52635b435f6587a92000874","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:12:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:12:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0e68c7cbb366a1148181d6858592ce38edfa4aee52635b435f6587a92000874"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0e68c7cbb366a1148181d6858592ce38edfa4aee52635b435f6587a92000874","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0e68c7cbb366a1148181d6858592ce38edfa4aee52635b435f6587a92000874","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b"}
{"level":"debug","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0e68c7cbb366a1148181d6858592ce38edfa4aee52635b435f6587a92000874","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:12:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:12:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0e68c7cbb366a1148181d6858592ce38edfa4aee52635b435f6587a92000874","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0e68c7cbb366a1148181d6858592ce38edfa4aee52635b435f6587a92000874","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0e68c7cbb366a1148181d6858592ce38edfa4aee52635b435f6587a92000874","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0e68c7cbb366a1148181d6858592ce38edfa4aee52635b435f6587a92000874"}
{"level":"debug","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e538336a636d01c87f16c56787fedf8558d125d0abe1a0dd6c1be243b760ffde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:12:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:12:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e538336a636d01c87f16c56787fedf8558d125d0abe1a0dd6c1be243b760ffde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0e68c7cbb366a1148181d6858592ce38edfa4aee52635b435f6587a92000874","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e538336a636d01c87f16c56787fedf8558d125d0abe1a0dd6c1be243b760ffde","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0e68c7cbb366a1148181d6858592ce38edfa4aee52635b435f6587a92000874"}
{"level":"debug","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e538336a636d01c87f16c56787fedf8558d125d0abe1a0dd6c1be243b760ffde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:12:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:12:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e538336a636d01c87f16c56787fedf8558d125d0abe1a0dd6c1be243b760ffde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e538336a636d01c87f16c56787fedf8558d125d0abe1a0dd6c1be243b760ffde","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:12:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e538336a636d01c87f16c56787fedf8558d125d0abe1a0dd6c1be243b760ffde"}
{"level":"debug","ts":"2026-07-20T17:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0e68c7cbb366a1148181d6858592ce38edfa4aee52635b435f6587a92000874","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:12:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:12:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0e68c7cbb366a1148181d6858592ce38edfa4aee52635b435f6587a92000874"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e538336a636d01c87f16c56787fedf8558d125d0abe1a0dd6c1be243b760ffde"}
{"level":"info","ts":"2026-07-20T17:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0e68c7cbb366a1148181d6858592ce38edfa4aee52635b435f6587a92000874","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e538336a636d01c87f16c56787fedf8558d125d0abe1a0dd6c1be243b760ffde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:12:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:12:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e538336a636d01c87f16c56787fedf8558d125d0abe1a0dd6c1be243b760ffde"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e538336a636d01c87f16c56787fedf8558d125d0abe1a0dd6c1be243b760ffde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0e68c7cbb366a1148181d6858592ce38edfa4aee52635b435f6587a92000874","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:12:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:12:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0e68c7cbb366a1148181d6858592ce38edfa4aee52635b435f6587a92000874"}
{"level":"info","ts":"2026-07-20T17:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0e68c7cbb366a1148181d6858592ce38edfa4aee52635b435f6587a92000874","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e538336a636d01c87f16c56787fedf8558d125d0abe1a0dd6c1be243b760ffde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:12:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:12:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e538336a636d01c87f16c56787fedf8558d125d0abe1a0dd6c1be243b760ffde"}
{"level":"info","ts":"2026-07-20T17:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e538336a636d01c87f16c56787fedf8558d125d0abe1a0dd6c1be243b760ffde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:12:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:12:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0e68c7cbb366a1148181d6858592ce38edfa4aee52635b435f6587a92000874","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:12:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:12:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0e68c7cbb366a1148181d6858592ce38edfa4aee52635b435f6587a92000874"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a"}
{"level":"info","ts":"2026-07-20T17:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0e68c7cbb366a1148181d6858592ce38edfa4aee52635b435f6587a92000874","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:12:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:12:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0e68c7cbb366a1148181d6858592ce38edfa4aee52635b435f6587a92000874"}
{"level":"info","ts":"2026-07-20T17:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e538336a636d01c87f16c56787fedf8558d125d0abe1a0dd6c1be243b760ffde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:12:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:12:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e538336a636d01c87f16c56787fedf8558d125d0abe1a0dd6c1be243b760ffde"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1"}
{"level":"info","ts":"2026-07-20T17:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e538336a636d01c87f16c56787fedf8558d125d0abe1a0dd6c1be243b760ffde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:12:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:12:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e538336a636d01c87f16c56787fedf8558d125d0abe1a0dd6c1be243b760ffde"}
{"level":"info","ts":"2026-07-20T17:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0e68c7cbb366a1148181d6858592ce38edfa4aee52635b435f6587a92000874","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:12:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:12:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e538336a636d01c87f16c56787fedf8558d125d0abe1a0dd6c1be243b760ffde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:12:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:12:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a"}
{"level":"info","ts":"2026-07-20T17:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0e68c7cbb366a1148181d6858592ce38edfa4aee52635b435f6587a92000874"}
{"level":"debug","ts":"2026-07-20T17:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:12:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:12:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1"}
{"level":"info","ts":"2026-07-20T17:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e538336a636d01c87f16c56787fedf8558d125d0abe1a0dd6c1be243b760ffde"}
{"level":"info","ts":"2026-07-20T17:12:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a"}
{"level":"info","ts":"2026-07-20T17:13:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0a414644-4b83-4065-815e-4ca19c7697ce","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:53448","PortSpecifier":{"PortValue":53448}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0a414644-4b83-4065-815e-4ca19c7697ce","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T17:13:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0a414644-4b83-4065-815e-4ca19c7697ce","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:53448","PortSpecifier":{"PortValue":53448}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784567581,"nanos":796467798},"http":{"id":"0a414644-4b83-4065-815e-4ca19c7697ce","method":"POST","headers":{":authority":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:13:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0a414644-4b83-4065-815e-4ca19c7697ce","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-20T17:13:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0a414644-4b83-4065-815e-4ca19c7697ce","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1b91b571-c80d-4224-bb2b-6fe9d0687db6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8940b42d-6f21-40dc-a902-53f729cc3b47"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/187485271a22"]}}
{"level":"debug","ts":"2026-07-20T17:13:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0a414644-4b83-4065-815e-4ca19c7697ce","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/187485271a22"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8940b42d-6f21-40dc-a902-53f729cc3b47"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1b91b571-c80d-4224-bb2b-6fe9d0687db6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ad5c0a14cddabf54b41d68e875c01ed6288ff6f33e99b4c5d95955894887a6f3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:13:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a414644-4b83-4065-815e-4ca19c7697ce","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:13:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a414644-4b83-4065-815e-4ca19c7697ce","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:13:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a414644-4b83-4065-815e-4ca19c7697ce","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a16895/auth-test-model-a16895\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a16895/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:13:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0a414644-4b83-4065-815e-4ca19c7697ce","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-20T17:13:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0a414644-4b83-4065-815e-4ca19c7697ce","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T17:13:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0a414644-4b83-4065-815e-4ca19c7697ce","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-20T17:13:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0a414644-4b83-4065-815e-4ca19c7697ce","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T17:13:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0a414644-4b83-4065-815e-4ca19c7697ce","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T17:13:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d8f3a2d-e9e6-4ef0-ae96-1432dcae8746","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:43540","PortSpecifier":{"PortValue":43540}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3d8f3a2d-e9e6-4ef0-ae96-1432dcae8746","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e142d5.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T17:13:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d8f3a2d-e9e6-4ef0-ae96-1432dcae8746","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:43540","PortSpecifier":{"PortValue":43540}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784567581,"nanos":830507901},"http":{"id":"3d8f3a2d-e9e6-4ef0-ae96-1432dcae8746","method":"POST","headers":{":authority":"e2e-shared-b-e142d5.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:13:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3d8f3a2d-e9e6-4ef0-ae96-1432dcae8746","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-20T17:13:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3d8f3a2d-e9e6-4ef0-ae96-1432dcae8746","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1b91b571-c80d-4224-bb2b-6fe9d0687db6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8940b42d-6f21-40dc-a902-53f729cc3b47"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/187485271a22"]}}
{"level":"debug","ts":"2026-07-20T17:13:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3d8f3a2d-e9e6-4ef0-ae96-1432dcae8746","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/187485271a22"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8940b42d-6f21-40dc-a902-53f729cc3b47"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1b91b571-c80d-4224-bb2b-6fe9d0687db6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e142d5.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:13:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d8f3a2d-e9e6-4ef0-ae96-1432dcae8746","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:13:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d8f3a2d-e9e6-4ef0-ae96-1432dcae8746","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:13:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d8f3a2d-e9e6-4ef0-ae96-1432dcae8746","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e142d5/auth-test-model-e142d5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-e142d5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:13:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3d8f3a2d-e9e6-4ef0-ae96-1432dcae8746","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-20T17:13:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d8f3a2d-e9e6-4ef0-ae96-1432dcae8746","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T17:13:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d8f3a2d-e9e6-4ef0-ae96-1432dcae8746","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-20T17:13:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d8f3a2d-e9e6-4ef0-ae96-1432dcae8746","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T17:13:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d8f3a2d-e9e6-4ef0-ae96-1432dcae8746","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T17:13:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8fec7eb0-7e76-495c-aed7-d5002c321ef2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:53450","PortSpecifier":{"PortValue":53450}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8fec7eb0-7e76-495c-aed7-d5002c321ef2","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T17:13:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8fec7eb0-7e76-495c-aed7-d5002c321ef2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:53450","PortSpecifier":{"PortValue":53450}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784567581,"nanos":871554557},"http":{"id":"8fec7eb0-7e76-495c-aed7-d5002c321ef2","method":"POST","headers":{":authority":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:13:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8fec7eb0-7e76-495c-aed7-d5002c321ef2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-20T17:13:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8fec7eb0-7e76-495c-aed7-d5002c321ef2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1b91b571-c80d-4224-bb2b-6fe9d0687db6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8940b42d-6f21-40dc-a902-53f729cc3b47"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/187485271a22"]}}
{"level":"debug","ts":"2026-07-20T17:13:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8fec7eb0-7e76-495c-aed7-d5002c321ef2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/187485271a22"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8940b42d-6f21-40dc-a902-53f729cc3b47"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1b91b571-c80d-4224-bb2b-6fe9d0687db6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ad5c0a14cddabf54b41d68e875c01ed6288ff6f33e99b4c5d95955894887a6f3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:13:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8fec7eb0-7e76-495c-aed7-d5002c321ef2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:13:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8fec7eb0-7e76-495c-aed7-d5002c321ef2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:13:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8fec7eb0-7e76-495c-aed7-d5002c321ef2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a16895/auth-test-model-a16895\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a16895/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:13:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8fec7eb0-7e76-495c-aed7-d5002c321ef2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-20T17:13:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8fec7eb0-7e76-495c-aed7-d5002c321ef2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T17:13:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8fec7eb0-7e76-495c-aed7-d5002c321ef2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-20T17:13:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8fec7eb0-7e76-495c-aed7-d5002c321ef2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T17:13:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8fec7eb0-7e76-495c-aed7-d5002c321ef2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T17:13:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5da15f95-0877-40cc-9d69-6927b1aa8ca2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:43552","PortSpecifier":{"PortValue":43552}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5da15f95-0877-40cc-9d69-6927b1aa8ca2","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-e142d5.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T17:13:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5da15f95-0877-40cc-9d69-6927b1aa8ca2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:43552","PortSpecifier":{"PortValue":43552}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784567581,"nanos":911590157},"http":{"id":"5da15f95-0877-40cc-9d69-6927b1aa8ca2","method":"POST","headers":{":authority":"e2e-shared-b-e142d5.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:13:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5da15f95-0877-40cc-9d69-6927b1aa8ca2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-20T17:13:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5da15f95-0877-40cc-9d69-6927b1aa8ca2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1b91b571-c80d-4224-bb2b-6fe9d0687db6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8940b42d-6f21-40dc-a902-53f729cc3b47"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/187485271a22"]}}
{"level":"debug","ts":"2026-07-20T17:13:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5da15f95-0877-40cc-9d69-6927b1aa8ca2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/187485271a22"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8940b42d-6f21-40dc-a902-53f729cc3b47"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1b91b571-c80d-4224-bb2b-6fe9d0687db6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e142d5.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:13:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5da15f95-0877-40cc-9d69-6927b1aa8ca2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:13:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5da15f95-0877-40cc-9d69-6927b1aa8ca2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:13:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5da15f95-0877-40cc-9d69-6927b1aa8ca2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e142d5/auth-test-model-e142d5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-e142d5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:13:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5da15f95-0877-40cc-9d69-6927b1aa8ca2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-20T17:13:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5da15f95-0877-40cc-9d69-6927b1aa8ca2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T17:13:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5da15f95-0877-40cc-9d69-6927b1aa8ca2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-20T17:13:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5da15f95-0877-40cc-9d69-6927b1aa8ca2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T17:13:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5da15f95-0877-40cc-9d69-6927b1aa8ca2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T17:13:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3278584cbc942b64161acc41575a3b14a0a179f5b36855d908d0018c6ec58815"}
{"level":"info","ts":"2026-07-20T17:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b0e68c7cbb366a1148181d6858592ce38edfa4aee52635b435f6587a92000874"}
{"level":"info","ts":"2026-07-20T17:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b"}
{"level":"info","ts":"2026-07-20T17:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1"}
{"level":"info","ts":"2026-07-20T17:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38"}
{"level":"info","ts":"2026-07-20T17:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a"}
{"level":"info","ts":"2026-07-20T17:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f"}
{"level":"info","ts":"2026-07-20T17:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/625354f2f12cc3abaa7508f9f92a56de8bdaac41bc1cdb5837d65605dd45ef25"}
{"level":"info","ts":"2026-07-20T17:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d38e9531f2948c98d6561c7a5375095b2dfb55c0a8132008db0b9a4e8c078bd7"}
{"level":"info","ts":"2026-07-20T17:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/372abb7ebadb5aaa3c594bbe00c4718c27f4e9986afdbbd27a99fab7f6721e85"}
{"level":"info","ts":"2026-07-20T17:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e538336a636d01c87f16c56787fedf8558d125d0abe1a0dd6c1be243b760ffde"}
{"level":"info","ts":"2026-07-20T17:13:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1"}
{"level":"debug","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"372abb7ebadb5aaa3c594bbe00c4718c27f4e9986afdbbd27a99fab7f6721e85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:13:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:13:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"372abb7ebadb5aaa3c594bbe00c4718c27f4e9986afdbbd27a99fab7f6721e85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"372abb7ebadb5aaa3c594bbe00c4718c27f4e9986afdbbd27a99fab7f6721e85","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/372abb7ebadb5aaa3c594bbe00c4718c27f4e9986afdbbd27a99fab7f6721e85"}
{"level":"debug","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"372abb7ebadb5aaa3c594bbe00c4718c27f4e9986afdbbd27a99fab7f6721e85","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/372abb7ebadb5aaa3c594bbe00c4718c27f4e9986afdbbd27a99fab7f6721e85"}
{"level":"debug","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"372abb7ebadb5aaa3c594bbe00c4718c27f4e9986afdbbd27a99fab7f6721e85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:13:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:13:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["372abb7ebadb5aaa3c594bbe00c4718c27f4e9986afdbbd27a99fab7f6721e85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"372abb7ebadb5aaa3c594bbe00c4718c27f4e9986afdbbd27a99fab7f6721e85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"372abb7ebadb5aaa3c594bbe00c4718c27f4e9986afdbbd27a99fab7f6721e85","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/372abb7ebadb5aaa3c594bbe00c4718c27f4e9986afdbbd27a99fab7f6721e85"}
{"level":"debug","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:13:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:13:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b"}
{"level":"debug","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b"}
{"level":"debug","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:13:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:13:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:13:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:13:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b"}
{"level":"info","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:13:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:13:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b"}
{"level":"info","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:13:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:13:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:13:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:13:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f"}
{"level":"info","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f"}
{"level":"debug","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:13:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:13:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b"}
{"level":"info","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:13:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:13:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f"}
{"level":"info","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"625354f2f12cc3abaa7508f9f92a56de8bdaac41bc1cdb5837d65605dd45ef25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:13:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:13:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f"}
{"level":"info","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"625354f2f12cc3abaa7508f9f92a56de8bdaac41bc1cdb5837d65605dd45ef25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:13:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:13:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/625354f2f12cc3abaa7508f9f92a56de8bdaac41bc1cdb5837d65605dd45ef25"}
{"level":"info","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"625354f2f12cc3abaa7508f9f92a56de8bdaac41bc1cdb5837d65605dd45ef25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:13:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:13:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["625354f2f12cc3abaa7508f9f92a56de8bdaac41bc1cdb5837d65605dd45ef25"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f"}
{"level":"info","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"625354f2f12cc3abaa7508f9f92a56de8bdaac41bc1cdb5837d65605dd45ef25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"625354f2f12cc3abaa7508f9f92a56de8bdaac41bc1cdb5837d65605dd45ef25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:13:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:13:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/625354f2f12cc3abaa7508f9f92a56de8bdaac41bc1cdb5837d65605dd45ef25"}
{"level":"info","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"625354f2f12cc3abaa7508f9f92a56de8bdaac41bc1cdb5837d65605dd45ef25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"625354f2f12cc3abaa7508f9f92a56de8bdaac41bc1cdb5837d65605dd45ef25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:13:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:13:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["625354f2f12cc3abaa7508f9f92a56de8bdaac41bc1cdb5837d65605dd45ef25"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f"}
{"level":"info","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"625354f2f12cc3abaa7508f9f92a56de8bdaac41bc1cdb5837d65605dd45ef25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:13:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:13:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/625354f2f12cc3abaa7508f9f92a56de8bdaac41bc1cdb5837d65605dd45ef25"}
{"level":"info","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"625354f2f12cc3abaa7508f9f92a56de8bdaac41bc1cdb5837d65605dd45ef25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:13:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:13:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1"}
{"level":"info","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:13:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:13:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:13:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:13:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/625354f2f12cc3abaa7508f9f92a56de8bdaac41bc1cdb5837d65605dd45ef25"}
{"level":"info","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:13:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:13:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1"}
{"level":"info","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:13:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:13:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1"}
{"level":"debug","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e538336a636d01c87f16c56787fedf8558d125d0abe1a0dd6c1be243b760ffde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:13:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:13:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1"}
{"level":"info","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e538336a636d01c87f16c56787fedf8558d125d0abe1a0dd6c1be243b760ffde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e538336a636d01c87f16c56787fedf8558d125d0abe1a0dd6c1be243b760ffde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:13:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:13:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e538336a636d01c87f16c56787fedf8558d125d0abe1a0dd6c1be243b760ffde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e538336a636d01c87f16c56787fedf8558d125d0abe1a0dd6c1be243b760ffde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:13:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:13:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e538336a636d01c87f16c56787fedf8558d125d0abe1a0dd6c1be243b760ffde"}
{"level":"error","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e538336a636d01c87f16c56787fedf8558d125d0abe1a0dd6c1be243b760ffde","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e538336a636d01c87f16c56787fedf8558d125d0abe1a0dd6c1be243b760ffde\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:13:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:13:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e538336a636d01c87f16c56787fedf8558d125d0abe1a0dd6c1be243b760ffde"}
{"level":"info","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e538336a636d01c87f16c56787fedf8558d125d0abe1a0dd6c1be243b760ffde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:13:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:13:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e538336a636d01c87f16c56787fedf8558d125d0abe1a0dd6c1be243b760ffde"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e538336a636d01c87f16c56787fedf8558d125d0abe1a0dd6c1be243b760ffde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:13:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:13:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1"}
{"level":"info","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e538336a636d01c87f16c56787fedf8558d125d0abe1a0dd6c1be243b760ffde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:13:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:13:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e538336a636d01c87f16c56787fedf8558d125d0abe1a0dd6c1be243b760ffde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:13:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:13:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e538336a636d01c87f16c56787fedf8558d125d0abe1a0dd6c1be243b760ffde"}
{"level":"info","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e538336a636d01c87f16c56787fedf8558d125d0abe1a0dd6c1be243b760ffde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:13:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:13:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e538336a636d01c87f16c56787fedf8558d125d0abe1a0dd6c1be243b760ffde"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e538336a636d01c87f16c56787fedf8558d125d0abe1a0dd6c1be243b760ffde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:13:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:13:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e538336a636d01c87f16c56787fedf8558d125d0abe1a0dd6c1be243b760ffde","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1"}
{"level":"debug","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:13:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:13:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:13:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:13:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e538336a636d01c87f16c56787fedf8558d125d0abe1a0dd6c1be243b760ffde"}
{"level":"debug","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3278584cbc942b64161acc41575a3b14a0a179f5b36855d908d0018c6ec58815","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:13:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:13:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3278584cbc942b64161acc41575a3b14a0a179f5b36855d908d0018c6ec58815","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3278584cbc942b64161acc41575a3b14a0a179f5b36855d908d0018c6ec58815","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1"}
{"level":"debug","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3278584cbc942b64161acc41575a3b14a0a179f5b36855d908d0018c6ec58815","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:13:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:13:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3278584cbc942b64161acc41575a3b14a0a179f5b36855d908d0018c6ec58815"}
{"level":"info","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3278584cbc942b64161acc41575a3b14a0a179f5b36855d908d0018c6ec58815","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3278584cbc942b64161acc41575a3b14a0a179f5b36855d908d0018c6ec58815","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3278584cbc942b64161acc41575a3b14a0a179f5b36855d908d0018c6ec58815"}
{"level":"debug","ts":"2026-07-20T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3278584cbc942b64161acc41575a3b14a0a179f5b36855d908d0018c6ec58815","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:13:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:13:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3278584cbc942b64161acc41575a3b14a0a179f5b36855d908d0018c6ec58815"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3278584cbc942b64161acc41575a3b14a0a179f5b36855d908d0018c6ec58815","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3278584cbc942b64161acc41575a3b14a0a179f5b36855d908d0018c6ec58815","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:13:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:13:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3278584cbc942b64161acc41575a3b14a0a179f5b36855d908d0018c6ec58815"}
{"level":"debug","ts":"2026-07-20T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:13:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:13:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:13:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:13:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1"}
{"level":"info","ts":"2026-07-20T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:13:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:13:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a"}
{"level":"info","ts":"2026-07-20T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:13:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:13:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1"}
{"level":"info","ts":"2026-07-20T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:13:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:13:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a"}
{"level":"info","ts":"2026-07-20T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0e68c7cbb366a1148181d6858592ce38edfa4aee52635b435f6587a92000874","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:13:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:13:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1"}
{"level":"info","ts":"2026-07-20T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0e68c7cbb366a1148181d6858592ce38edfa4aee52635b435f6587a92000874","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:13:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:13:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d38e9531f2948c98d6561c7a5375095b2dfb55c0a8132008db0b9a4e8c078bd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:13:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:13:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0e68c7cbb366a1148181d6858592ce38edfa4aee52635b435f6587a92000874"}
{"level":"info","ts":"2026-07-20T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d38e9531f2948c98d6561c7a5375095b2dfb55c0a8132008db0b9a4e8c078bd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0e68c7cbb366a1148181d6858592ce38edfa4aee52635b435f6587a92000874","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:13:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:13:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0e68c7cbb366a1148181d6858592ce38edfa4aee52635b435f6587a92000874"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a"}
{"level":"info","ts":"2026-07-20T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0e68c7cbb366a1148181d6858592ce38edfa4aee52635b435f6587a92000874","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:13:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:13:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d38e9531f2948c98d6561c7a5375095b2dfb55c0a8132008db0b9a4e8c078bd7"}
{"level":"info","ts":"2026-07-20T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d38e9531f2948c98d6561c7a5375095b2dfb55c0a8132008db0b9a4e8c078bd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:13:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:13:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d38e9531f2948c98d6561c7a5375095b2dfb55c0a8132008db0b9a4e8c078bd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d38e9531f2948c98d6561c7a5375095b2dfb55c0a8132008db0b9a4e8c078bd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0e68c7cbb366a1148181d6858592ce38edfa4aee52635b435f6587a92000874","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:13:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:13:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38"}
{"level":"info","ts":"2026-07-20T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d38e9531f2948c98d6561c7a5375095b2dfb55c0a8132008db0b9a4e8c078bd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:13:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:13:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0e68c7cbb366a1148181d6858592ce38edfa4aee52635b435f6587a92000874"}
{"level":"info","ts":"2026-07-20T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:13:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:13:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d38e9531f2948c98d6561c7a5375095b2dfb55c0a8132008db0b9a4e8c078bd7"}
{"level":"error","ts":"2026-07-20T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-20T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:13:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:13:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38"}
{"level":"info","ts":"2026-07-20T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38"}
{"level":"debug","ts":"2026-07-20T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:13:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:13:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:13:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:13:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38"}
{"level":"info","ts":"2026-07-20T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:13:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:13:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38"}
{"level":"info","ts":"2026-07-20T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:13:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:13:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38"}
{"level":"error","ts":"2026-07-20T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-20T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:13:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cb1af0cc-c170-4601-ba49-4bac28a4d36b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:43376","PortSpecifier":{"PortValue":43376}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cb1af0cc-c170-4601-ba49-4bac28a4d36b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T17:13:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cb1af0cc-c170-4601-ba49-4bac28a4d36b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:43376","PortSpecifier":{"PortValue":43376}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784567599,"nanos":267788628},"http":{"id":"cb1af0cc-c170-4601-ba49-4bac28a4d36b","method":"POST","headers":{":authority":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:13:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cb1af0cc-c170-4601-ba49-4bac28a4d36b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-20T17:13:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cb1af0cc-c170-4601-ba49-4bac28a4d36b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1b91b571-c80d-4224-bb2b-6fe9d0687db6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8940b42d-6f21-40dc-a902-53f729cc3b47"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/187485271a22"]}}
{"level":"debug","ts":"2026-07-20T17:13:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cb1af0cc-c170-4601-ba49-4bac28a4d36b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/187485271a22"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8940b42d-6f21-40dc-a902-53f729cc3b47"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1b91b571-c80d-4224-bb2b-6fe9d0687db6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ad5c0a14cddabf54b41d68e875c01ed6288ff6f33e99b4c5d95955894887a6f3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:13:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb1af0cc-c170-4601-ba49-4bac28a4d36b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:13:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb1af0cc-c170-4601-ba49-4bac28a4d36b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:13:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb1af0cc-c170-4601-ba49-4bac28a4d36b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a16895/auth-test-model-a16895\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a16895/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:13:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cb1af0cc-c170-4601-ba49-4bac28a4d36b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-20T17:13:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb1af0cc-c170-4601-ba49-4bac28a4d36b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T17:13:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb1af0cc-c170-4601-ba49-4bac28a4d36b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-20T17:13:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cb1af0cc-c170-4601-ba49-4bac28a4d36b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T17:13:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cb1af0cc-c170-4601-ba49-4bac28a4d36b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T17:13:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"386b4991-e61e-4de8-93e2-108b279fd200","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:60794","PortSpecifier":{"PortValue":60794}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"386b4991-e61e-4de8-93e2-108b279fd200","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e142d5.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T17:13:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"386b4991-e61e-4de8-93e2-108b279fd200","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:60794","PortSpecifier":{"PortValue":60794}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784567599,"nanos":299799429},"http":{"id":"386b4991-e61e-4de8-93e2-108b279fd200","method":"POST","headers":{":authority":"e2e-shared-b-e142d5.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:13:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"386b4991-e61e-4de8-93e2-108b279fd200","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-20T17:13:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"386b4991-e61e-4de8-93e2-108b279fd200","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1b91b571-c80d-4224-bb2b-6fe9d0687db6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8940b42d-6f21-40dc-a902-53f729cc3b47"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/187485271a22"]}}
{"level":"debug","ts":"2026-07-20T17:13:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"386b4991-e61e-4de8-93e2-108b279fd200","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/187485271a22"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8940b42d-6f21-40dc-a902-53f729cc3b47"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1b91b571-c80d-4224-bb2b-6fe9d0687db6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e142d5.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:13:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"386b4991-e61e-4de8-93e2-108b279fd200","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:13:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"386b4991-e61e-4de8-93e2-108b279fd200","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:13:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"386b4991-e61e-4de8-93e2-108b279fd200","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e142d5/auth-test-model-e142d5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-e142d5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:13:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"386b4991-e61e-4de8-93e2-108b279fd200","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-20T17:13:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"386b4991-e61e-4de8-93e2-108b279fd200","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T17:13:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"386b4991-e61e-4de8-93e2-108b279fd200","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-20T17:13:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"386b4991-e61e-4de8-93e2-108b279fd200","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T17:13:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"386b4991-e61e-4de8-93e2-108b279fd200","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T17:13:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e8477323-e1d8-4048-bb15-57f80fcd8dc7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:60810","PortSpecifier":{"PortValue":60810}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e8477323-e1d8-4048-bb15-57f80fcd8dc7","method":"GET","path":"/maas-api/v1/api-keys/283d7eb1-59ce-49e5-b3c5-ba27fca8a5ba","host":"e2e-shared-b-e142d5.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T17:13:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e8477323-e1d8-4048-bb15-57f80fcd8dc7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:60810","PortSpecifier":{"PortValue":60810}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784567599,"nanos":339615236},"http":{"id":"e8477323-e1d8-4048-bb15-57f80fcd8dc7","method":"GET","headers":{":authority":"e2e-shared-b-e142d5.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/283d7eb1-59ce-49e5-b3c5-ba27fca8a5ba",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:13:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e8477323-e1d8-4048-bb15-57f80fcd8dc7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-20T17:13:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e8477323-e1d8-4048-bb15-57f80fcd8dc7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1b91b571-c80d-4224-bb2b-6fe9d0687db6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8940b42d-6f21-40dc-a902-53f729cc3b47"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/187485271a22"]}}
{"level":"debug","ts":"2026-07-20T17:13:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e8477323-e1d8-4048-bb15-57f80fcd8dc7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/187485271a22"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8940b42d-6f21-40dc-a902-53f729cc3b47"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1b91b571-c80d-4224-bb2b-6fe9d0687db6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e142d5.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/283d7eb1-59ce-49e5-b3c5-ba27fca8a5ba",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:13:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e8477323-e1d8-4048-bb15-57f80fcd8dc7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:13:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e8477323-e1d8-4048-bb15-57f80fcd8dc7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:13:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e8477323-e1d8-4048-bb15-57f80fcd8dc7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e142d5/auth-test-model-e142d5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-e142d5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:13:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e8477323-e1d8-4048-bb15-57f80fcd8dc7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-20T17:13:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e8477323-e1d8-4048-bb15-57f80fcd8dc7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T17:13:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e8477323-e1d8-4048-bb15-57f80fcd8dc7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-20T17:13:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e8477323-e1d8-4048-bb15-57f80fcd8dc7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T17:13:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e8477323-e1d8-4048-bb15-57f80fcd8dc7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T17:13:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9bd26fa9-907a-4226-bbb4-a14211fb1181","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:43390","PortSpecifier":{"PortValue":43390}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9bd26fa9-907a-4226-bbb4-a14211fb1181","method":"GET","path":"/maas-api/v1/api-keys/283d7eb1-59ce-49e5-b3c5-ba27fca8a5ba","host":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T17:13:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9bd26fa9-907a-4226-bbb4-a14211fb1181","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:43390","PortSpecifier":{"PortValue":43390}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784567599,"nanos":374977280},"http":{"id":"9bd26fa9-907a-4226-bbb4-a14211fb1181","method":"GET","headers":{":authority":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/283d7eb1-59ce-49e5-b3c5-ba27fca8a5ba",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:13:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9bd26fa9-907a-4226-bbb4-a14211fb1181","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-20T17:13:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9bd26fa9-907a-4226-bbb4-a14211fb1181","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1b91b571-c80d-4224-bb2b-6fe9d0687db6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8940b42d-6f21-40dc-a902-53f729cc3b47"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/187485271a22"]}}
{"level":"debug","ts":"2026-07-20T17:13:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9bd26fa9-907a-4226-bbb4-a14211fb1181","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/187485271a22"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8940b42d-6f21-40dc-a902-53f729cc3b47"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1b91b571-c80d-4224-bb2b-6fe9d0687db6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ad5c0a14cddabf54b41d68e875c01ed6288ff6f33e99b4c5d95955894887a6f3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/283d7eb1-59ce-49e5-b3c5-ba27fca8a5ba",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:13:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9bd26fa9-907a-4226-bbb4-a14211fb1181","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:13:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9bd26fa9-907a-4226-bbb4-a14211fb1181","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:13:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9bd26fa9-907a-4226-bbb4-a14211fb1181","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a16895/auth-test-model-a16895\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a16895/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:13:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9bd26fa9-907a-4226-bbb4-a14211fb1181","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-20T17:13:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9bd26fa9-907a-4226-bbb4-a14211fb1181","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T17:13:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9bd26fa9-907a-4226-bbb4-a14211fb1181","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-20T17:13:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9bd26fa9-907a-4226-bbb4-a14211fb1181","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T17:13:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9bd26fa9-907a-4226-bbb4-a14211fb1181","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T17:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38"}
{"level":"info","ts":"2026-07-20T17:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/625354f2f12cc3abaa7508f9f92a56de8bdaac41bc1cdb5837d65605dd45ef25"}
{"level":"info","ts":"2026-07-20T17:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d38e9531f2948c98d6561c7a5375095b2dfb55c0a8132008db0b9a4e8c078bd7"}
{"level":"info","ts":"2026-07-20T17:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a"}
{"level":"info","ts":"2026-07-20T17:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1"}
{"level":"info","ts":"2026-07-20T17:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1"}
{"level":"info","ts":"2026-07-20T17:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b"}
{"level":"info","ts":"2026-07-20T17:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f"}
{"level":"info","ts":"2026-07-20T17:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b0e68c7cbb366a1148181d6858592ce38edfa4aee52635b435f6587a92000874"}
{"level":"info","ts":"2026-07-20T17:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/372abb7ebadb5aaa3c594bbe00c4718c27f4e9986afdbbd27a99fab7f6721e85"}
{"level":"info","ts":"2026-07-20T17:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e538336a636d01c87f16c56787fedf8558d125d0abe1a0dd6c1be243b760ffde"}
{"level":"info","ts":"2026-07-20T17:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3278584cbc942b64161acc41575a3b14a0a179f5b36855d908d0018c6ec58815"}
{"level":"debug","ts":"2026-07-20T17:13:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:13:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:13:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f"}
{"level":"info","ts":"2026-07-20T17:13:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:13:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:13:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f"}
{"level":"info","ts":"2026-07-20T17:13:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:13:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f"}
{"level":"debug","ts":"2026-07-20T17:13:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:13:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:13:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:13:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:13:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f"}
{"level":"info","ts":"2026-07-20T17:13:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:13:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f"}
{"level":"debug","ts":"2026-07-20T17:13:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:13:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:13:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:13:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:13:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f"}
{"level":"info","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:13:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:13:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f"}
{"level":"info","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:13:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:13:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:13:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:13:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f"}
{"level":"info","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:13:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:13:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a"}
{"level":"info","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f"}
{"level":"info","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:13:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:13:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a"}
{"level":"info","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:13:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:13:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f"}
{"level":"info","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a"}
{"level":"debug","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:13:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:13:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38"}
{"level":"info","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38"}
{"level":"debug","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:13:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:13:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:13:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:13:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38"}
{"level":"info","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38"}
{"level":"debug","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:13:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:13:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38"}
{"level":"debug","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:13:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:13:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:13:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:13:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1"}
{"level":"info","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:13:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:13:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1"}
{"level":"debug","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1"}
{"level":"debug","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"625354f2f12cc3abaa7508f9f92a56de8bdaac41bc1cdb5837d65605dd45ef25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:13:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:13:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/625354f2f12cc3abaa7508f9f92a56de8bdaac41bc1cdb5837d65605dd45ef25"}
{"level":"info","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"625354f2f12cc3abaa7508f9f92a56de8bdaac41bc1cdb5837d65605dd45ef25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"625354f2f12cc3abaa7508f9f92a56de8bdaac41bc1cdb5837d65605dd45ef25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:13:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:13:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["625354f2f12cc3abaa7508f9f92a56de8bdaac41bc1cdb5837d65605dd45ef25"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/625354f2f12cc3abaa7508f9f92a56de8bdaac41bc1cdb5837d65605dd45ef25"}
{"level":"info","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"625354f2f12cc3abaa7508f9f92a56de8bdaac41bc1cdb5837d65605dd45ef25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"625354f2f12cc3abaa7508f9f92a56de8bdaac41bc1cdb5837d65605dd45ef25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:13:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:13:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["625354f2f12cc3abaa7508f9f92a56de8bdaac41bc1cdb5837d65605dd45ef25"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"625354f2f12cc3abaa7508f9f92a56de8bdaac41bc1cdb5837d65605dd45ef25","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"625354f2f12cc3abaa7508f9f92a56de8bdaac41bc1cdb5837d65605dd45ef25\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:13:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:13:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/625354f2f12cc3abaa7508f9f92a56de8bdaac41bc1cdb5837d65605dd45ef25"}
{"level":"info","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"625354f2f12cc3abaa7508f9f92a56de8bdaac41bc1cdb5837d65605dd45ef25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:13:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:13:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1"}
{"level":"info","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d38e9531f2948c98d6561c7a5375095b2dfb55c0a8132008db0b9a4e8c078bd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:13:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:13:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d38e9531f2948c98d6561c7a5375095b2dfb55c0a8132008db0b9a4e8c078bd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:13:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:13:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d38e9531f2948c98d6561c7a5375095b2dfb55c0a8132008db0b9a4e8c078bd7"}
{"level":"info","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d38e9531f2948c98d6561c7a5375095b2dfb55c0a8132008db0b9a4e8c078bd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:13:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:13:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d38e9531f2948c98d6561c7a5375095b2dfb55c0a8132008db0b9a4e8c078bd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1"}
{"level":"info","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d38e9531f2948c98d6561c7a5375095b2dfb55c0a8132008db0b9a4e8c078bd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d38e9531f2948c98d6561c7a5375095b2dfb55c0a8132008db0b9a4e8c078bd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:13:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:13:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d38e9531f2948c98d6561c7a5375095b2dfb55c0a8132008db0b9a4e8c078bd7"}
{"level":"info","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d38e9531f2948c98d6561c7a5375095b2dfb55c0a8132008db0b9a4e8c078bd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d38e9531f2948c98d6561c7a5375095b2dfb55c0a8132008db0b9a4e8c078bd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:13:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:13:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d38e9531f2948c98d6561c7a5375095b2dfb55c0a8132008db0b9a4e8c078bd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1"}
{"level":"info","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d38e9531f2948c98d6561c7a5375095b2dfb55c0a8132008db0b9a4e8c078bd7"}
{"level":"info","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d38e9531f2948c98d6561c7a5375095b2dfb55c0a8132008db0b9a4e8c078bd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d38e9531f2948c98d6561c7a5375095b2dfb55c0a8132008db0b9a4e8c078bd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:13:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:13:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d38e9531f2948c98d6561c7a5375095b2dfb55c0a8132008db0b9a4e8c078bd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d38e9531f2948c98d6561c7a5375095b2dfb55c0a8132008db0b9a4e8c078bd7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d38e9531f2948c98d6561c7a5375095b2dfb55c0a8132008db0b9a4e8c078bd7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d38e9531f2948c98d6561c7a5375095b2dfb55c0a8132008db0b9a4e8c078bd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:13:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:13:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d38e9531f2948c98d6561c7a5375095b2dfb55c0a8132008db0b9a4e8c078bd7"}
{"level":"info","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d38e9531f2948c98d6561c7a5375095b2dfb55c0a8132008db0b9a4e8c078bd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d38e9531f2948c98d6561c7a5375095b2dfb55c0a8132008db0b9a4e8c078bd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d38e9531f2948c98d6561c7a5375095b2dfb55c0a8132008db0b9a4e8c078bd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:13:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:13:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d38e9531f2948c98d6561c7a5375095b2dfb55c0a8132008db0b9a4e8c078bd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d38e9531f2948c98d6561c7a5375095b2dfb55c0a8132008db0b9a4e8c078bd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d38e9531f2948c98d6561c7a5375095b2dfb55c0a8132008db0b9a4e8c078bd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d38e9531f2948c98d6561c7a5375095b2dfb55c0a8132008db0b9a4e8c078bd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:13:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:13:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d38e9531f2948c98d6561c7a5375095b2dfb55c0a8132008db0b9a4e8c078bd7"}
{"level":"info","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d38e9531f2948c98d6561c7a5375095b2dfb55c0a8132008db0b9a4e8c078bd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d38e9531f2948c98d6561c7a5375095b2dfb55c0a8132008db0b9a4e8c078bd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:13:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:13:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d38e9531f2948c98d6561c7a5375095b2dfb55c0a8132008db0b9a4e8c078bd7"}
{"level":"error","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d38e9531f2948c98d6561c7a5375095b2dfb55c0a8132008db0b9a4e8c078bd7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d38e9531f2948c98d6561c7a5375095b2dfb55c0a8132008db0b9a4e8c078bd7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:13:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:13:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d38e9531f2948c98d6561c7a5375095b2dfb55c0a8132008db0b9a4e8c078bd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:13:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:13:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d38e9531f2948c98d6561c7a5375095b2dfb55c0a8132008db0b9a4e8c078bd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b"}
{"level":"info","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d38e9531f2948c98d6561c7a5375095b2dfb55c0a8132008db0b9a4e8c078bd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:13:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:13:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d38e9531f2948c98d6561c7a5375095b2dfb55c0a8132008db0b9a4e8c078bd7"}
{"level":"info","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:13:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:13:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1"}
{"level":"info","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d38e9531f2948c98d6561c7a5375095b2dfb55c0a8132008db0b9a4e8c078bd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:13:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:13:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b"}
{"level":"info","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e538336a636d01c87f16c56787fedf8558d125d0abe1a0dd6c1be243b760ffde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:13:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:13:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d38e9531f2948c98d6561c7a5375095b2dfb55c0a8132008db0b9a4e8c078bd7"}
{"level":"info","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e538336a636d01c87f16c56787fedf8558d125d0abe1a0dd6c1be243b760ffde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:13:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:13:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1"}
{"level":"info","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3278584cbc942b64161acc41575a3b14a0a179f5b36855d908d0018c6ec58815","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:13:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:13:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3278584cbc942b64161acc41575a3b14a0a179f5b36855d908d0018c6ec58815","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e538336a636d01c87f16c56787fedf8558d125d0abe1a0dd6c1be243b760ffde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0e68c7cbb366a1148181d6858592ce38edfa4aee52635b435f6587a92000874","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:13:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:13:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b"}
{"level":"info","ts":"2026-07-20T17:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0e68c7cbb366a1148181d6858592ce38edfa4aee52635b435f6587a92000874","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:13:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:13:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e538336a636d01c87f16c56787fedf8558d125d0abe1a0dd6c1be243b760ffde"}
{"level":"info","ts":"2026-07-20T17:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3278584cbc942b64161acc41575a3b14a0a179f5b36855d908d0018c6ec58815","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:13:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:13:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3278584cbc942b64161acc41575a3b14a0a179f5b36855d908d0018c6ec58815"}
{"level":"info","ts":"2026-07-20T17:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3278584cbc942b64161acc41575a3b14a0a179f5b36855d908d0018c6ec58815","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e538336a636d01c87f16c56787fedf8558d125d0abe1a0dd6c1be243b760ffde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:13:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:13:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e538336a636d01c87f16c56787fedf8558d125d0abe1a0dd6c1be243b760ffde"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0e68c7cbb366a1148181d6858592ce38edfa4aee52635b435f6587a92000874"}
{"level":"info","ts":"2026-07-20T17:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e538336a636d01c87f16c56787fedf8558d125d0abe1a0dd6c1be243b760ffde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0e68c7cbb366a1148181d6858592ce38edfa4aee52635b435f6587a92000874","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:13:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:13:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0e68c7cbb366a1148181d6858592ce38edfa4aee52635b435f6587a92000874"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0e68c7cbb366a1148181d6858592ce38edfa4aee52635b435f6587a92000874","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:13:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:13:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1"}
{"level":"info","ts":"2026-07-20T17:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"372abb7ebadb5aaa3c594bbe00c4718c27f4e9986afdbbd27a99fab7f6721e85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:13:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:13:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/372abb7ebadb5aaa3c594bbe00c4718c27f4e9986afdbbd27a99fab7f6721e85"}
{"level":"info","ts":"2026-07-20T17:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"372abb7ebadb5aaa3c594bbe00c4718c27f4e9986afdbbd27a99fab7f6721e85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3278584cbc942b64161acc41575a3b14a0a179f5b36855d908d0018c6ec58815","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e538336a636d01c87f16c56787fedf8558d125d0abe1a0dd6c1be243b760ffde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0e68c7cbb366a1148181d6858592ce38edfa4aee52635b435f6587a92000874","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:13:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:13:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3278584cbc942b64161acc41575a3b14a0a179f5b36855d908d0018c6ec58815"}
{"level":"info","ts":"2026-07-20T17:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"372abb7ebadb5aaa3c594bbe00c4718c27f4e9986afdbbd27a99fab7f6721e85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:13:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:13:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["372abb7ebadb5aaa3c594bbe00c4718c27f4e9986afdbbd27a99fab7f6721e85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e538336a636d01c87f16c56787fedf8558d125d0abe1a0dd6c1be243b760ffde"}
{"level":"info","ts":"2026-07-20T17:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"372abb7ebadb5aaa3c594bbe00c4718c27f4e9986afdbbd27a99fab7f6721e85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3278584cbc942b64161acc41575a3b14a0a179f5b36855d908d0018c6ec58815","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:13:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:13:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3278584cbc942b64161acc41575a3b14a0a179f5b36855d908d0018c6ec58815"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3278584cbc942b64161acc41575a3b14a0a179f5b36855d908d0018c6ec58815","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"372abb7ebadb5aaa3c594bbe00c4718c27f4e9986afdbbd27a99fab7f6721e85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3278584cbc942b64161acc41575a3b14a0a179f5b36855d908d0018c6ec58815","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0e68c7cbb366a1148181d6858592ce38edfa4aee52635b435f6587a92000874"}
{"level":"info","ts":"2026-07-20T17:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1"}
{"level":"info","ts":"2026-07-20T17:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/372abb7ebadb5aaa3c594bbe00c4718c27f4e9986afdbbd27a99fab7f6721e85"}
{"level":"info","ts":"2026-07-20T17:13:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3278584cbc942b64161acc41575a3b14a0a179f5b36855d908d0018c6ec58815"}
{"level":"info","ts":"2026-07-20T17:13:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e76cfe64-e5f6-4eb9-8c1f-7b275f40e90a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:48414","PortSpecifier":{"PortValue":48414}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e76cfe64-e5f6-4eb9-8c1f-7b275f40e90a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T17:13:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e76cfe64-e5f6-4eb9-8c1f-7b275f40e90a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:48414","PortSpecifier":{"PortValue":48414}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784567618,"nanos":932232926},"http":{"id":"e76cfe64-e5f6-4eb9-8c1f-7b275f40e90a","method":"POST","headers":{":authority":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:13:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e76cfe64-e5f6-4eb9-8c1f-7b275f40e90a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-20T17:13:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e76cfe64-e5f6-4eb9-8c1f-7b275f40e90a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1b91b571-c80d-4224-bb2b-6fe9d0687db6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8940b42d-6f21-40dc-a902-53f729cc3b47"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/187485271a22"]}}
{"level":"debug","ts":"2026-07-20T17:13:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e76cfe64-e5f6-4eb9-8c1f-7b275f40e90a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/187485271a22"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8940b42d-6f21-40dc-a902-53f729cc3b47"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1b91b571-c80d-4224-bb2b-6fe9d0687db6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ad5c0a14cddabf54b41d68e875c01ed6288ff6f33e99b4c5d95955894887a6f3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:13:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e76cfe64-e5f6-4eb9-8c1f-7b275f40e90a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:13:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e76cfe64-e5f6-4eb9-8c1f-7b275f40e90a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:13:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e76cfe64-e5f6-4eb9-8c1f-7b275f40e90a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a16895/auth-test-model-a16895\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a16895/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:13:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e76cfe64-e5f6-4eb9-8c1f-7b275f40e90a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-20T17:13:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e76cfe64-e5f6-4eb9-8c1f-7b275f40e90a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T17:13:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e76cfe64-e5f6-4eb9-8c1f-7b275f40e90a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-20T17:13:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e76cfe64-e5f6-4eb9-8c1f-7b275f40e90a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T17:13:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e76cfe64-e5f6-4eb9-8c1f-7b275f40e90a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T17:13:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9ccb86ae-e909-46fa-abcd-f50d330725cb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:59180","PortSpecifier":{"PortValue":59180}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9ccb86ae-e909-46fa-abcd-f50d330725cb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e142d5.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T17:13:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9ccb86ae-e909-46fa-abcd-f50d330725cb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:59180","PortSpecifier":{"PortValue":59180}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784567618,"nanos":966585250},"http":{"id":"9ccb86ae-e909-46fa-abcd-f50d330725cb","method":"POST","headers":{":authority":"e2e-shared-b-e142d5.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:13:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9ccb86ae-e909-46fa-abcd-f50d330725cb","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-20T17:13:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9ccb86ae-e909-46fa-abcd-f50d330725cb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1b91b571-c80d-4224-bb2b-6fe9d0687db6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8940b42d-6f21-40dc-a902-53f729cc3b47"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/187485271a22"]}}
{"level":"debug","ts":"2026-07-20T17:13:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9ccb86ae-e909-46fa-abcd-f50d330725cb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/187485271a22"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8940b42d-6f21-40dc-a902-53f729cc3b47"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1b91b571-c80d-4224-bb2b-6fe9d0687db6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e142d5.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:13:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9ccb86ae-e909-46fa-abcd-f50d330725cb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:13:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9ccb86ae-e909-46fa-abcd-f50d330725cb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:13:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9ccb86ae-e909-46fa-abcd-f50d330725cb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e142d5/auth-test-model-e142d5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-e142d5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:13:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9ccb86ae-e909-46fa-abcd-f50d330725cb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-20T17:13:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9ccb86ae-e909-46fa-abcd-f50d330725cb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T17:13:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9ccb86ae-e909-46fa-abcd-f50d330725cb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-20T17:13:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9ccb86ae-e909-46fa-abcd-f50d330725cb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T17:13:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9ccb86ae-e909-46fa-abcd-f50d330725cb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T17:13:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7e2b97da-24ad-4d9a-aa82-7d3c6681dbdf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:48424","PortSpecifier":{"PortValue":48424}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7e2b97da-24ad-4d9a-aa82-7d3c6681dbdf","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T17:13:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7e2b97da-24ad-4d9a-aa82-7d3c6681dbdf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:48424","PortSpecifier":{"PortValue":48424}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784567619,"nanos":1608729},"http":{"id":"7e2b97da-24ad-4d9a-aa82-7d3c6681dbdf","method":"POST","headers":{":authority":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:13:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7e2b97da-24ad-4d9a-aa82-7d3c6681dbdf","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-DiGk667a9JeMPBHg_c4KBwS079gSuYLjk7d4p6ClJM9g03kUQ0yJLVbR7vKH"}
{"level":"debug","ts":"2026-07-20T17:13:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7e2b97da-24ad-4d9a-aa82-7d3c6681dbdf","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-DiGk667a9JeMPBHg_c4KBwS079gSuYLjk7d4p6ClJM9g03kUQ0yJLVbR7vKH\"}"}
{"level":"debug","ts":"2026-07-20T17:13:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7e2b97da-24ad-4d9a-aa82-7d3c6681dbdf","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a4c366e1-f84c-4fe3-bf77-dd412a3ec7fb","keyName":"e2e-auth-iso-a-13af5b","subscription":"e2e-auth-iso-86a237","tenant":"e2e-shared-a-a16895","userId":"a4c366e1-f84c-4fe3-bf77-dd412a3ec7fb","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T17:13:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7e2b97da-24ad-4d9a-aa82-7d3c6681dbdf","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:13:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7e2b97da-24ad-4d9a-aa82-7d3c6681dbdf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:13:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7e2b97da-24ad-4d9a-aa82-7d3c6681dbdf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:13:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7e2b97da-24ad-4d9a-aa82-7d3c6681dbdf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a16895/auth-test-model-a16895\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a16895/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:13:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7e2b97da-24ad-4d9a-aa82-7d3c6681dbdf","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T17:13:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7e2b97da-24ad-4d9a-aa82-7d3c6681dbdf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-20T17:13:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7e2b97da-24ad-4d9a-aa82-7d3c6681dbdf","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-86a237"}
{"level":"debug","ts":"2026-07-20T17:13:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7e2b97da-24ad-4d9a-aa82-7d3c6681dbdf","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-20T17:13:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7e2b97da-24ad-4d9a-aa82-7d3c6681dbdf","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T17:13:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7e2b97da-24ad-4d9a-aa82-7d3c6681dbdf","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T17:13:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/207511008834288fd40d351f11629a032942a58554aca2695431978f7a516264"}
{"level":"info","ts":"2026-07-20T17:13:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1"}
{"level":"info","ts":"2026-07-20T17:13:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d38e9531f2948c98d6561c7a5375095b2dfb55c0a8132008db0b9a4e8c078bd7"}
{"level":"info","ts":"2026-07-20T17:13:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b0e68c7cbb366a1148181d6858592ce38edfa4aee52635b435f6587a92000874"}
{"level":"info","ts":"2026-07-20T17:13:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ca2ba88b26ddc541bd0cdbccf76e0a666d2a896c049c0e0565f08c266624fe41"}
{"level":"info","ts":"2026-07-20T17:13:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aa2db4a952d0fd823acdadf68063cf25cb0df722aa8b058f5ec6eec44e64ab38"}
{"level":"info","ts":"2026-07-20T17:13:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/67a111975a6266dd3666b13cce82115a4fd66678e1d8cda047d3a39a881bf74d"}
{"level":"info","ts":"2026-07-20T17:13:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/17429088acb1885312be4ce984582931fb33dca5ba030859f90261ef7902453f"}
{"level":"info","ts":"2026-07-20T17:13:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/26529ad241dda8eced44de9337e6c6a5fe0a2e3df4e6431c3a3ef264d9d4e2e1"}
{"level":"info","ts":"2026-07-20T17:13:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/16ff622d9380d833afab6abdec15c02025601973e789508c9779879d44cb7d9e"}
{"level":"info","ts":"2026-07-20T17:13:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a"}
{"level":"info","ts":"2026-07-20T17:13:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d67f18c380979b0f431a3969ca3fcef6cf3d7b095d5469cb5f5e2d0405376dd5"}
{"level":"info","ts":"2026-07-20T17:13:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/84a74924621c0e34122eac15c62e5daf511d905fa85ce0ab8c09baf967e284f0"}
{"level":"info","ts":"2026-07-20T17:13:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/625354f2f12cc3abaa7508f9f92a56de8bdaac41bc1cdb5837d65605dd45ef25"}
{"level":"info","ts":"2026-07-20T17:13:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/da33c150ec90c1b72783299c4a3e73e6a1987efaa64d7269db19145e86912c65"}
{"level":"info","ts":"2026-07-20T17:13:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/372abb7ebadb5aaa3c594bbe00c4718c27f4e9986afdbbd27a99fab7f6721e85"}
{"level":"info","ts":"2026-07-20T17:13:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f"}
{"level":"info","ts":"2026-07-20T17:13:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6637bce216785b5d68b8e8bb73fe0d01fd50cf932e4cf0d322909c7c113e4d89"}
{"level":"info","ts":"2026-07-20T17:13:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3278584cbc942b64161acc41575a3b14a0a179f5b36855d908d0018c6ec58815"}
{"level":"info","ts":"2026-07-20T17:13:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ad5c0a14cddabf54b41d68e875c01ed6288ff6f33e99b4c5d95955894887a6f3"}
{"level":"info","ts":"2026-07-20T17:13:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e538336a636d01c87f16c56787fedf8558d125d0abe1a0dd6c1be243b760ffde"}
{"level":"info","ts":"2026-07-20T17:13:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/73bc606ec9c141b55c1ccd96def2f16d851cf9a81f50da0d5ce9ef0caf4a200a"}
{"level":"info","ts":"2026-07-20T17:13:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6c49b9e59862955ec42a387e3a09fda98783980955d56c5f5c9c04dc901408ff"}
{"level":"info","ts":"2026-07-20T17:13:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b"}
{"level":"debug","ts":"2026-07-20T17:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67a111975a6266dd3666b13cce82115a4fd66678e1d8cda047d3a39a881bf74d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:14:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:14:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67a111975a6266dd3666b13cce82115a4fd66678e1d8cda047d3a39a881bf74d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67a111975a6266dd3666b13cce82115a4fd66678e1d8cda047d3a39a881bf74d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:14:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:14:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67a111975a6266dd3666b13cce82115a4fd66678e1d8cda047d3a39a881bf74d"}
{"level":"info","ts":"2026-07-20T17:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67a111975a6266dd3666b13cce82115a4fd66678e1d8cda047d3a39a881bf74d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67a111975a6266dd3666b13cce82115a4fd66678e1d8cda047d3a39a881bf74d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:14:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:14:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-20T17:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"67a111975a6266dd3666b13cce82115a4fd66678e1d8cda047d3a39a881bf74d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"67a111975a6266dd3666b13cce82115a4fd66678e1d8cda047d3a39a881bf74d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-20T17:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67a111975a6266dd3666b13cce82115a4fd66678e1d8cda047d3a39a881bf74d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67a111975a6266dd3666b13cce82115a4fd66678e1d8cda047d3a39a881bf74d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67a111975a6266dd3666b13cce82115a4fd66678e1d8cda047d3a39a881bf74d"}
{"level":"info","ts":"2026-07-20T17:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67a111975a6266dd3666b13cce82115a4fd66678e1d8cda047d3a39a881bf74d"}
{"level":"debug","ts":"2026-07-20T17:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67a111975a6266dd3666b13cce82115a4fd66678e1d8cda047d3a39a881bf74d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:14:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:14:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67a111975a6266dd3666b13cce82115a4fd66678e1d8cda047d3a39a881bf74d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67a111975a6266dd3666b13cce82115a4fd66678e1d8cda047d3a39a881bf74d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67a111975a6266dd3666b13cce82115a4fd66678e1d8cda047d3a39a881bf74d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:14:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:14:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67a111975a6266dd3666b13cce82115a4fd66678e1d8cda047d3a39a881bf74d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67a111975a6266dd3666b13cce82115a4fd66678e1d8cda047d3a39a881bf74d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67a111975a6266dd3666b13cce82115a4fd66678e1d8cda047d3a39a881bf74d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67a111975a6266dd3666b13cce82115a4fd66678e1d8cda047d3a39a881bf74d"}
{"level":"debug","ts":"2026-07-20T17:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67a111975a6266dd3666b13cce82115a4fd66678e1d8cda047d3a39a881bf74d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67a111975a6266dd3666b13cce82115a4fd66678e1d8cda047d3a39a881bf74d"}
{"level":"debug","ts":"2026-07-20T17:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67a111975a6266dd3666b13cce82115a4fd66678e1d8cda047d3a39a881bf74d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:14:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:14:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67a111975a6266dd3666b13cce82115a4fd66678e1d8cda047d3a39a881bf74d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67a111975a6266dd3666b13cce82115a4fd66678e1d8cda047d3a39a881bf74d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67a111975a6266dd3666b13cce82115a4fd66678e1d8cda047d3a39a881bf74d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:14:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:14:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67a111975a6266dd3666b13cce82115a4fd66678e1d8cda047d3a39a881bf74d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67a111975a6266dd3666b13cce82115a4fd66678e1d8cda047d3a39a881bf74d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80ed46195b331aba98cb84777e3ef1d5ba98341be74bd89d4174e6c059546547","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:14:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:14:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67a111975a6266dd3666b13cce82115a4fd66678e1d8cda047d3a39a881bf74d"}
{"level":"info","ts":"2026-07-20T17:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80ed46195b331aba98cb84777e3ef1d5ba98341be74bd89d4174e6c059546547","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67a111975a6266dd3666b13cce82115a4fd66678e1d8cda047d3a39a881bf74d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:14:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:14:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67a111975a6266dd3666b13cce82115a4fd66678e1d8cda047d3a39a881bf74d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80ed46195b331aba98cb84777e3ef1d5ba98341be74bd89d4174e6c059546547"}
{"level":"info","ts":"2026-07-20T17:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67a111975a6266dd3666b13cce82115a4fd66678e1d8cda047d3a39a881bf74d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80ed46195b331aba98cb84777e3ef1d5ba98341be74bd89d4174e6c059546547","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:14:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:14:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80ed46195b331aba98cb84777e3ef1d5ba98341be74bd89d4174e6c059546547"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67a111975a6266dd3666b13cce82115a4fd66678e1d8cda047d3a39a881bf74d"}
{"level":"info","ts":"2026-07-20T17:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80ed46195b331aba98cb84777e3ef1d5ba98341be74bd89d4174e6c059546547","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67a111975a6266dd3666b13cce82115a4fd66678e1d8cda047d3a39a881bf74d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80ed46195b331aba98cb84777e3ef1d5ba98341be74bd89d4174e6c059546547","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:14:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:14:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80ed46195b331aba98cb84777e3ef1d5ba98341be74bd89d4174e6c059546547"}
{"level":"info","ts":"2026-07-20T17:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80ed46195b331aba98cb84777e3ef1d5ba98341be74bd89d4174e6c059546547","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80ed46195b331aba98cb84777e3ef1d5ba98341be74bd89d4174e6c059546547","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:14:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:14:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80ed46195b331aba98cb84777e3ef1d5ba98341be74bd89d4174e6c059546547"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67a111975a6266dd3666b13cce82115a4fd66678e1d8cda047d3a39a881bf74d"}
{"level":"info","ts":"2026-07-20T17:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80ed46195b331aba98cb84777e3ef1d5ba98341be74bd89d4174e6c059546547","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80ed46195b331aba98cb84777e3ef1d5ba98341be74bd89d4174e6c059546547","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80ed46195b331aba98cb84777e3ef1d5ba98341be74bd89d4174e6c059546547","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:14:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:14:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80ed46195b331aba98cb84777e3ef1d5ba98341be74bd89d4174e6c059546547"}
{"level":"info","ts":"2026-07-20T17:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80ed46195b331aba98cb84777e3ef1d5ba98341be74bd89d4174e6c059546547","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80ed46195b331aba98cb84777e3ef1d5ba98341be74bd89d4174e6c059546547","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80ed46195b331aba98cb84777e3ef1d5ba98341be74bd89d4174e6c059546547","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80ed46195b331aba98cb84777e3ef1d5ba98341be74bd89d4174e6c059546547"}
{"level":"info","ts":"2026-07-20T17:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80ed46195b331aba98cb84777e3ef1d5ba98341be74bd89d4174e6c059546547"}
{"level":"debug","ts":"2026-07-20T17:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80ed46195b331aba98cb84777e3ef1d5ba98341be74bd89d4174e6c059546547","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:14:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:14:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80ed46195b331aba98cb84777e3ef1d5ba98341be74bd89d4174e6c059546547"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80ed46195b331aba98cb84777e3ef1d5ba98341be74bd89d4174e6c059546547","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80ed46195b331aba98cb84777e3ef1d5ba98341be74bd89d4174e6c059546547","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:14:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:14:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80ed46195b331aba98cb84777e3ef1d5ba98341be74bd89d4174e6c059546547","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80ed46195b331aba98cb84777e3ef1d5ba98341be74bd89d4174e6c059546547","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80ed46195b331aba98cb84777e3ef1d5ba98341be74bd89d4174e6c059546547"}
{"level":"debug","ts":"2026-07-20T17:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80ed46195b331aba98cb84777e3ef1d5ba98341be74bd89d4174e6c059546547","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80ed46195b331aba98cb84777e3ef1d5ba98341be74bd89d4174e6c059546547"}
{"level":"debug","ts":"2026-07-20T17:14:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80ed46195b331aba98cb84777e3ef1d5ba98341be74bd89d4174e6c059546547","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:14:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:14:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80ed46195b331aba98cb84777e3ef1d5ba98341be74bd89d4174e6c059546547"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80ed46195b331aba98cb84777e3ef1d5ba98341be74bd89d4174e6c059546547","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80ed46195b331aba98cb84777e3ef1d5ba98341be74bd89d4174e6c059546547","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80ed46195b331aba98cb84777e3ef1d5ba98341be74bd89d4174e6c059546547"}
{"level":"debug","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"207511008834288fd40d351f11629a032942a58554aca2695431978f7a516264","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:14:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:14:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"207511008834288fd40d351f11629a032942a58554aca2695431978f7a516264","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"207511008834288fd40d351f11629a032942a58554aca2695431978f7a516264","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/207511008834288fd40d351f11629a032942a58554aca2695431978f7a516264"}
{"level":"debug","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"207511008834288fd40d351f11629a032942a58554aca2695431978f7a516264","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/207511008834288fd40d351f11629a032942a58554aca2695431978f7a516264"}
{"level":"debug","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"207511008834288fd40d351f11629a032942a58554aca2695431978f7a516264","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:14:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:14:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["207511008834288fd40d351f11629a032942a58554aca2695431978f7a516264"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"207511008834288fd40d351f11629a032942a58554aca2695431978f7a516264","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"207511008834288fd40d351f11629a032942a58554aca2695431978f7a516264","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/207511008834288fd40d351f11629a032942a58554aca2695431978f7a516264"}
{"level":"debug","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"351970792986de7a5d1d5ecba0cf0ba95b723c6f05753838c5c05dd51bd43613","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:14:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:14:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"351970792986de7a5d1d5ecba0cf0ba95b723c6f05753838c5c05dd51bd43613","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"351970792986de7a5d1d5ecba0cf0ba95b723c6f05753838c5c05dd51bd43613","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/351970792986de7a5d1d5ecba0cf0ba95b723c6f05753838c5c05dd51bd43613"}
{"level":"debug","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"351970792986de7a5d1d5ecba0cf0ba95b723c6f05753838c5c05dd51bd43613","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/351970792986de7a5d1d5ecba0cf0ba95b723c6f05753838c5c05dd51bd43613"}
{"level":"debug","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"351970792986de7a5d1d5ecba0cf0ba95b723c6f05753838c5c05dd51bd43613","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:14:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:14:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["351970792986de7a5d1d5ecba0cf0ba95b723c6f05753838c5c05dd51bd43613"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"351970792986de7a5d1d5ecba0cf0ba95b723c6f05753838c5c05dd51bd43613","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"351970792986de7a5d1d5ecba0cf0ba95b723c6f05753838c5c05dd51bd43613","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:14:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:14:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/351970792986de7a5d1d5ecba0cf0ba95b723c6f05753838c5c05dd51bd43613"}
{"level":"info","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"351970792986de7a5d1d5ecba0cf0ba95b723c6f05753838c5c05dd51bd43613","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"351970792986de7a5d1d5ecba0cf0ba95b723c6f05753838c5c05dd51bd43613","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:14:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:14:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["351970792986de7a5d1d5ecba0cf0ba95b723c6f05753838c5c05dd51bd43613"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"351970792986de7a5d1d5ecba0cf0ba95b723c6f05753838c5c05dd51bd43613","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad5c0a14cddabf54b41d68e875c01ed6288ff6f33e99b4c5d95955894887a6f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:14:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:14:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/351970792986de7a5d1d5ecba0cf0ba95b723c6f05753838c5c05dd51bd43613"}
{"level":"info","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad5c0a14cddabf54b41d68e875c01ed6288ff6f33e99b4c5d95955894887a6f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"351970792986de7a5d1d5ecba0cf0ba95b723c6f05753838c5c05dd51bd43613","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad5c0a14cddabf54b41d68e875c01ed6288ff6f33e99b4c5d95955894887a6f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:14:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:14:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad5c0a14cddabf54b41d68e875c01ed6288ff6f33e99b4c5d95955894887a6f3"}
{"level":"info","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad5c0a14cddabf54b41d68e875c01ed6288ff6f33e99b4c5d95955894887a6f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad5c0a14cddabf54b41d68e875c01ed6288ff6f33e99b4c5d95955894887a6f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:14:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:14:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad5c0a14cddabf54b41d68e875c01ed6288ff6f33e99b4c5d95955894887a6f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/351970792986de7a5d1d5ecba0cf0ba95b723c6f05753838c5c05dd51bd43613"}
{"level":"error","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ad5c0a14cddabf54b41d68e875c01ed6288ff6f33e99b4c5d95955894887a6f3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ad5c0a14cddabf54b41d68e875c01ed6288ff6f33e99b4c5d95955894887a6f3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad5c0a14cddabf54b41d68e875c01ed6288ff6f33e99b4c5d95955894887a6f3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad5c0a14cddabf54b41d68e875c01ed6288ff6f33e99b4c5d95955894887a6f3"}
{"level":"debug","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad5c0a14cddabf54b41d68e875c01ed6288ff6f33e99b4c5d95955894887a6f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:14:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:14:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad5c0a14cddabf54b41d68e875c01ed6288ff6f33e99b4c5d95955894887a6f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad5c0a14cddabf54b41d68e875c01ed6288ff6f33e99b4c5d95955894887a6f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad5c0a14cddabf54b41d68e875c01ed6288ff6f33e99b4c5d95955894887a6f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"939b073d1ba510699ce86c85f7fb9f6dfd60d711a8c731841f1d923e5ea97e3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:14:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:14:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"939b073d1ba510699ce86c85f7fb9f6dfd60d711a8c731841f1d923e5ea97e3a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad5c0a14cddabf54b41d68e875c01ed6288ff6f33e99b4c5d95955894887a6f3"}
{"level":"debug","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"939b073d1ba510699ce86c85f7fb9f6dfd60d711a8c731841f1d923e5ea97e3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:14:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:14:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/939b073d1ba510699ce86c85f7fb9f6dfd60d711a8c731841f1d923e5ea97e3a"}
{"level":"info","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"939b073d1ba510699ce86c85f7fb9f6dfd60d711a8c731841f1d923e5ea97e3a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"939b073d1ba510699ce86c85f7fb9f6dfd60d711a8c731841f1d923e5ea97e3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:14:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:14:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"939b073d1ba510699ce86c85f7fb9f6dfd60d711a8c731841f1d923e5ea97e3a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"939b073d1ba510699ce86c85f7fb9f6dfd60d711a8c731841f1d923e5ea97e3a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"info","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/939b073d1ba510699ce86c85f7fb9f6dfd60d711a8c731841f1d923e5ea97e3a"}
{"level":"debug","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"939b073d1ba510699ce86c85f7fb9f6dfd60d711a8c731841f1d923e5ea97e3a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"939b073d1ba510699ce86c85f7fb9f6dfd60d711a8c731841f1d923e5ea97e3a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/939b073d1ba510699ce86c85f7fb9f6dfd60d711a8c731841f1d923e5ea97e3a"}
{"level":"debug","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:14:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:14:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"939b073d1ba510699ce86c85f7fb9f6dfd60d711a8c731841f1d923e5ea97e3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:14:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:14:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["939b073d1ba510699ce86c85f7fb9f6dfd60d711a8c731841f1d923e5ea97e3a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a"}
{"level":"info","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"939b073d1ba510699ce86c85f7fb9f6dfd60d711a8c731841f1d923e5ea97e3a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:14:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:14:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a"}
{"level":"info","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"939b073d1ba510699ce86c85f7fb9f6dfd60d711a8c731841f1d923e5ea97e3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:14:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:14:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/939b073d1ba510699ce86c85f7fb9f6dfd60d711a8c731841f1d923e5ea97e3a"}
{"level":"info","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"939b073d1ba510699ce86c85f7fb9f6dfd60d711a8c731841f1d923e5ea97e3a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"939b073d1ba510699ce86c85f7fb9f6dfd60d711a8c731841f1d923e5ea97e3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:14:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:14:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["939b073d1ba510699ce86c85f7fb9f6dfd60d711a8c731841f1d923e5ea97e3a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"939b073d1ba510699ce86c85f7fb9f6dfd60d711a8c731841f1d923e5ea97e3a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"939b073d1ba510699ce86c85f7fb9f6dfd60d711a8c731841f1d923e5ea97e3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:14:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:14:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["939b073d1ba510699ce86c85f7fb9f6dfd60d711a8c731841f1d923e5ea97e3a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"939b073d1ba510699ce86c85f7fb9f6dfd60d711a8c731841f1d923e5ea97e3a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"939b073d1ba510699ce86c85f7fb9f6dfd60d711a8c731841f1d923e5ea97e3a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"939b073d1ba510699ce86c85f7fb9f6dfd60d711a8c731841f1d923e5ea97e3a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"939b073d1ba510699ce86c85f7fb9f6dfd60d711a8c731841f1d923e5ea97e3a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a"}
{"level":"debug","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:14:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:14:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/939b073d1ba510699ce86c85f7fb9f6dfd60d711a8c731841f1d923e5ea97e3a"}
{"level":"info","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a"}
{"level":"debug","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5009c98d2bb6e701eeb184e0e48a67dc52d6177c42e982bfe54a3d8d88c4258","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:14:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:14:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5009c98d2bb6e701eeb184e0e48a67dc52d6177c42e982bfe54a3d8d88c4258","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5009c98d2bb6e701eeb184e0e48a67dc52d6177c42e982bfe54a3d8d88c4258","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:14:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:14:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5009c98d2bb6e701eeb184e0e48a67dc52d6177c42e982bfe54a3d8d88c4258"}
{"level":"info","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5009c98d2bb6e701eeb184e0e48a67dc52d6177c42e982bfe54a3d8d88c4258","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5009c98d2bb6e701eeb184e0e48a67dc52d6177c42e982bfe54a3d8d88c4258","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:14:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:14:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e5009c98d2bb6e701eeb184e0e48a67dc52d6177c42e982bfe54a3d8d88c4258","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e5009c98d2bb6e701eeb184e0e48a67dc52d6177c42e982bfe54a3d8d88c4258\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5009c98d2bb6e701eeb184e0e48a67dc52d6177c42e982bfe54a3d8d88c4258","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5009c98d2bb6e701eeb184e0e48a67dc52d6177c42e982bfe54a3d8d88c4258","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5009c98d2bb6e701eeb184e0e48a67dc52d6177c42e982bfe54a3d8d88c4258"}
{"level":"info","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5009c98d2bb6e701eeb184e0e48a67dc52d6177c42e982bfe54a3d8d88c4258"}
{"level":"debug","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa3d7dc2b8d31795bb9f17a70607132ee10eb9b6b7c4b4340c6ce449af70f0b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:14:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:14:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa3d7dc2b8d31795bb9f17a70607132ee10eb9b6b7c4b4340c6ce449af70f0b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8a0938fe04f948f401a97f59fcd8367104a3b57610b3faba542580f6a413420","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:14:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:14:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa3d7dc2b8d31795bb9f17a70607132ee10eb9b6b7c4b4340c6ce449af70f0b4"}
{"level":"info","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8a0938fe04f948f401a97f59fcd8367104a3b57610b3faba542580f6a413420","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa3d7dc2b8d31795bb9f17a70607132ee10eb9b6b7c4b4340c6ce449af70f0b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:14:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:14:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa3d7dc2b8d31795bb9f17a70607132ee10eb9b6b7c4b4340c6ce449af70f0b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8a0938fe04f948f401a97f59fcd8367104a3b57610b3faba542580f6a413420"}
{"level":"info","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa3d7dc2b8d31795bb9f17a70607132ee10eb9b6b7c4b4340c6ce449af70f0b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5009c98d2bb6e701eeb184e0e48a67dc52d6177c42e982bfe54a3d8d88c4258","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:14:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:14:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5009c98d2bb6e701eeb184e0e48a67dc52d6177c42e982bfe54a3d8d88c4258"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5009c98d2bb6e701eeb184e0e48a67dc52d6177c42e982bfe54a3d8d88c4258","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8a0938fe04f948f401a97f59fcd8367104a3b57610b3faba542580f6a413420","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:14:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:14:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8a0938fe04f948f401a97f59fcd8367104a3b57610b3faba542580f6a413420"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa3d7dc2b8d31795bb9f17a70607132ee10eb9b6b7c4b4340c6ce449af70f0b4"}
{"level":"info","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8a0938fe04f948f401a97f59fcd8367104a3b57610b3faba542580f6a413420","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa3d7dc2b8d31795bb9f17a70607132ee10eb9b6b7c4b4340c6ce449af70f0b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5009c98d2bb6e701eeb184e0e48a67dc52d6177c42e982bfe54a3d8d88c4258","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8a0938fe04f948f401a97f59fcd8367104a3b57610b3faba542580f6a413420","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:14:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:14:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8a0938fe04f948f401a97f59fcd8367104a3b57610b3faba542580f6a413420"}
{"level":"info","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8a0938fe04f948f401a97f59fcd8367104a3b57610b3faba542580f6a413420","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8a0938fe04f948f401a97f59fcd8367104a3b57610b3faba542580f6a413420","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:14:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:14:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8a0938fe04f948f401a97f59fcd8367104a3b57610b3faba542580f6a413420"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa3d7dc2b8d31795bb9f17a70607132ee10eb9b6b7c4b4340c6ce449af70f0b4"}
{"level":"info","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8a0938fe04f948f401a97f59fcd8367104a3b57610b3faba542580f6a413420","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdc3a2e368081c864c0d764ad3a5cc3bd7db079a26c10eda8914efdc304c83c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:14:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:14:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdc3a2e368081c864c0d764ad3a5cc3bd7db079a26c10eda8914efdc304c83c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8a0938fe04f948f401a97f59fcd8367104a3b57610b3faba542580f6a413420","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdc3a2e368081c864c0d764ad3a5cc3bd7db079a26c10eda8914efdc304c83c1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5009c98d2bb6e701eeb184e0e48a67dc52d6177c42e982bfe54a3d8d88c4258"}
{"level":"debug","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdc3a2e368081c864c0d764ad3a5cc3bd7db079a26c10eda8914efdc304c83c1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8a0938fe04f948f401a97f59fcd8367104a3b57610b3faba542580f6a413420"}
{"level":"debug","ts":"2026-07-20T17:14:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdc3a2e368081c864c0d764ad3a5cc3bd7db079a26c10eda8914efdc304c83c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:14:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:14:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdc3a2e368081c864c0d764ad3a5cc3bd7db079a26c10eda8914efdc304c83c1"}
{"level":"info","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdc3a2e368081c864c0d764ad3a5cc3bd7db079a26c10eda8914efdc304c83c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdc3a2e368081c864c0d764ad3a5cc3bd7db079a26c10eda8914efdc304c83c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:14:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:14:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bdc3a2e368081c864c0d764ad3a5cc3bd7db079a26c10eda8914efdc304c83c1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdc3a2e368081c864c0d764ad3a5cc3bd7db079a26c10eda8914efdc304c83c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdc3a2e368081c864c0d764ad3a5cc3bd7db079a26c10eda8914efdc304c83c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:14:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:14:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdc3a2e368081c864c0d764ad3a5cc3bd7db079a26c10eda8914efdc304c83c1"}
{"level":"info","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdc3a2e368081c864c0d764ad3a5cc3bd7db079a26c10eda8914efdc304c83c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f704ee5b609904d1d0685c02a5335e1c9b815a3aaa12f5581036ed13b05f5f26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:14:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:14:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdc3a2e368081c864c0d764ad3a5cc3bd7db079a26c10eda8914efdc304c83c1"}
{"level":"info","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f704ee5b609904d1d0685c02a5335e1c9b815a3aaa12f5581036ed13b05f5f26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdc3a2e368081c864c0d764ad3a5cc3bd7db079a26c10eda8914efdc304c83c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:14:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:14:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bdc3a2e368081c864c0d764ad3a5cc3bd7db079a26c10eda8914efdc304c83c1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f704ee5b609904d1d0685c02a5335e1c9b815a3aaa12f5581036ed13b05f5f26"}
{"level":"info","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdc3a2e368081c864c0d764ad3a5cc3bd7db079a26c10eda8914efdc304c83c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73bc606ec9c141b55c1ccd96def2f16d851cf9a81f50da0d5ce9ef0caf4a200a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:14:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:14:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdc3a2e368081c864c0d764ad3a5cc3bd7db079a26c10eda8914efdc304c83c1"}
{"level":"info","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73bc606ec9c141b55c1ccd96def2f16d851cf9a81f50da0d5ce9ef0caf4a200a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f704ee5b609904d1d0685c02a5335e1c9b815a3aaa12f5581036ed13b05f5f26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:14:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:14:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f704ee5b609904d1d0685c02a5335e1c9b815a3aaa12f5581036ed13b05f5f26"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73bc606ec9c141b55c1ccd96def2f16d851cf9a81f50da0d5ce9ef0caf4a200a"}
{"level":"info","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f704ee5b609904d1d0685c02a5335e1c9b815a3aaa12f5581036ed13b05f5f26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6585f6a240dc146c0c61b52c1c02d6826db8829204344352ded02761fe7bfe34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:14:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:14:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6585f6a240dc146c0c61b52c1c02d6826db8829204344352ded02761fe7bfe34","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdc3a2e368081c864c0d764ad3a5cc3bd7db079a26c10eda8914efdc304c83c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73bc606ec9c141b55c1ccd96def2f16d851cf9a81f50da0d5ce9ef0caf4a200a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:14:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:14:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["73bc606ec9c141b55c1ccd96def2f16d851cf9a81f50da0d5ce9ef0caf4a200a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f704ee5b609904d1d0685c02a5335e1c9b815a3aaa12f5581036ed13b05f5f26"}
{"level":"info","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73bc606ec9c141b55c1ccd96def2f16d851cf9a81f50da0d5ce9ef0caf4a200a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f704ee5b609904d1d0685c02a5335e1c9b815a3aaa12f5581036ed13b05f5f26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6585f6a240dc146c0c61b52c1c02d6826db8829204344352ded02761fe7bfe34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:14:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:14:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6585f6a240dc146c0c61b52c1c02d6826db8829204344352ded02761fe7bfe34"}
{"level":"info","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6585f6a240dc146c0c61b52c1c02d6826db8829204344352ded02761fe7bfe34","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73aa21d23ecc4b02802b9f04bef153b1858ad3f4d1adeb296a79b3febbb4a12e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:14:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:14:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdc3a2e368081c864c0d764ad3a5cc3bd7db079a26c10eda8914efdc304c83c1"}
{"level":"info","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73aa21d23ecc4b02802b9f04bef153b1858ad3f4d1adeb296a79b3febbb4a12e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73bc606ec9c141b55c1ccd96def2f16d851cf9a81f50da0d5ce9ef0caf4a200a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:14:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:14:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73bc606ec9c141b55c1ccd96def2f16d851cf9a81f50da0d5ce9ef0caf4a200a"}
{"level":"info","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73bc606ec9c141b55c1ccd96def2f16d851cf9a81f50da0d5ce9ef0caf4a200a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:14:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:14:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f704ee5b609904d1d0685c02a5335e1c9b815a3aaa12f5581036ed13b05f5f26"}
{"level":"info","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6585f6a240dc146c0c61b52c1c02d6826db8829204344352ded02761fe7bfe34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:14:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:14:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6585f6a240dc146c0c61b52c1c02d6826db8829204344352ded02761fe7bfe34"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73aa21d23ecc4b02802b9f04bef153b1858ad3f4d1adeb296a79b3febbb4a12e"}
{"level":"info","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6585f6a240dc146c0c61b52c1c02d6826db8829204344352ded02761fe7bfe34","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5137aa4cb02b5378830df4c27d422ee9a4ac349aa0caf7aaa42c1f4818050bbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:14:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:14:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5137aa4cb02b5378830df4c27d422ee9a4ac349aa0caf7aaa42c1f4818050bbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73aa21d23ecc4b02802b9f04bef153b1858ad3f4d1adeb296a79b3febbb4a12e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:14:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:14:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["73aa21d23ecc4b02802b9f04bef153b1858ad3f4d1adeb296a79b3febbb4a12e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b"}
{"level":"info","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73aa21d23ecc4b02802b9f04bef153b1858ad3f4d1adeb296a79b3febbb4a12e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73bc606ec9c141b55c1ccd96def2f16d851cf9a81f50da0d5ce9ef0caf4a200a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:14:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:14:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["73bc606ec9c141b55c1ccd96def2f16d851cf9a81f50da0d5ce9ef0caf4a200a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6585f6a240dc146c0c61b52c1c02d6826db8829204344352ded02761fe7bfe34"}
{"level":"info","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73bc606ec9c141b55c1ccd96def2f16d851cf9a81f50da0d5ce9ef0caf4a200a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:14:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:14:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5137aa4cb02b5378830df4c27d422ee9a4ac349aa0caf7aaa42c1f4818050bbb"}
{"level":"info","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a708222dffd6ecdafc3bf77dd0c9374b898f466892bb66d8b408d066b1881ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:14:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:14:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a708222dffd6ecdafc3bf77dd0c9374b898f466892bb66d8b408d066b1881ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6585f6a240dc146c0c61b52c1c02d6826db8829204344352ded02761fe7bfe34","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e304fd2e4cbec4507a0f4147b7be31096002db3225c2d24aee1fc5cad8e012b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:14:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:14:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73bc606ec9c141b55c1ccd96def2f16d851cf9a81f50da0d5ce9ef0caf4a200a"}
{"level":"info","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e304fd2e4cbec4507a0f4147b7be31096002db3225c2d24aee1fc5cad8e012b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5137aa4cb02b5378830df4c27d422ee9a4ac349aa0caf7aaa42c1f4818050bbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:14:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:14:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5137aa4cb02b5378830df4c27d422ee9a4ac349aa0caf7aaa42c1f4818050bbb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a708222dffd6ecdafc3bf77dd0c9374b898f466892bb66d8b408d066b1881ed"}
{"level":"info","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e304fd2e4cbec4507a0f4147b7be31096002db3225c2d24aee1fc5cad8e012b2"}
{"level":"info","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5137aa4cb02b5378830df4c27d422ee9a4ac349aa0caf7aaa42c1f4818050bbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:14:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:14:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1"}
{"level":"info","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73aa21d23ecc4b02802b9f04bef153b1858ad3f4d1adeb296a79b3febbb4a12e"}
{"level":"info","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b"}
{"level":"info","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73aa21d23ecc4b02802b9f04bef153b1858ad3f4d1adeb296a79b3febbb4a12e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73bc606ec9c141b55c1ccd96def2f16d851cf9a81f50da0d5ce9ef0caf4a200a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a708222dffd6ecdafc3bf77dd0c9374b898f466892bb66d8b408d066b1881ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:14:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:14:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a708222dffd6ecdafc3bf77dd0c9374b898f466892bb66d8b408d066b1881ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03332dee25a37b4f860d228e359163be8ac4d4d31f18b5f54c6e410ca84bc6d7"}
{"level":"info","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a708222dffd6ecdafc3bf77dd0c9374b898f466892bb66d8b408d066b1881ed"}
{"level":"info","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a708222dffd6ecdafc3bf77dd0c9374b898f466892bb66d8b408d066b1881ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03332dee25a37b4f860d228e359163be8ac4d4d31f18b5f54c6e410ca84bc6d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:14:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:14:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["03332dee25a37b4f860d228e359163be8ac4d4d31f18b5f54c6e410ca84bc6d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01e6030e904518f77da63ab60bc8cde680aa9c09fdaf87d53ddf88c17aa14fd5"}
{"level":"info","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03332dee25a37b4f860d228e359163be8ac4d4d31f18b5f54c6e410ca84bc6d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e304fd2e4cbec4507a0f4147b7be31096002db3225c2d24aee1fc5cad8e012b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:14:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:14:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e304fd2e4cbec4507a0f4147b7be31096002db3225c2d24aee1fc5cad8e012b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d1886c294e3c219b755b7a473260afd36dc589fa3677ea0a39363ae8d322eae"}
{"level":"info","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e304fd2e4cbec4507a0f4147b7be31096002db3225c2d24aee1fc5cad8e012b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01e6030e904518f77da63ab60bc8cde680aa9c09fdaf87d53ddf88c17aa14fd5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:14:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:14:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01e6030e904518f77da63ab60bc8cde680aa9c09fdaf87d53ddf88c17aa14fd5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5137aa4cb02b5378830df4c27d422ee9a4ac349aa0caf7aaa42c1f4818050bbb"}
{"level":"info","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1"}
{"level":"info","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f"}
{"level":"info","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01e6030e904518f77da63ab60bc8cde680aa9c09fdaf87d53ddf88c17aa14fd5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d1886c294e3c219b755b7a473260afd36dc589fa3677ea0a39363ae8d322eae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:14:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:14:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d1886c294e3c219b755b7a473260afd36dc589fa3677ea0a39363ae8d322eae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a708222dffd6ecdafc3bf77dd0c9374b898f466892bb66d8b408d066b1881ed"}
{"level":"info","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03332dee25a37b4f860d228e359163be8ac4d4d31f18b5f54c6e410ca84bc6d7"}
{"level":"info","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d1886c294e3c219b755b7a473260afd36dc589fa3677ea0a39363ae8d322eae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5137aa4cb02b5378830df4c27d422ee9a4ac349aa0caf7aaa42c1f4818050bbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:14:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:14:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e304fd2e4cbec4507a0f4147b7be31096002db3225c2d24aee1fc5cad8e012b2"}
{"level":"info","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01e6030e904518f77da63ab60bc8cde680aa9c09fdaf87d53ddf88c17aa14fd5"}
{"level":"info","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:14:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:14:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d1886c294e3c219b755b7a473260afd36dc589fa3677ea0a39363ae8d322eae"}
{"level":"info","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1"}
{"level":"info","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a708222dffd6ecdafc3bf77dd0c9374b898f466892bb66d8b408d066b1881ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03332dee25a37b4f860d228e359163be8ac4d4d31f18b5f54c6e410ca84bc6d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e304fd2e4cbec4507a0f4147b7be31096002db3225c2d24aee1fc5cad8e012b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01e6030e904518f77da63ab60bc8cde680aa9c09fdaf87d53ddf88c17aa14fd5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d1886c294e3c219b755b7a473260afd36dc589fa3677ea0a39363ae8d322eae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:14:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f"}
{"level":"info","ts":"2026-07-20T17:14:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ced96a7b-25a1-4f37-8f9c-951d90002221","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:42718","PortSpecifier":{"PortValue":42718}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ced96a7b-25a1-4f37-8f9c-951d90002221","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T17:14:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ced96a7b-25a1-4f37-8f9c-951d90002221","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:42718","PortSpecifier":{"PortValue":42718}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784567698,"nanos":473197782},"http":{"id":"ced96a7b-25a1-4f37-8f9c-951d90002221","method":"POST","headers":{":authority":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:14:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ced96a7b-25a1-4f37-8f9c-951d90002221","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-20T17:14:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ced96a7b-25a1-4f37-8f9c-951d90002221","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1b91b571-c80d-4224-bb2b-6fe9d0687db6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8940b42d-6f21-40dc-a902-53f729cc3b47"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/187485271a22"]}}
{"level":"debug","ts":"2026-07-20T17:14:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ced96a7b-25a1-4f37-8f9c-951d90002221","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/187485271a22"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8940b42d-6f21-40dc-a902-53f729cc3b47"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1b91b571-c80d-4224-bb2b-6fe9d0687db6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ad5c0a14cddabf54b41d68e875c01ed6288ff6f33e99b4c5d95955894887a6f3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:14:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ced96a7b-25a1-4f37-8f9c-951d90002221","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:14:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ced96a7b-25a1-4f37-8f9c-951d90002221","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:14:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ced96a7b-25a1-4f37-8f9c-951d90002221","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a16895/sub-test-model-a16895\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a16895/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:14:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ced96a7b-25a1-4f37-8f9c-951d90002221","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-20T17:14:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ced96a7b-25a1-4f37-8f9c-951d90002221","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T17:14:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ced96a7b-25a1-4f37-8f9c-951d90002221","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-20T17:14:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ced96a7b-25a1-4f37-8f9c-951d90002221","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T17:14:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ced96a7b-25a1-4f37-8f9c-951d90002221","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T17:14:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"33f5321c-11ec-446a-ac6a-12d551b92a75","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:44524","PortSpecifier":{"PortValue":44524}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"33f5321c-11ec-446a-ac6a-12d551b92a75","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e142d5.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T17:14:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"33f5321c-11ec-446a-ac6a-12d551b92a75","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:44524","PortSpecifier":{"PortValue":44524}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784567698,"nanos":515558947},"http":{"id":"33f5321c-11ec-446a-ac6a-12d551b92a75","method":"POST","headers":{":authority":"e2e-shared-b-e142d5.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:14:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"33f5321c-11ec-446a-ac6a-12d551b92a75","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-20T17:14:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"33f5321c-11ec-446a-ac6a-12d551b92a75","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1b91b571-c80d-4224-bb2b-6fe9d0687db6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8940b42d-6f21-40dc-a902-53f729cc3b47"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/187485271a22"]}}
{"level":"debug","ts":"2026-07-20T17:14:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"33f5321c-11ec-446a-ac6a-12d551b92a75","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/187485271a22"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8940b42d-6f21-40dc-a902-53f729cc3b47"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1b91b571-c80d-4224-bb2b-6fe9d0687db6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e142d5.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:14:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33f5321c-11ec-446a-ac6a-12d551b92a75","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:14:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33f5321c-11ec-446a-ac6a-12d551b92a75","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:14:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33f5321c-11ec-446a-ac6a-12d551b92a75","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e142d5/sub-test-model-e142d5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-e142d5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:14:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"33f5321c-11ec-446a-ac6a-12d551b92a75","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-20T17:14:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"33f5321c-11ec-446a-ac6a-12d551b92a75","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T17:14:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"33f5321c-11ec-446a-ac6a-12d551b92a75","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-20T17:14:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"33f5321c-11ec-446a-ac6a-12d551b92a75","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T17:14:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"33f5321c-11ec-446a-ac6a-12d551b92a75","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T17:14:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fa09950b-3b02-406c-abbe-fae7b9785d74","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:42722","PortSpecifier":{"PortValue":42722}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fa09950b-3b02-406c-abbe-fae7b9785d74","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T17:14:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fa09950b-3b02-406c-abbe-fae7b9785d74","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:42722","PortSpecifier":{"PortValue":42722}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784567698,"nanos":556585963},"http":{"id":"fa09950b-3b02-406c-abbe-fae7b9785d74","method":"GET","headers":{":authority":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:14:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fa09950b-3b02-406c-abbe-fae7b9785d74","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-VvWBePur8YAkCz8i_Vha1Y9xCJLK9CqicKMv5p5jqJYXZW5tLIXPi114zWXV"}
{"level":"debug","ts":"2026-07-20T17:14:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fa09950b-3b02-406c-abbe-fae7b9785d74","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-VvWBePur8YAkCz8i_Vha1Y9xCJLK9CqicKMv5p5jqJYXZW5tLIXPi114zWXV\"}"}
{"level":"debug","ts":"2026-07-20T17:14:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fa09950b-3b02-406c-abbe-fae7b9785d74","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0ab77321-03c2-4c42-b80c-739c61039793","keyName":"e2e-sub-iso-f97c01","subscription":"e2e-a-only-5e0449","tenant":"e2e-shared-a-a16895","userId":"0ab77321-03c2-4c42-b80c-739c61039793","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T17:14:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fa09950b-3b02-406c-abbe-fae7b9785d74","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:14:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa09950b-3b02-406c-abbe-fae7b9785d74","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:14:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa09950b-3b02-406c-abbe-fae7b9785d74","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:14:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa09950b-3b02-406c-abbe-fae7b9785d74","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a16895/sub-test-model-a16895\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a16895/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:14:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa09950b-3b02-406c-abbe-fae7b9785d74","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T17:14:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fa09950b-3b02-406c-abbe-fae7b9785d74","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-20T17:14:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa09950b-3b02-406c-abbe-fae7b9785d74","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-5e0449"}
{"level":"debug","ts":"2026-07-20T17:14:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa09950b-3b02-406c-abbe-fae7b9785d74","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-20T17:14:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fa09950b-3b02-406c-abbe-fae7b9785d74","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T17:14:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fa09950b-3b02-406c-abbe-fae7b9785d74","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T17:14:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3652d163-f78a-4e69-96c1-f28ee4fd466e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:44538","PortSpecifier":{"PortValue":44538}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3652d163-f78a-4e69-96c1-f28ee4fd466e","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-e142d5.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T17:14:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3652d163-f78a-4e69-96c1-f28ee4fd466e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:44538","PortSpecifier":{"PortValue":44538}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784567698,"nanos":598740974},"http":{"id":"3652d163-f78a-4e69-96c1-f28ee4fd466e","method":"GET","headers":{":authority":"e2e-shared-b-e142d5.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:14:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3652d163-f78a-4e69-96c1-f28ee4fd466e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1PQNAkJQyv0SdsQ73_Xk8XwAmYUJI5Vf3B8coliws35xkhM00aeBhROkipy36"}
{"level":"debug","ts":"2026-07-20T17:14:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3652d163-f78a-4e69-96c1-f28ee4fd466e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-e142d5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1PQNAkJQyv0SdsQ73_Xk8XwAmYUJI5Vf3B8coliws35xkhM00aeBhROkipy36\"}"}
{"level":"debug","ts":"2026-07-20T17:14:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3652d163-f78a-4e69-96c1-f28ee4fd466e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-e142d5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"557257f1-c902-4e06-8735-6db2d490760b","keyName":"e2e-sub-iso-8cf607","subscription":"e2e-b-only-5e0449","tenant":"e2e-shared-b-e142d5","userId":"557257f1-c902-4e06-8735-6db2d490760b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T17:14:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3652d163-f78a-4e69-96c1-f28ee4fd466e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:14:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3652d163-f78a-4e69-96c1-f28ee4fd466e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:14:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3652d163-f78a-4e69-96c1-f28ee4fd466e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:14:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3652d163-f78a-4e69-96c1-f28ee4fd466e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e142d5/sub-test-model-e142d5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-e142d5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:14:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3652d163-f78a-4e69-96c1-f28ee4fd466e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-5e0449"}
{"level":"debug","ts":"2026-07-20T17:14:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3652d163-f78a-4e69-96c1-f28ee4fd466e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T17:14:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3652d163-f78a-4e69-96c1-f28ee4fd466e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-20T17:14:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3652d163-f78a-4e69-96c1-f28ee4fd466e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-20T17:14:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3652d163-f78a-4e69-96c1-f28ee4fd466e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T17:14:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3652d163-f78a-4e69-96c1-f28ee4fd466e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T17:15:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0592a9d4-72d0-450d-8bf4-1a03b98bf667","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:40236","PortSpecifier":{"PortValue":40236}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0592a9d4-72d0-450d-8bf4-1a03b98bf667","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T17:15:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0592a9d4-72d0-450d-8bf4-1a03b98bf667","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:40236","PortSpecifier":{"PortValue":40236}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784567708,"nanos":739490960},"http":{"id":"0592a9d4-72d0-450d-8bf4-1a03b98bf667","method":"POST","headers":{":authority":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:15:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0592a9d4-72d0-450d-8bf4-1a03b98bf667","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-20T17:15:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0592a9d4-72d0-450d-8bf4-1a03b98bf667","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1b91b571-c80d-4224-bb2b-6fe9d0687db6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8940b42d-6f21-40dc-a902-53f729cc3b47"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/187485271a22"]}}
{"level":"debug","ts":"2026-07-20T17:15:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0592a9d4-72d0-450d-8bf4-1a03b98bf667","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/187485271a22"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8940b42d-6f21-40dc-a902-53f729cc3b47"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1b91b571-c80d-4224-bb2b-6fe9d0687db6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ad5c0a14cddabf54b41d68e875c01ed6288ff6f33e99b4c5d95955894887a6f3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:15:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0592a9d4-72d0-450d-8bf4-1a03b98bf667","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:15:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0592a9d4-72d0-450d-8bf4-1a03b98bf667","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:15:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0592a9d4-72d0-450d-8bf4-1a03b98bf667","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a16895/sub-test-model-a16895\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a16895/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:15:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0592a9d4-72d0-450d-8bf4-1a03b98bf667","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-20T17:15:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0592a9d4-72d0-450d-8bf4-1a03b98bf667","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T17:15:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0592a9d4-72d0-450d-8bf4-1a03b98bf667","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-20T17:15:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0592a9d4-72d0-450d-8bf4-1a03b98bf667","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T17:15:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0592a9d4-72d0-450d-8bf4-1a03b98bf667","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T17:15:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d2e53361-0e54-4fd9-97d1-dc2c6cdb22e8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:35066","PortSpecifier":{"PortValue":35066}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d2e53361-0e54-4fd9-97d1-dc2c6cdb22e8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e142d5.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T17:15:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d2e53361-0e54-4fd9-97d1-dc2c6cdb22e8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:35066","PortSpecifier":{"PortValue":35066}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784567708,"nanos":777043545},"http":{"id":"d2e53361-0e54-4fd9-97d1-dc2c6cdb22e8","method":"POST","headers":{":authority":"e2e-shared-b-e142d5.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:15:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d2e53361-0e54-4fd9-97d1-dc2c6cdb22e8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-20T17:15:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d2e53361-0e54-4fd9-97d1-dc2c6cdb22e8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1b91b571-c80d-4224-bb2b-6fe9d0687db6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8940b42d-6f21-40dc-a902-53f729cc3b47"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/187485271a22"]}}
{"level":"debug","ts":"2026-07-20T17:15:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d2e53361-0e54-4fd9-97d1-dc2c6cdb22e8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/187485271a22"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8940b42d-6f21-40dc-a902-53f729cc3b47"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1b91b571-c80d-4224-bb2b-6fe9d0687db6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e142d5.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:15:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2e53361-0e54-4fd9-97d1-dc2c6cdb22e8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:15:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2e53361-0e54-4fd9-97d1-dc2c6cdb22e8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:15:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2e53361-0e54-4fd9-97d1-dc2c6cdb22e8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e142d5/sub-test-model-e142d5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-e142d5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:15:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d2e53361-0e54-4fd9-97d1-dc2c6cdb22e8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-20T17:15:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d2e53361-0e54-4fd9-97d1-dc2c6cdb22e8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T17:15:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d2e53361-0e54-4fd9-97d1-dc2c6cdb22e8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-20T17:15:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d2e53361-0e54-4fd9-97d1-dc2c6cdb22e8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T17:15:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d2e53361-0e54-4fd9-97d1-dc2c6cdb22e8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T17:15:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"482b90f0-8351-4d10-b013-ed38c1ee9cf3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:40246","PortSpecifier":{"PortValue":40246}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"482b90f0-8351-4d10-b013-ed38c1ee9cf3","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T17:15:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"482b90f0-8351-4d10-b013-ed38c1ee9cf3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:40246","PortSpecifier":{"PortValue":40246}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784567708,"nanos":815426638},"http":{"id":"482b90f0-8351-4d10-b013-ed38c1ee9cf3","method":"POST","headers":{":authority":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:15:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"482b90f0-8351-4d10-b013-ed38c1ee9cf3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ByyZsdaSVvMOuUhu_4Ar2vo9EkEyVFLVqgoOJ8ES0gxN0FDOE48xOz1eRINH"}
{"level":"debug","ts":"2026-07-20T17:15:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"482b90f0-8351-4d10-b013-ed38c1ee9cf3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ByyZsdaSVvMOuUhu_4Ar2vo9EkEyVFLVqgoOJ8ES0gxN0FDOE48xOz1eRINH\"}"}
{"level":"debug","ts":"2026-07-20T17:15:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"482b90f0-8351-4d10-b013-ed38c1ee9cf3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"de56081d-dd89-4f44-ab25-762297ebda9e","keyName":"e2e-sub-iso-da8dba","subscription":"e2e-shared-sub-a7529b","tenant":"e2e-shared-a-a16895","userId":"de56081d-dd89-4f44-ab25-762297ebda9e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T17:15:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"482b90f0-8351-4d10-b013-ed38c1ee9cf3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:15:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"482b90f0-8351-4d10-b013-ed38c1ee9cf3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:15:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"482b90f0-8351-4d10-b013-ed38c1ee9cf3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:15:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"482b90f0-8351-4d10-b013-ed38c1ee9cf3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a16895/sub-test-model-a16895\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a16895/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:15:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"482b90f0-8351-4d10-b013-ed38c1ee9cf3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T17:15:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"482b90f0-8351-4d10-b013-ed38c1ee9cf3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-a7529b"}
{"level":"debug","ts":"2026-07-20T17:15:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"482b90f0-8351-4d10-b013-ed38c1ee9cf3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-20T17:15:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"482b90f0-8351-4d10-b013-ed38c1ee9cf3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-20T17:15:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"482b90f0-8351-4d10-b013-ed38c1ee9cf3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T17:15:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"482b90f0-8351-4d10-b013-ed38c1ee9cf3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T17:15:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f1e9a301-75b1-437f-a210-85e1001cd6de","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:35082","PortSpecifier":{"PortValue":35082}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f1e9a301-75b1-437f-a210-85e1001cd6de","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-e142d5.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T17:15:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f1e9a301-75b1-437f-a210-85e1001cd6de","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:35082","PortSpecifier":{"PortValue":35082}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784567708,"nanos":845030366},"http":{"id":"f1e9a301-75b1-437f-a210-85e1001cd6de","method":"POST","headers":{":authority":"e2e-shared-b-e142d5.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:15:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f1e9a301-75b1-437f-a210-85e1001cd6de","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-t5NZaIgVjLIBhGiX_K2IHI62rL1zYZVuAhlgrgFmmTUvvFcZWkeebWa3tV7g"}
{"level":"debug","ts":"2026-07-20T17:15:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f1e9a301-75b1-437f-a210-85e1001cd6de","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-e142d5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-t5NZaIgVjLIBhGiX_K2IHI62rL1zYZVuAhlgrgFmmTUvvFcZWkeebWa3tV7g\"}"}
{"level":"debug","ts":"2026-07-20T17:15:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f1e9a301-75b1-437f-a210-85e1001cd6de","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-e142d5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b9be0469-9c87-4623-8242-bf9682717da7","keyName":"e2e-sub-iso-ca5464","subscription":"e2e-shared-sub-a7529b","tenant":"e2e-shared-b-e142d5","userId":"b9be0469-9c87-4623-8242-bf9682717da7","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T17:15:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f1e9a301-75b1-437f-a210-85e1001cd6de","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:15:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1e9a301-75b1-437f-a210-85e1001cd6de","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:15:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1e9a301-75b1-437f-a210-85e1001cd6de","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:15:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f1e9a301-75b1-437f-a210-85e1001cd6de","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e142d5/sub-test-model-e142d5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-e142d5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:15:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f1e9a301-75b1-437f-a210-85e1001cd6de","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T17:15:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f1e9a301-75b1-437f-a210-85e1001cd6de","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T17:15:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f1e9a301-75b1-437f-a210-85e1001cd6de","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-20T17:15:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f1e9a301-75b1-437f-a210-85e1001cd6de","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-a7529b"}
{"level":"info","ts":"2026-07-20T17:15:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f1e9a301-75b1-437f-a210-85e1001cd6de","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T17:15:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f1e9a301-75b1-437f-a210-85e1001cd6de","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T17:15:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6585f6a240dc146c0c61b52c1c02d6826db8829204344352ded02761fe7bfe34"}
{"level":"info","ts":"2026-07-20T17:15:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/939b073d1ba510699ce86c85f7fb9f6dfd60d711a8c731841f1d923e5ea97e3a"}
{"level":"info","ts":"2026-07-20T17:15:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c8a0938fe04f948f401a97f59fcd8367104a3b57610b3faba542580f6a413420"}
{"level":"info","ts":"2026-07-20T17:15:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/67a111975a6266dd3666b13cce82115a4fd66678e1d8cda047d3a39a881bf74d"}
{"level":"info","ts":"2026-07-20T17:15:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fa3d7dc2b8d31795bb9f17a70607132ee10eb9b6b7c4b4340c6ce449af70f0b4"}
{"level":"info","ts":"2026-07-20T17:15:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f"}
{"level":"info","ts":"2026-07-20T17:15:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b"}
{"level":"info","ts":"2026-07-20T17:15:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/01e6030e904518f77da63ab60bc8cde680aa9c09fdaf87d53ddf88c17aa14fd5"}
{"level":"info","ts":"2026-07-20T17:15:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5137aa4cb02b5378830df4c27d422ee9a4ac349aa0caf7aaa42c1f4818050bbb"}
{"level":"info","ts":"2026-07-20T17:15:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/207511008834288fd40d351f11629a032942a58554aca2695431978f7a516264"}
{"level":"info","ts":"2026-07-20T17:15:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a"}
{"level":"info","ts":"2026-07-20T17:15:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1"}
{"level":"info","ts":"2026-07-20T17:15:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ad5c0a14cddabf54b41d68e875c01ed6288ff6f33e99b4c5d95955894887a6f3"}
{"level":"info","ts":"2026-07-20T17:15:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/73bc606ec9c141b55c1ccd96def2f16d851cf9a81f50da0d5ce9ef0caf4a200a"}
{"level":"info","ts":"2026-07-20T17:15:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/73aa21d23ecc4b02802b9f04bef153b1858ad3f4d1adeb296a79b3febbb4a12e"}
{"level":"info","ts":"2026-07-20T17:15:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0a708222dffd6ecdafc3bf77dd0c9374b898f466892bb66d8b408d066b1881ed"}
{"level":"info","ts":"2026-07-20T17:15:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/351970792986de7a5d1d5ecba0cf0ba95b723c6f05753838c5c05dd51bd43613"}
{"level":"info","ts":"2026-07-20T17:15:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bdc3a2e368081c864c0d764ad3a5cc3bd7db079a26c10eda8914efdc304c83c1"}
{"level":"info","ts":"2026-07-20T17:15:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f704ee5b609904d1d0685c02a5335e1c9b815a3aaa12f5581036ed13b05f5f26"}
{"level":"info","ts":"2026-07-20T17:15:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/80ed46195b331aba98cb84777e3ef1d5ba98341be74bd89d4174e6c059546547"}
{"level":"info","ts":"2026-07-20T17:15:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e304fd2e4cbec4507a0f4147b7be31096002db3225c2d24aee1fc5cad8e012b2"}
{"level":"info","ts":"2026-07-20T17:15:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7d1886c294e3c219b755b7a473260afd36dc589fa3677ea0a39363ae8d322eae"}
{"level":"info","ts":"2026-07-20T17:15:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/03332dee25a37b4f860d228e359163be8ac4d4d31f18b5f54c6e410ca84bc6d7"}
{"level":"info","ts":"2026-07-20T17:15:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e5009c98d2bb6e701eeb184e0e48a67dc52d6177c42e982bfe54a3d8d88c4258"}
{"level":"debug","ts":"2026-07-20T17:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b51383af851d6dd7769cd969fa521c3022020d0116905678acfb5c7b2f682a97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:16:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:16:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b51383af851d6dd7769cd969fa521c3022020d0116905678acfb5c7b2f682a97","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b51383af851d6dd7769cd969fa521c3022020d0116905678acfb5c7b2f682a97"}
{"level":"debug","ts":"2026-07-20T17:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b51383af851d6dd7769cd969fa521c3022020d0116905678acfb5c7b2f682a97","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b51383af851d6dd7769cd969fa521c3022020d0116905678acfb5c7b2f682a97","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b51383af851d6dd7769cd969fa521c3022020d0116905678acfb5c7b2f682a97"}
{"level":"debug","ts":"2026-07-20T17:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b51383af851d6dd7769cd969fa521c3022020d0116905678acfb5c7b2f682a97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:16:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:16:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b51383af851d6dd7769cd969fa521c3022020d0116905678acfb5c7b2f682a97"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b51383af851d6dd7769cd969fa521c3022020d0116905678acfb5c7b2f682a97","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b51383af851d6dd7769cd969fa521c3022020d0116905678acfb5c7b2f682a97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:16:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:16:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b51383af851d6dd7769cd969fa521c3022020d0116905678acfb5c7b2f682a97","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b51383af851d6dd7769cd969fa521c3022020d0116905678acfb5c7b2f682a97","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b51383af851d6dd7769cd969fa521c3022020d0116905678acfb5c7b2f682a97"}
{"level":"debug","ts":"2026-07-20T17:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b51383af851d6dd7769cd969fa521c3022020d0116905678acfb5c7b2f682a97","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b51383af851d6dd7769cd969fa521c3022020d0116905678acfb5c7b2f682a97"}
{"level":"debug","ts":"2026-07-20T17:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b51383af851d6dd7769cd969fa521c3022020d0116905678acfb5c7b2f682a97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:16:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:16:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b51383af851d6dd7769cd969fa521c3022020d0116905678acfb5c7b2f682a97"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b51383af851d6dd7769cd969fa521c3022020d0116905678acfb5c7b2f682a97","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b51383af851d6dd7769cd969fa521c3022020d0116905678acfb5c7b2f682a97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:16:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:16:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b51383af851d6dd7769cd969fa521c3022020d0116905678acfb5c7b2f682a97","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b51383af851d6dd7769cd969fa521c3022020d0116905678acfb5c7b2f682a97","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b51383af851d6dd7769cd969fa521c3022020d0116905678acfb5c7b2f682a97"}
{"level":"debug","ts":"2026-07-20T17:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b51383af851d6dd7769cd969fa521c3022020d0116905678acfb5c7b2f682a97","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b51383af851d6dd7769cd969fa521c3022020d0116905678acfb5c7b2f682a97"}
{"level":"debug","ts":"2026-07-20T17:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b51383af851d6dd7769cd969fa521c3022020d0116905678acfb5c7b2f682a97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:16:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:16:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b51383af851d6dd7769cd969fa521c3022020d0116905678acfb5c7b2f682a97"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b51383af851d6dd7769cd969fa521c3022020d0116905678acfb5c7b2f682a97","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b51383af851d6dd7769cd969fa521c3022020d0116905678acfb5c7b2f682a97","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d867b02737a6600eabcf248b3af7280e9d589000b2830853ae3af60a9751f07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:16:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:16:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d867b02737a6600eabcf248b3af7280e9d589000b2830853ae3af60a9751f07","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b51383af851d6dd7769cd969fa521c3022020d0116905678acfb5c7b2f682a97"}
{"level":"debug","ts":"2026-07-20T17:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d867b02737a6600eabcf248b3af7280e9d589000b2830853ae3af60a9751f07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:16:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:16:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d867b02737a6600eabcf248b3af7280e9d589000b2830853ae3af60a9751f07"}
{"level":"info","ts":"2026-07-20T17:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d867b02737a6600eabcf248b3af7280e9d589000b2830853ae3af60a9751f07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d867b02737a6600eabcf248b3af7280e9d589000b2830853ae3af60a9751f07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:16:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:16:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-20T17:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0d867b02737a6600eabcf248b3af7280e9d589000b2830853ae3af60a9751f07","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0d867b02737a6600eabcf248b3af7280e9d589000b2830853ae3af60a9751f07\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-20T17:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d867b02737a6600eabcf248b3af7280e9d589000b2830853ae3af60a9751f07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d867b02737a6600eabcf248b3af7280e9d589000b2830853ae3af60a9751f07","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d867b02737a6600eabcf248b3af7280e9d589000b2830853ae3af60a9751f07"}
{"level":"info","ts":"2026-07-20T17:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d867b02737a6600eabcf248b3af7280e9d589000b2830853ae3af60a9751f07"}
{"level":"debug","ts":"2026-07-20T17:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"232344594f759be3c4b5078ceca9368535a3fac7f2bd219d1e9e9846bdfc65eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:16:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:16:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"232344594f759be3c4b5078ceca9368535a3fac7f2bd219d1e9e9846bdfc65eb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/232344594f759be3c4b5078ceca9368535a3fac7f2bd219d1e9e9846bdfc65eb"}
{"level":"debug","ts":"2026-07-20T17:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"232344594f759be3c4b5078ceca9368535a3fac7f2bd219d1e9e9846bdfc65eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"232344594f759be3c4b5078ceca9368535a3fac7f2bd219d1e9e9846bdfc65eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d867b02737a6600eabcf248b3af7280e9d589000b2830853ae3af60a9751f07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:16:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:16:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0d867b02737a6600eabcf248b3af7280e9d589000b2830853ae3af60a9751f07"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/232344594f759be3c4b5078ceca9368535a3fac7f2bd219d1e9e9846bdfc65eb"}
{"level":"info","ts":"2026-07-20T17:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d867b02737a6600eabcf248b3af7280e9d589000b2830853ae3af60a9751f07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"232344594f759be3c4b5078ceca9368535a3fac7f2bd219d1e9e9846bdfc65eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:16:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:16:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["232344594f759be3c4b5078ceca9368535a3fac7f2bd219d1e9e9846bdfc65eb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"232344594f759be3c4b5078ceca9368535a3fac7f2bd219d1e9e9846bdfc65eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d867b02737a6600eabcf248b3af7280e9d589000b2830853ae3af60a9751f07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:16:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:16:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d867b02737a6600eabcf248b3af7280e9d589000b2830853ae3af60a9751f07"}
{"level":"info","ts":"2026-07-20T17:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d867b02737a6600eabcf248b3af7280e9d589000b2830853ae3af60a9751f07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"232344594f759be3c4b5078ceca9368535a3fac7f2bd219d1e9e9846bdfc65eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:16:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:16:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/232344594f759be3c4b5078ceca9368535a3fac7f2bd219d1e9e9846bdfc65eb"}
{"level":"info","ts":"2026-07-20T17:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"232344594f759be3c4b5078ceca9368535a3fac7f2bd219d1e9e9846bdfc65eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d867b02737a6600eabcf248b3af7280e9d589000b2830853ae3af60a9751f07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"232344594f759be3c4b5078ceca9368535a3fac7f2bd219d1e9e9846bdfc65eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:16:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:16:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["232344594f759be3c4b5078ceca9368535a3fac7f2bd219d1e9e9846bdfc65eb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d867b02737a6600eabcf248b3af7280e9d589000b2830853ae3af60a9751f07"}
{"level":"info","ts":"2026-07-20T17:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"232344594f759be3c4b5078ceca9368535a3fac7f2bd219d1e9e9846bdfc65eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d867b02737a6600eabcf248b3af7280e9d589000b2830853ae3af60a9751f07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:16:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:16:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0d867b02737a6600eabcf248b3af7280e9d589000b2830853ae3af60a9751f07"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d867b02737a6600eabcf248b3af7280e9d589000b2830853ae3af60a9751f07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"232344594f759be3c4b5078ceca9368535a3fac7f2bd219d1e9e9846bdfc65eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:16:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:16:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/232344594f759be3c4b5078ceca9368535a3fac7f2bd219d1e9e9846bdfc65eb"}
{"level":"info","ts":"2026-07-20T17:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"232344594f759be3c4b5078ceca9368535a3fac7f2bd219d1e9e9846bdfc65eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d867b02737a6600eabcf248b3af7280e9d589000b2830853ae3af60a9751f07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"232344594f759be3c4b5078ceca9368535a3fac7f2bd219d1e9e9846bdfc65eb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/232344594f759be3c4b5078ceca9368535a3fac7f2bd219d1e9e9846bdfc65eb"}
{"level":"debug","ts":"2026-07-20T17:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"232344594f759be3c4b5078ceca9368535a3fac7f2bd219d1e9e9846bdfc65eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:16:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:16:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["232344594f759be3c4b5078ceca9368535a3fac7f2bd219d1e9e9846bdfc65eb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"232344594f759be3c4b5078ceca9368535a3fac7f2bd219d1e9e9846bdfc65eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"232344594f759be3c4b5078ceca9368535a3fac7f2bd219d1e9e9846bdfc65eb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d867b02737a6600eabcf248b3af7280e9d589000b2830853ae3af60a9751f07"}
{"level":"debug","ts":"2026-07-20T17:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67a111975a6266dd3666b13cce82115a4fd66678e1d8cda047d3a39a881bf74d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:16:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:16:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/232344594f759be3c4b5078ceca9368535a3fac7f2bd219d1e9e9846bdfc65eb"}
{"level":"info","ts":"2026-07-20T17:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67a111975a6266dd3666b13cce82115a4fd66678e1d8cda047d3a39a881bf74d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67a111975a6266dd3666b13cce82115a4fd66678e1d8cda047d3a39a881bf74d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:16:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:16:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67a111975a6266dd3666b13cce82115a4fd66678e1d8cda047d3a39a881bf74d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67a111975a6266dd3666b13cce82115a4fd66678e1d8cda047d3a39a881bf74d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:16:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:16:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67a111975a6266dd3666b13cce82115a4fd66678e1d8cda047d3a39a881bf74d"}
{"level":"error","ts":"2026-07-20T17:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"67a111975a6266dd3666b13cce82115a4fd66678e1d8cda047d3a39a881bf74d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"67a111975a6266dd3666b13cce82115a4fd66678e1d8cda047d3a39a881bf74d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-20T17:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67a111975a6266dd3666b13cce82115a4fd66678e1d8cda047d3a39a881bf74d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67a111975a6266dd3666b13cce82115a4fd66678e1d8cda047d3a39a881bf74d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67a111975a6266dd3666b13cce82115a4fd66678e1d8cda047d3a39a881bf74d"}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b9cb5a998f512106d07c82bde13b621a502000e315e048b271cb89a23aea110","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b9cb5a998f512106d07c82bde13b621a502000e315e048b271cb89a23aea110","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67a111975a6266dd3666b13cce82115a4fd66678e1d8cda047d3a39a881bf74d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67a111975a6266dd3666b13cce82115a4fd66678e1d8cda047d3a39a881bf74d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b9cb5a998f512106d07c82bde13b621a502000e315e048b271cb89a23aea110"}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67a111975a6266dd3666b13cce82115a4fd66678e1d8cda047d3a39a881bf74d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b9cb5a998f512106d07c82bde13b621a502000e315e048b271cb89a23aea110","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67a111975a6266dd3666b13cce82115a4fd66678e1d8cda047d3a39a881bf74d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b9cb5a998f512106d07c82bde13b621a502000e315e048b271cb89a23aea110","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b9cb5a998f512106d07c82bde13b621a502000e315e048b271cb89a23aea110"}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b9cb5a998f512106d07c82bde13b621a502000e315e048b271cb89a23aea110","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b9cb5a998f512106d07c82bde13b621a502000e315e048b271cb89a23aea110"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67a111975a6266dd3666b13cce82115a4fd66678e1d8cda047d3a39a881bf74d"}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b9cb5a998f512106d07c82bde13b621a502000e315e048b271cb89a23aea110","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b9cb5a998f512106d07c82bde13b621a502000e315e048b271cb89a23aea110","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b9cb5a998f512106d07c82bde13b621a502000e315e048b271cb89a23aea110"}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af5d1b718c7c9246c26a7023b3056a5d52b44830cc191c66c135716963c5cc72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af5d1b718c7c9246c26a7023b3056a5d52b44830cc191c66c135716963c5cc72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5794fa5121fb3fc443289058c38ff08b9a9e6f159c003cd75ceb8283dc3f70a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af5d1b718c7c9246c26a7023b3056a5d52b44830cc191c66c135716963c5cc72"}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5794fa5121fb3fc443289058c38ff08b9a9e6f159c003cd75ceb8283dc3f70a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af5d1b718c7c9246c26a7023b3056a5d52b44830cc191c66c135716963c5cc72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af5d1b718c7c9246c26a7023b3056a5d52b44830cc191c66c135716963c5cc72"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5794fa5121fb3fc443289058c38ff08b9a9e6f159c003cd75ceb8283dc3f70a6"}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af5d1b718c7c9246c26a7023b3056a5d52b44830cc191c66c135716963c5cc72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5794fa5121fb3fc443289058c38ff08b9a9e6f159c003cd75ceb8283dc3f70a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5794fa5121fb3fc443289058c38ff08b9a9e6f159c003cd75ceb8283dc3f70a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5794fa5121fb3fc443289058c38ff08b9a9e6f159c003cd75ceb8283dc3f70a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af5d1b718c7c9246c26a7023b3056a5d52b44830cc191c66c135716963c5cc72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af5d1b718c7c9246c26a7023b3056a5d52b44830cc191c66c135716963c5cc72"}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af5d1b718c7c9246c26a7023b3056a5d52b44830cc191c66c135716963c5cc72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5794fa5121fb3fc443289058c38ff08b9a9e6f159c003cd75ceb8283dc3f70a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5794fa5121fb3fc443289058c38ff08b9a9e6f159c003cd75ceb8283dc3f70a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af5d1b718c7c9246c26a7023b3056a5d52b44830cc191c66c135716963c5cc72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af5d1b718c7c9246c26a7023b3056a5d52b44830cc191c66c135716963c5cc72"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af5d1b718c7c9246c26a7023b3056a5d52b44830cc191c66c135716963c5cc72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5794fa5121fb3fc443289058c38ff08b9a9e6f159c003cd75ceb8283dc3f70a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5794fa5121fb3fc443289058c38ff08b9a9e6f159c003cd75ceb8283dc3f70a6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5794fa5121fb3fc443289058c38ff08b9a9e6f159c003cd75ceb8283dc3f70a6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af5d1b718c7c9246c26a7023b3056a5d52b44830cc191c66c135716963c5cc72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5794fa5121fb3fc443289058c38ff08b9a9e6f159c003cd75ceb8283dc3f70a6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5794fa5121fb3fc443289058c38ff08b9a9e6f159c003cd75ceb8283dc3f70a6"}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5794fa5121fb3fc443289058c38ff08b9a9e6f159c003cd75ceb8283dc3f70a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5794fa5121fb3fc443289058c38ff08b9a9e6f159c003cd75ceb8283dc3f70a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5794fa5121fb3fc443289058c38ff08b9a9e6f159c003cd75ceb8283dc3f70a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5794fa5121fb3fc443289058c38ff08b9a9e6f159c003cd75ceb8283dc3f70a6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af5d1b718c7c9246c26a7023b3056a5d52b44830cc191c66c135716963c5cc72"}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5794fa5121fb3fc443289058c38ff08b9a9e6f159c003cd75ceb8283dc3f70a6"}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"207511008834288fd40d351f11629a032942a58554aca2695431978f7a516264","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"207511008834288fd40d351f11629a032942a58554aca2695431978f7a516264","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"207511008834288fd40d351f11629a032942a58554aca2695431978f7a516264","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/207511008834288fd40d351f11629a032942a58554aca2695431978f7a516264"}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"207511008834288fd40d351f11629a032942a58554aca2695431978f7a516264","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"207511008834288fd40d351f11629a032942a58554aca2695431978f7a516264","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"207511008834288fd40d351f11629a032942a58554aca2695431978f7a516264","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"207511008834288fd40d351f11629a032942a58554aca2695431978f7a516264\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"207511008834288fd40d351f11629a032942a58554aca2695431978f7a516264","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"207511008834288fd40d351f11629a032942a58554aca2695431978f7a516264","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/207511008834288fd40d351f11629a032942a58554aca2695431978f7a516264"}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/207511008834288fd40d351f11629a032942a58554aca2695431978f7a516264"}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a4ca78aaaa46694b3e45f77eeddbbccbc4dafc1de925b8f2d9822105ac36ea6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a4ca78aaaa46694b3e45f77eeddbbccbc4dafc1de925b8f2d9822105ac36ea6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"207511008834288fd40d351f11629a032942a58554aca2695431978f7a516264","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["207511008834288fd40d351f11629a032942a58554aca2695431978f7a516264"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a4ca78aaaa46694b3e45f77eeddbbccbc4dafc1de925b8f2d9822105ac36ea6"}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"207511008834288fd40d351f11629a032942a58554aca2695431978f7a516264","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a4ca78aaaa46694b3e45f77eeddbbccbc4dafc1de925b8f2d9822105ac36ea6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"207511008834288fd40d351f11629a032942a58554aca2695431978f7a516264","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a4ca78aaaa46694b3e45f77eeddbbccbc4dafc1de925b8f2d9822105ac36ea6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a4ca78aaaa46694b3e45f77eeddbbccbc4dafc1de925b8f2d9822105ac36ea6"}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a4ca78aaaa46694b3e45f77eeddbbccbc4dafc1de925b8f2d9822105ac36ea6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a4ca78aaaa46694b3e45f77eeddbbccbc4dafc1de925b8f2d9822105ac36ea6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/207511008834288fd40d351f11629a032942a58554aca2695431978f7a516264"}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a4ca78aaaa46694b3e45f77eeddbbccbc4dafc1de925b8f2d9822105ac36ea6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a4ca78aaaa46694b3e45f77eeddbbccbc4dafc1de925b8f2d9822105ac36ea6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a4ca78aaaa46694b3e45f77eeddbbccbc4dafc1de925b8f2d9822105ac36ea6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a4ca78aaaa46694b3e45f77eeddbbccbc4dafc1de925b8f2d9822105ac36ea6"}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a4ca78aaaa46694b3e45f77eeddbbccbc4dafc1de925b8f2d9822105ac36ea6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a4ca78aaaa46694b3e45f77eeddbbccbc4dafc1de925b8f2d9822105ac36ea6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1"}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a4ca78aaaa46694b3e45f77eeddbbccbc4dafc1de925b8f2d9822105ac36ea6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a4ca78aaaa46694b3e45f77eeddbbccbc4dafc1de925b8f2d9822105ac36ea6"}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a4ca78aaaa46694b3e45f77eeddbbccbc4dafc1de925b8f2d9822105ac36ea6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1"}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a4ca78aaaa46694b3e45f77eeddbbccbc4dafc1de925b8f2d9822105ac36ea6"}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15135cb20e26fcad3e688ea783305ecd21ef31687198a756bbc3bb18a9c013d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1"}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15135cb20e26fcad3e688ea783305ecd21ef31687198a756bbc3bb18a9c013d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15135cb20e26fcad3e688ea783305ecd21ef31687198a756bbc3bb18a9c013d7"}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5aa146550e0994cd0a6e0e59665bf6b5f9cc34d61b6edfe010e5d2bf1b9414a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5aa146550e0994cd0a6e0e59665bf6b5f9cc34d61b6edfe010e5d2bf1b9414a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15135cb20e26fcad3e688ea783305ecd21ef31687198a756bbc3bb18a9c013d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15135cb20e26fcad3e688ea783305ecd21ef31687198a756bbc3bb18a9c013d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1"}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15135cb20e26fcad3e688ea783305ecd21ef31687198a756bbc3bb18a9c013d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5aa146550e0994cd0a6e0e59665bf6b5f9cc34d61b6edfe010e5d2bf1b9414a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5aa146550e0994cd0a6e0e59665bf6b5f9cc34d61b6edfe010e5d2bf1b9414a"}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5aa146550e0994cd0a6e0e59665bf6b5f9cc34d61b6edfe010e5d2bf1b9414a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15135cb20e26fcad3e688ea783305ecd21ef31687198a756bbc3bb18a9c013d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15135cb20e26fcad3e688ea783305ecd21ef31687198a756bbc3bb18a9c013d7"}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15135cb20e26fcad3e688ea783305ecd21ef31687198a756bbc3bb18a9c013d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5aa146550e0994cd0a6e0e59665bf6b5f9cc34d61b6edfe010e5d2bf1b9414a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5aa146550e0994cd0a6e0e59665bf6b5f9cc34d61b6edfe010e5d2bf1b9414a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1"}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5aa146550e0994cd0a6e0e59665bf6b5f9cc34d61b6edfe010e5d2bf1b9414a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ea84ece5cb348b0623da8a9c7591aca12e0722f2f42c949b1b2afaf0fd0ba7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5aa146550e0994cd0a6e0e59665bf6b5f9cc34d61b6edfe010e5d2bf1b9414a"}
{"level":"info","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ea84ece5cb348b0623da8a9c7591aca12e0722f2f42c949b1b2afaf0fd0ba7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15135cb20e26fcad3e688ea783305ecd21ef31687198a756bbc3bb18a9c013d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:16:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15135cb20e26fcad3e688ea783305ecd21ef31687198a756bbc3bb18a9c013d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ea84ece5cb348b0623da8a9c7591aca12e0722f2f42c949b1b2afaf0fd0ba7a"}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15135cb20e26fcad3e688ea783305ecd21ef31687198a756bbc3bb18a9c013d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad5c0a14cddabf54b41d68e875c01ed6288ff6f33e99b4c5d95955894887a6f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15135cb20e26fcad3e688ea783305ecd21ef31687198a756bbc3bb18a9c013d7"}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad5c0a14cddabf54b41d68e875c01ed6288ff6f33e99b4c5d95955894887a6f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5aa146550e0994cd0a6e0e59665bf6b5f9cc34d61b6edfe010e5d2bf1b9414a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ea84ece5cb348b0623da8a9c7591aca12e0722f2f42c949b1b2afaf0fd0ba7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ea84ece5cb348b0623da8a9c7591aca12e0722f2f42c949b1b2afaf0fd0ba7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad5c0a14cddabf54b41d68e875c01ed6288ff6f33e99b4c5d95955894887a6f3"}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ea84ece5cb348b0623da8a9c7591aca12e0722f2f42c949b1b2afaf0fd0ba7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15135cb20e26fcad3e688ea783305ecd21ef31687198a756bbc3bb18a9c013d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad5c0a14cddabf54b41d68e875c01ed6288ff6f33e99b4c5d95955894887a6f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad5c0a14cddabf54b41d68e875c01ed6288ff6f33e99b4c5d95955894887a6f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad5c0a14cddabf54b41d68e875c01ed6288ff6f33e99b4c5d95955894887a6f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9aa5cce3022cb2c1fc9aeae4d10c68d186e3aa1bf6b8bc6b80c4f091d9ff3d6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5aa146550e0994cd0a6e0e59665bf6b5f9cc34d61b6edfe010e5d2bf1b9414a"}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9aa5cce3022cb2c1fc9aeae4d10c68d186e3aa1bf6b8bc6b80c4f091d9ff3d6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ea84ece5cb348b0623da8a9c7591aca12e0722f2f42c949b1b2afaf0fd0ba7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ea84ece5cb348b0623da8a9c7591aca12e0722f2f42c949b1b2afaf0fd0ba7a"}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ea84ece5cb348b0623da8a9c7591aca12e0722f2f42c949b1b2afaf0fd0ba7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73bc606ec9c141b55c1ccd96def2f16d851cf9a81f50da0d5ce9ef0caf4a200a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15135cb20e26fcad3e688ea783305ecd21ef31687198a756bbc3bb18a9c013d7"}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73bc606ec9c141b55c1ccd96def2f16d851cf9a81f50da0d5ce9ef0caf4a200a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad5c0a14cddabf54b41d68e875c01ed6288ff6f33e99b4c5d95955894887a6f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76d4913bc7922e94eefff544c80c1f1affbf82dff1335ef70d23ab760725afb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76d4913bc7922e94eefff544c80c1f1affbf82dff1335ef70d23ab760725afb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9aa5cce3022cb2c1fc9aeae4d10c68d186e3aa1bf6b8bc6b80c4f091d9ff3d6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9aa5cce3022cb2c1fc9aeae4d10c68d186e3aa1bf6b8bc6b80c4f091d9ff3d6f"}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9aa5cce3022cb2c1fc9aeae4d10c68d186e3aa1bf6b8bc6b80c4f091d9ff3d6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad5c0a14cddabf54b41d68e875c01ed6288ff6f33e99b4c5d95955894887a6f3"}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73bc606ec9c141b55c1ccd96def2f16d851cf9a81f50da0d5ce9ef0caf4a200a"}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ea84ece5cb348b0623da8a9c7591aca12e0722f2f42c949b1b2afaf0fd0ba7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ea84ece5cb348b0623da8a9c7591aca12e0722f2f42c949b1b2afaf0fd0ba7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76d4913bc7922e94eefff544c80c1f1affbf82dff1335ef70d23ab760725afb5"}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b"}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ea84ece5cb348b0623da8a9c7591aca12e0722f2f42c949b1b2afaf0fd0ba7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73bc606ec9c141b55c1ccd96def2f16d851cf9a81f50da0d5ce9ef0caf4a200a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["73bc606ec9c141b55c1ccd96def2f16d851cf9a81f50da0d5ce9ef0caf4a200a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ea84ece5cb348b0623da8a9c7591aca12e0722f2f42c949b1b2afaf0fd0ba7a"}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fa11bf6f2e440cd4a9d6543d7608ffd4fc8c19149e932468d30d908b8c322b1"}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9aa5cce3022cb2c1fc9aeae4d10c68d186e3aa1bf6b8bc6b80c4f091d9ff3d6f"}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73bc606ec9c141b55c1ccd96def2f16d851cf9a81f50da0d5ce9ef0caf4a200a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76d4913bc7922e94eefff544c80c1f1affbf82dff1335ef70d23ab760725afb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76d4913bc7922e94eefff544c80c1f1affbf82dff1335ef70d23ab760725afb5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b2a78a1fedbd6429cc6825d36f2a815b5a416ebe9819d35a3abd5f88f6cb022"}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ea84ece5cb348b0623da8a9c7591aca12e0722f2f42c949b1b2afaf0fd0ba7a"}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76d4913bc7922e94eefff544c80c1f1affbf82dff1335ef70d23ab760725afb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fa11bf6f2e440cd4a9d6543d7608ffd4fc8c19149e932468d30d908b8c322b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4fa11bf6f2e440cd4a9d6543d7608ffd4fc8c19149e932468d30d908b8c322b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7af43bac4c897b9e9abafbd02782ab788f262ddacb3f513bb570fcaefc8602c9"}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fa11bf6f2e440cd4a9d6543d7608ffd4fc8c19149e932468d30d908b8c322b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9aa5cce3022cb2c1fc9aeae4d10c68d186e3aa1bf6b8bc6b80c4f091d9ff3d6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9aa5cce3022cb2c1fc9aeae4d10c68d186e3aa1bf6b8bc6b80c4f091d9ff3d6f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a"}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9aa5cce3022cb2c1fc9aeae4d10c68d186e3aa1bf6b8bc6b80c4f091d9ff3d6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b2a78a1fedbd6429cc6825d36f2a815b5a416ebe9819d35a3abd5f88f6cb022","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b2a78a1fedbd6429cc6825d36f2a815b5a416ebe9819d35a3abd5f88f6cb022"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73bc606ec9c141b55c1ccd96def2f16d851cf9a81f50da0d5ce9ef0caf4a200a"}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70ec503e2f9f1d8c1a07ac186ebf031baef5f6129a16e0a7eb1abc732c668d79"}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f"}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b2a78a1fedbd6429cc6825d36f2a815b5a416ebe9819d35a3abd5f88f6cb022","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76d4913bc7922e94eefff544c80c1f1affbf82dff1335ef70d23ab760725afb5"}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fa11bf6f2e440cd4a9d6543d7608ffd4fc8c19149e932468d30d908b8c322b1"}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ea84ece5cb348b0623da8a9c7591aca12e0722f2f42c949b1b2afaf0fd0ba7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7af43bac4c897b9e9abafbd02782ab788f262ddacb3f513bb570fcaefc8602c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7af43bac4c897b9e9abafbd02782ab788f262ddacb3f513bb570fcaefc8602c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9aa5cce3022cb2c1fc9aeae4d10c68d186e3aa1bf6b8bc6b80c4f091d9ff3d6f"}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b2a78a1fedbd6429cc6825d36f2a815b5a416ebe9819d35a3abd5f88f6cb022"}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7af43bac4c897b9e9abafbd02782ab788f262ddacb3f513bb570fcaefc8602c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b"}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7af43bac4c897b9e9abafbd02782ab788f262ddacb3f513bb570fcaefc8602c9"}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73bc606ec9c141b55c1ccd96def2f16d851cf9a81f50da0d5ce9ef0caf4a200a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70ec503e2f9f1d8c1a07ac186ebf031baef5f6129a16e0a7eb1abc732c668d79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70ec503e2f9f1d8c1a07ac186ebf031baef5f6129a16e0a7eb1abc732c668d79"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a"}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70ec503e2f9f1d8c1a07ac186ebf031baef5f6129a16e0a7eb1abc732c668d79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70ec503e2f9f1d8c1a07ac186ebf031baef5f6129a16e0a7eb1abc732c668d79"}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76d4913bc7922e94eefff544c80c1f1affbf82dff1335ef70d23ab760725afb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fa11bf6f2e440cd4a9d6543d7608ffd4fc8c19149e932468d30d908b8c322b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9aa5cce3022cb2c1fc9aeae4d10c68d186e3aa1bf6b8bc6b80c4f091d9ff3d6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b2a78a1fedbd6429cc6825d36f2a815b5a416ebe9819d35a3abd5f88f6cb022","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7af43bac4c897b9e9abafbd02782ab788f262ddacb3f513bb570fcaefc8602c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70ec503e2f9f1d8c1a07ac186ebf031baef5f6129a16e0a7eb1abc732c668d79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f"}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f"}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-20T17:16:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f"}
{"level":"error","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-20T17:16:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-20T17:16:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4451ca8b-8a47-4bde-86b1-150b7e525762","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:54938","PortSpecifier":{"PortValue":54938}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4451ca8b-8a47-4bde-86b1-150b7e525762","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T17:16:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4451ca8b-8a47-4bde-86b1-150b7e525762","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:54938","PortSpecifier":{"PortValue":54938}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784567805,"nanos":29598299},"http":{"id":"4451ca8b-8a47-4bde-86b1-150b7e525762","method":"POST","headers":{":authority":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:16:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4451ca8b-8a47-4bde-86b1-150b7e525762","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-20T17:16:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4451ca8b-8a47-4bde-86b1-150b7e525762","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1b91b571-c80d-4224-bb2b-6fe9d0687db6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8940b42d-6f21-40dc-a902-53f729cc3b47"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/187485271a22"]}}
{"level":"debug","ts":"2026-07-20T17:16:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4451ca8b-8a47-4bde-86b1-150b7e525762","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/187485271a22"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8940b42d-6f21-40dc-a902-53f729cc3b47"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1b91b571-c80d-4224-bb2b-6fe9d0687db6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ad5c0a14cddabf54b41d68e875c01ed6288ff6f33e99b4c5d95955894887a6f3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:16:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4451ca8b-8a47-4bde-86b1-150b7e525762","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:16:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4451ca8b-8a47-4bde-86b1-150b7e525762","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:16:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4451ca8b-8a47-4bde-86b1-150b7e525762","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a16895/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:16:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4451ca8b-8a47-4bde-86b1-150b7e525762","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-20T17:16:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4451ca8b-8a47-4bde-86b1-150b7e525762","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T17:16:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4451ca8b-8a47-4bde-86b1-150b7e525762","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-20T17:16:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4451ca8b-8a47-4bde-86b1-150b7e525762","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T17:16:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4451ca8b-8a47-4bde-86b1-150b7e525762","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T17:16:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ff0bd07f-1787-4809-bc52-f5c93a65d3a6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:34628","PortSpecifier":{"PortValue":34628}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ff0bd07f-1787-4809-bc52-f5c93a65d3a6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e142d5.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T17:16:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ff0bd07f-1787-4809-bc52-f5c93a65d3a6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:34628","PortSpecifier":{"PortValue":34628}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784567805,"nanos":79221975},"http":{"id":"ff0bd07f-1787-4809-bc52-f5c93a65d3a6","method":"POST","headers":{":authority":"e2e-shared-b-e142d5.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:16:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ff0bd07f-1787-4809-bc52-f5c93a65d3a6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-20T17:16:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ff0bd07f-1787-4809-bc52-f5c93a65d3a6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1b91b571-c80d-4224-bb2b-6fe9d0687db6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8940b42d-6f21-40dc-a902-53f729cc3b47"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/187485271a22"]}}
{"level":"debug","ts":"2026-07-20T17:16:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ff0bd07f-1787-4809-bc52-f5c93a65d3a6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/187485271a22"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8940b42d-6f21-40dc-a902-53f729cc3b47"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1b91b571-c80d-4224-bb2b-6fe9d0687db6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e142d5.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:16:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff0bd07f-1787-4809-bc52-f5c93a65d3a6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:16:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff0bd07f-1787-4809-bc52-f5c93a65d3a6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:16:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff0bd07f-1787-4809-bc52-f5c93a65d3a6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e142d5/rate-test-model-e142d5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-e142d5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:16:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ff0bd07f-1787-4809-bc52-f5c93a65d3a6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-20T17:16:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff0bd07f-1787-4809-bc52-f5c93a65d3a6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T17:16:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff0bd07f-1787-4809-bc52-f5c93a65d3a6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-20T17:16:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ff0bd07f-1787-4809-bc52-f5c93a65d3a6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T17:16:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ff0bd07f-1787-4809-bc52-f5c93a65d3a6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T17:16:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7fbdef47-e32f-40ca-9566-8ccb676d73f0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:54952","PortSpecifier":{"PortValue":54952}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7fbdef47-e32f-40ca-9566-8ccb676d73f0","method":"POST","path":"/ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895/v1/completions","host":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T17:16:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7fbdef47-e32f-40ca-9566-8ccb676d73f0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:54952","PortSpecifier":{"PortValue":54952}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784567805,"nanos":122039045},"http":{"id":"7fbdef47-e32f-40ca-9566-8ccb676d73f0","method":"POST","headers":{":authority":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:16:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7fbdef47-e32f-40ca-9566-8ccb676d73f0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1MSxBOEEmHNTFa3GR_5BTiKsDYGVUYeYCq1wmLPB01PogZxK0D3aHfyDzai7r"}
{"level":"debug","ts":"2026-07-20T17:16:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7fbdef47-e32f-40ca-9566-8ccb676d73f0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1MSxBOEEmHNTFa3GR_5BTiKsDYGVUYeYCq1wmLPB01PogZxK0D3aHfyDzai7r\"}"}
{"level":"debug","ts":"2026-07-20T17:16:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7fbdef47-e32f-40ca-9566-8ccb676d73f0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5399590f-cba6-4536-9e0b-3bb558af9be5","keyName":"e2e-rate-a-90b5ea","subscription":"e2e-rate-iso-a-90b5ea","tenant":"e2e-shared-a-a16895","userId":"5399590f-cba6-4536-9e0b-3bb558af9be5","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T17:16:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7fbdef47-e32f-40ca-9566-8ccb676d73f0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895\",\"requestedSubscription\":\"e2e-rate-iso-a-90b5ea\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T17:16:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7fbdef47-e32f-40ca-9566-8ccb676d73f0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a16895","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-90b5ea","namespace":"ai-tenant-e2e-shared-a-a16895","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895"}}
{"level":"debug","ts":"2026-07-20T17:16:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7fbdef47-e32f-40ca-9566-8ccb676d73f0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:16:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7fbdef47-e32f-40ca-9566-8ccb676d73f0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:16:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7fbdef47-e32f-40ca-9566-8ccb676d73f0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:16:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7fbdef47-e32f-40ca-9566-8ccb676d73f0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:16:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7fbdef47-e32f-40ca-9566-8ccb676d73f0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a16895/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:16:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7fbdef47-e32f-40ca-9566-8ccb676d73f0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T17:16:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7fbdef47-e32f-40ca-9566-8ccb676d73f0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T17:16:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7fbdef47-e32f-40ca-9566-8ccb676d73f0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-90b5ea"}
{"level":"debug","ts":"2026-07-20T17:16:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7fbdef47-e32f-40ca-9566-8ccb676d73f0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5399590f-cba6-4536-9e0b-3bb558af9be5","keyName":"e2e-rate-a-90b5ea","selected_subscription":"e2e-rate-iso-a-90b5ea","selected_subscription_key":"ai-tenant-e2e-shared-a-a16895/e2e-rate-iso-a-90b5ea@ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a16895","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-90b5ea","namespace":"ai-tenant-e2e-shared-a-a16895","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T17:16:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7fbdef47-e32f-40ca-9566-8ccb676d73f0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T17:16:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7fbdef47-e32f-40ca-9566-8ccb676d73f0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T17:16:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"964ad230-60fe-4cc2-a392-776feb76ba73","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:54968","PortSpecifier":{"PortValue":54968}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"964ad230-60fe-4cc2-a392-776feb76ba73","method":"POST","path":"/ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895/v1/completions","host":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T17:16:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"964ad230-60fe-4cc2-a392-776feb76ba73","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:54968","PortSpecifier":{"PortValue":54968}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784567806,"nanos":182369356},"http":{"id":"964ad230-60fe-4cc2-a392-776feb76ba73","method":"POST","headers":{":authority":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:16:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"964ad230-60fe-4cc2-a392-776feb76ba73","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1MSxBOEEmHNTFa3GR_5BTiKsDYGVUYeYCq1wmLPB01PogZxK0D3aHfyDzai7r"}
{"level":"debug","ts":"2026-07-20T17:16:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"964ad230-60fe-4cc2-a392-776feb76ba73","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1MSxBOEEmHNTFa3GR_5BTiKsDYGVUYeYCq1wmLPB01PogZxK0D3aHfyDzai7r\"}"}
{"level":"debug","ts":"2026-07-20T17:16:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"964ad230-60fe-4cc2-a392-776feb76ba73","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5399590f-cba6-4536-9e0b-3bb558af9be5","keyName":"e2e-rate-a-90b5ea","subscription":"e2e-rate-iso-a-90b5ea","tenant":"e2e-shared-a-a16895","userId":"5399590f-cba6-4536-9e0b-3bb558af9be5","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T17:16:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"964ad230-60fe-4cc2-a392-776feb76ba73","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895\",\"requestedSubscription\":\"e2e-rate-iso-a-90b5ea\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T17:16:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"964ad230-60fe-4cc2-a392-776feb76ba73","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a16895","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-90b5ea","namespace":"ai-tenant-e2e-shared-a-a16895","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895"}}
{"level":"debug","ts":"2026-07-20T17:16:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"964ad230-60fe-4cc2-a392-776feb76ba73","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:16:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"964ad230-60fe-4cc2-a392-776feb76ba73","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:16:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"964ad230-60fe-4cc2-a392-776feb76ba73","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:16:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"964ad230-60fe-4cc2-a392-776feb76ba73","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:16:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"964ad230-60fe-4cc2-a392-776feb76ba73","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a16895/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:16:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"964ad230-60fe-4cc2-a392-776feb76ba73","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T17:16:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"964ad230-60fe-4cc2-a392-776feb76ba73","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T17:16:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"964ad230-60fe-4cc2-a392-776feb76ba73","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-90b5ea"}
{"level":"debug","ts":"2026-07-20T17:16:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"964ad230-60fe-4cc2-a392-776feb76ba73","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5399590f-cba6-4536-9e0b-3bb558af9be5","keyName":"e2e-rate-a-90b5ea","selected_subscription":"e2e-rate-iso-a-90b5ea","selected_subscription_key":"ai-tenant-e2e-shared-a-a16895/e2e-rate-iso-a-90b5ea@ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a16895","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-90b5ea","namespace":"ai-tenant-e2e-shared-a-a16895","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T17:16:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"964ad230-60fe-4cc2-a392-776feb76ba73","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T17:16:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"964ad230-60fe-4cc2-a392-776feb76ba73","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T17:16:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bed95187-4088-40a4-860d-eae3b46cd20a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:54974","PortSpecifier":{"PortValue":54974}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bed95187-4088-40a4-860d-eae3b46cd20a","method":"POST","path":"/ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895/v1/completions","host":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T17:16:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bed95187-4088-40a4-860d-eae3b46cd20a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:54974","PortSpecifier":{"PortValue":54974}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784567807,"nanos":226139475},"http":{"id":"bed95187-4088-40a4-860d-eae3b46cd20a","method":"POST","headers":{":authority":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:16:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bed95187-4088-40a4-860d-eae3b46cd20a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1MSxBOEEmHNTFa3GR_5BTiKsDYGVUYeYCq1wmLPB01PogZxK0D3aHfyDzai7r"}
{"level":"debug","ts":"2026-07-20T17:16:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bed95187-4088-40a4-860d-eae3b46cd20a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1MSxBOEEmHNTFa3GR_5BTiKsDYGVUYeYCq1wmLPB01PogZxK0D3aHfyDzai7r\"}"}
{"level":"debug","ts":"2026-07-20T17:16:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bed95187-4088-40a4-860d-eae3b46cd20a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5399590f-cba6-4536-9e0b-3bb558af9be5","keyName":"e2e-rate-a-90b5ea","subscription":"e2e-rate-iso-a-90b5ea","tenant":"e2e-shared-a-a16895","userId":"5399590f-cba6-4536-9e0b-3bb558af9be5","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T17:16:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bed95187-4088-40a4-860d-eae3b46cd20a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895\",\"requestedSubscription\":\"e2e-rate-iso-a-90b5ea\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T17:16:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bed95187-4088-40a4-860d-eae3b46cd20a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a16895","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-90b5ea","namespace":"ai-tenant-e2e-shared-a-a16895","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895"}}
{"level":"debug","ts":"2026-07-20T17:16:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bed95187-4088-40a4-860d-eae3b46cd20a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:16:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bed95187-4088-40a4-860d-eae3b46cd20a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:16:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bed95187-4088-40a4-860d-eae3b46cd20a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:16:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bed95187-4088-40a4-860d-eae3b46cd20a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a16895/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:16:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bed95187-4088-40a4-860d-eae3b46cd20a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:16:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bed95187-4088-40a4-860d-eae3b46cd20a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T17:16:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bed95187-4088-40a4-860d-eae3b46cd20a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T17:16:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bed95187-4088-40a4-860d-eae3b46cd20a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-90b5ea"}
{"level":"debug","ts":"2026-07-20T17:16:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bed95187-4088-40a4-860d-eae3b46cd20a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5399590f-cba6-4536-9e0b-3bb558af9be5","keyName":"e2e-rate-a-90b5ea","selected_subscription":"e2e-rate-iso-a-90b5ea","selected_subscription_key":"ai-tenant-e2e-shared-a-a16895/e2e-rate-iso-a-90b5ea@ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a16895","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-90b5ea","namespace":"ai-tenant-e2e-shared-a-a16895","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T17:16:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bed95187-4088-40a4-860d-eae3b46cd20a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T17:16:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bed95187-4088-40a4-860d-eae3b46cd20a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T17:16:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9b7e93c7-be0a-48b4-b029-fd6a08c4faad","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:54984","PortSpecifier":{"PortValue":54984}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9b7e93c7-be0a-48b4-b029-fd6a08c4faad","method":"POST","path":"/ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895/v1/completions","host":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T17:16:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9b7e93c7-be0a-48b4-b029-fd6a08c4faad","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:54984","PortSpecifier":{"PortValue":54984}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784567808,"nanos":264582186},"http":{"id":"9b7e93c7-be0a-48b4-b029-fd6a08c4faad","method":"POST","headers":{":authority":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:16:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9b7e93c7-be0a-48b4-b029-fd6a08c4faad","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1MSxBOEEmHNTFa3GR_5BTiKsDYGVUYeYCq1wmLPB01PogZxK0D3aHfyDzai7r"}
{"level":"debug","ts":"2026-07-20T17:16:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9b7e93c7-be0a-48b4-b029-fd6a08c4faad","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1MSxBOEEmHNTFa3GR_5BTiKsDYGVUYeYCq1wmLPB01PogZxK0D3aHfyDzai7r\"}"}
{"level":"debug","ts":"2026-07-20T17:16:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9b7e93c7-be0a-48b4-b029-fd6a08c4faad","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5399590f-cba6-4536-9e0b-3bb558af9be5","keyName":"e2e-rate-a-90b5ea","subscription":"e2e-rate-iso-a-90b5ea","tenant":"e2e-shared-a-a16895","userId":"5399590f-cba6-4536-9e0b-3bb558af9be5","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T17:16:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9b7e93c7-be0a-48b4-b029-fd6a08c4faad","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895\",\"requestedSubscription\":\"e2e-rate-iso-a-90b5ea\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T17:16:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9b7e93c7-be0a-48b4-b029-fd6a08c4faad","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a16895","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-90b5ea","namespace":"ai-tenant-e2e-shared-a-a16895","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895"}}
{"level":"debug","ts":"2026-07-20T17:16:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9b7e93c7-be0a-48b4-b029-fd6a08c4faad","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:16:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b7e93c7-be0a-48b4-b029-fd6a08c4faad","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:16:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b7e93c7-be0a-48b4-b029-fd6a08c4faad","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:16:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b7e93c7-be0a-48b4-b029-fd6a08c4faad","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a16895/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:16:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b7e93c7-be0a-48b4-b029-fd6a08c4faad","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:16:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b7e93c7-be0a-48b4-b029-fd6a08c4faad","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T17:16:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b7e93c7-be0a-48b4-b029-fd6a08c4faad","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T17:16:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b7e93c7-be0a-48b4-b029-fd6a08c4faad","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-90b5ea"}
{"level":"debug","ts":"2026-07-20T17:16:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b7e93c7-be0a-48b4-b029-fd6a08c4faad","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5399590f-cba6-4536-9e0b-3bb558af9be5","keyName":"e2e-rate-a-90b5ea","selected_subscription":"e2e-rate-iso-a-90b5ea","selected_subscription_key":"ai-tenant-e2e-shared-a-a16895/e2e-rate-iso-a-90b5ea@ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a16895","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-90b5ea","namespace":"ai-tenant-e2e-shared-a-a16895","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T17:16:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9b7e93c7-be0a-48b4-b029-fd6a08c4faad","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T17:16:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9b7e93c7-be0a-48b4-b029-fd6a08c4faad","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T17:16:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"afcde2b1-6218-45bc-ba80-fe4ccaad72ac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:54992","PortSpecifier":{"PortValue":54992}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"afcde2b1-6218-45bc-ba80-fe4ccaad72ac","method":"POST","path":"/ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895/v1/completions","host":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T17:16:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"afcde2b1-6218-45bc-ba80-fe4ccaad72ac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:54992","PortSpecifier":{"PortValue":54992}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784567809,"nanos":302770910},"http":{"id":"afcde2b1-6218-45bc-ba80-fe4ccaad72ac","method":"POST","headers":{":authority":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:16:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"afcde2b1-6218-45bc-ba80-fe4ccaad72ac","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1MSxBOEEmHNTFa3GR_5BTiKsDYGVUYeYCq1wmLPB01PogZxK0D3aHfyDzai7r"}
{"level":"debug","ts":"2026-07-20T17:16:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"afcde2b1-6218-45bc-ba80-fe4ccaad72ac","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1MSxBOEEmHNTFa3GR_5BTiKsDYGVUYeYCq1wmLPB01PogZxK0D3aHfyDzai7r\"}"}
{"level":"debug","ts":"2026-07-20T17:16:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"afcde2b1-6218-45bc-ba80-fe4ccaad72ac","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5399590f-cba6-4536-9e0b-3bb558af9be5","keyName":"e2e-rate-a-90b5ea","subscription":"e2e-rate-iso-a-90b5ea","tenant":"e2e-shared-a-a16895","userId":"5399590f-cba6-4536-9e0b-3bb558af9be5","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T17:16:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"afcde2b1-6218-45bc-ba80-fe4ccaad72ac","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895\",\"requestedSubscription\":\"e2e-rate-iso-a-90b5ea\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T17:16:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"afcde2b1-6218-45bc-ba80-fe4ccaad72ac","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a16895","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-90b5ea","namespace":"ai-tenant-e2e-shared-a-a16895","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895"}}
{"level":"debug","ts":"2026-07-20T17:16:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"afcde2b1-6218-45bc-ba80-fe4ccaad72ac","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:16:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"afcde2b1-6218-45bc-ba80-fe4ccaad72ac","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:16:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"afcde2b1-6218-45bc-ba80-fe4ccaad72ac","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:16:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"afcde2b1-6218-45bc-ba80-fe4ccaad72ac","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a16895/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:16:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"afcde2b1-6218-45bc-ba80-fe4ccaad72ac","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:16:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"afcde2b1-6218-45bc-ba80-fe4ccaad72ac","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T17:16:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"afcde2b1-6218-45bc-ba80-fe4ccaad72ac","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T17:16:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"afcde2b1-6218-45bc-ba80-fe4ccaad72ac","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-90b5ea"}
{"level":"debug","ts":"2026-07-20T17:16:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"afcde2b1-6218-45bc-ba80-fe4ccaad72ac","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5399590f-cba6-4536-9e0b-3bb558af9be5","keyName":"e2e-rate-a-90b5ea","selected_subscription":"e2e-rate-iso-a-90b5ea","selected_subscription_key":"ai-tenant-e2e-shared-a-a16895/e2e-rate-iso-a-90b5ea@ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a16895","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-90b5ea","namespace":"ai-tenant-e2e-shared-a-a16895","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T17:16:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"afcde2b1-6218-45bc-ba80-fe4ccaad72ac","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T17:16:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"afcde2b1-6218-45bc-ba80-fe4ccaad72ac","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T17:16:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b40a78b3-8186-4503-a4e1-770c58cacba6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:55002","PortSpecifier":{"PortValue":55002}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b40a78b3-8186-4503-a4e1-770c58cacba6","method":"POST","path":"/ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895/v1/completions","host":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T17:16:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b40a78b3-8186-4503-a4e1-770c58cacba6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:55002","PortSpecifier":{"PortValue":55002}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784567810,"nanos":344235208},"http":{"id":"b40a78b3-8186-4503-a4e1-770c58cacba6","method":"POST","headers":{":authority":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:16:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b40a78b3-8186-4503-a4e1-770c58cacba6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1MSxBOEEmHNTFa3GR_5BTiKsDYGVUYeYCq1wmLPB01PogZxK0D3aHfyDzai7r"}
{"level":"debug","ts":"2026-07-20T17:16:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b40a78b3-8186-4503-a4e1-770c58cacba6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1MSxBOEEmHNTFa3GR_5BTiKsDYGVUYeYCq1wmLPB01PogZxK0D3aHfyDzai7r\"}"}
{"level":"debug","ts":"2026-07-20T17:16:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b40a78b3-8186-4503-a4e1-770c58cacba6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5399590f-cba6-4536-9e0b-3bb558af9be5","keyName":"e2e-rate-a-90b5ea","subscription":"e2e-rate-iso-a-90b5ea","tenant":"e2e-shared-a-a16895","userId":"5399590f-cba6-4536-9e0b-3bb558af9be5","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T17:16:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b40a78b3-8186-4503-a4e1-770c58cacba6","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895\",\"requestedSubscription\":\"e2e-rate-iso-a-90b5ea\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T17:16:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b40a78b3-8186-4503-a4e1-770c58cacba6","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a16895","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-90b5ea","namespace":"ai-tenant-e2e-shared-a-a16895","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895"}}
{"level":"debug","ts":"2026-07-20T17:16:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b40a78b3-8186-4503-a4e1-770c58cacba6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:16:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b40a78b3-8186-4503-a4e1-770c58cacba6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:16:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b40a78b3-8186-4503-a4e1-770c58cacba6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:16:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b40a78b3-8186-4503-a4e1-770c58cacba6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a16895/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:16:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b40a78b3-8186-4503-a4e1-770c58cacba6","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:16:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b40a78b3-8186-4503-a4e1-770c58cacba6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T17:16:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b40a78b3-8186-4503-a4e1-770c58cacba6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T17:16:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b40a78b3-8186-4503-a4e1-770c58cacba6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-90b5ea"}
{"level":"debug","ts":"2026-07-20T17:16:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b40a78b3-8186-4503-a4e1-770c58cacba6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5399590f-cba6-4536-9e0b-3bb558af9be5","keyName":"e2e-rate-a-90b5ea","selected_subscription":"e2e-rate-iso-a-90b5ea","selected_subscription_key":"ai-tenant-e2e-shared-a-a16895/e2e-rate-iso-a-90b5ea@ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a16895","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-90b5ea","namespace":"ai-tenant-e2e-shared-a-a16895","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T17:16:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b40a78b3-8186-4503-a4e1-770c58cacba6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T17:16:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b40a78b3-8186-4503-a4e1-770c58cacba6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T17:16:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0bdaa333-47b8-4e65-bb99-a198ddcc269f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:55004","PortSpecifier":{"PortValue":55004}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0bdaa333-47b8-4e65-bb99-a198ddcc269f","method":"POST","path":"/ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895/v1/completions","host":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T17:16:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0bdaa333-47b8-4e65-bb99-a198ddcc269f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:55004","PortSpecifier":{"PortValue":55004}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784567811,"nanos":383172823},"http":{"id":"0bdaa333-47b8-4e65-bb99-a198ddcc269f","method":"POST","headers":{":authority":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:16:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0bdaa333-47b8-4e65-bb99-a198ddcc269f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1MSxBOEEmHNTFa3GR_5BTiKsDYGVUYeYCq1wmLPB01PogZxK0D3aHfyDzai7r"}
{"level":"debug","ts":"2026-07-20T17:16:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0bdaa333-47b8-4e65-bb99-a198ddcc269f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1MSxBOEEmHNTFa3GR_5BTiKsDYGVUYeYCq1wmLPB01PogZxK0D3aHfyDzai7r\"}"}
{"level":"debug","ts":"2026-07-20T17:16:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0bdaa333-47b8-4e65-bb99-a198ddcc269f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5399590f-cba6-4536-9e0b-3bb558af9be5","keyName":"e2e-rate-a-90b5ea","subscription":"e2e-rate-iso-a-90b5ea","tenant":"e2e-shared-a-a16895","userId":"5399590f-cba6-4536-9e0b-3bb558af9be5","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T17:16:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0bdaa333-47b8-4e65-bb99-a198ddcc269f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895\",\"requestedSubscription\":\"e2e-rate-iso-a-90b5ea\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T17:16:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0bdaa333-47b8-4e65-bb99-a198ddcc269f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a16895","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-90b5ea","namespace":"ai-tenant-e2e-shared-a-a16895","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895"}}
{"level":"debug","ts":"2026-07-20T17:16:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0bdaa333-47b8-4e65-bb99-a198ddcc269f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:16:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0bdaa333-47b8-4e65-bb99-a198ddcc269f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:16:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0bdaa333-47b8-4e65-bb99-a198ddcc269f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:16:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0bdaa333-47b8-4e65-bb99-a198ddcc269f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:16:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0bdaa333-47b8-4e65-bb99-a198ddcc269f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a16895/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:16:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0bdaa333-47b8-4e65-bb99-a198ddcc269f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T17:16:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0bdaa333-47b8-4e65-bb99-a198ddcc269f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T17:16:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0bdaa333-47b8-4e65-bb99-a198ddcc269f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-90b5ea"}
{"level":"debug","ts":"2026-07-20T17:16:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0bdaa333-47b8-4e65-bb99-a198ddcc269f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5399590f-cba6-4536-9e0b-3bb558af9be5","keyName":"e2e-rate-a-90b5ea","selected_subscription":"e2e-rate-iso-a-90b5ea","selected_subscription_key":"ai-tenant-e2e-shared-a-a16895/e2e-rate-iso-a-90b5ea@ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a16895","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-90b5ea","namespace":"ai-tenant-e2e-shared-a-a16895","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T17:16:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0bdaa333-47b8-4e65-bb99-a198ddcc269f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T17:16:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0bdaa333-47b8-4e65-bb99-a198ddcc269f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T17:16:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f8eca533-7b24-4724-b82b-54025087ba36","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:55016","PortSpecifier":{"PortValue":55016}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f8eca533-7b24-4724-b82b-54025087ba36","method":"POST","path":"/ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895/v1/completions","host":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T17:16:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f8eca533-7b24-4724-b82b-54025087ba36","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:55016","PortSpecifier":{"PortValue":55016}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784567812,"nanos":422785436},"http":{"id":"f8eca533-7b24-4724-b82b-54025087ba36","method":"POST","headers":{":authority":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:16:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f8eca533-7b24-4724-b82b-54025087ba36","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1MSxBOEEmHNTFa3GR_5BTiKsDYGVUYeYCq1wmLPB01PogZxK0D3aHfyDzai7r"}
{"level":"debug","ts":"2026-07-20T17:16:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f8eca533-7b24-4724-b82b-54025087ba36","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1MSxBOEEmHNTFa3GR_5BTiKsDYGVUYeYCq1wmLPB01PogZxK0D3aHfyDzai7r\"}"}
{"level":"debug","ts":"2026-07-20T17:16:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f8eca533-7b24-4724-b82b-54025087ba36","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5399590f-cba6-4536-9e0b-3bb558af9be5","keyName":"e2e-rate-a-90b5ea","subscription":"e2e-rate-iso-a-90b5ea","tenant":"e2e-shared-a-a16895","userId":"5399590f-cba6-4536-9e0b-3bb558af9be5","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T17:16:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f8eca533-7b24-4724-b82b-54025087ba36","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895\",\"requestedSubscription\":\"e2e-rate-iso-a-90b5ea\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T17:16:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f8eca533-7b24-4724-b82b-54025087ba36","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a16895","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-90b5ea","namespace":"ai-tenant-e2e-shared-a-a16895","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895"}}
{"level":"debug","ts":"2026-07-20T17:16:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f8eca533-7b24-4724-b82b-54025087ba36","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:16:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f8eca533-7b24-4724-b82b-54025087ba36","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:16:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f8eca533-7b24-4724-b82b-54025087ba36","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:16:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f8eca533-7b24-4724-b82b-54025087ba36","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:16:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f8eca533-7b24-4724-b82b-54025087ba36","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a16895/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:16:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f8eca533-7b24-4724-b82b-54025087ba36","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T17:16:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f8eca533-7b24-4724-b82b-54025087ba36","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T17:16:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f8eca533-7b24-4724-b82b-54025087ba36","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-90b5ea"}
{"level":"debug","ts":"2026-07-20T17:16:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f8eca533-7b24-4724-b82b-54025087ba36","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5399590f-cba6-4536-9e0b-3bb558af9be5","keyName":"e2e-rate-a-90b5ea","selected_subscription":"e2e-rate-iso-a-90b5ea","selected_subscription_key":"ai-tenant-e2e-shared-a-a16895/e2e-rate-iso-a-90b5ea@ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a16895","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-90b5ea","namespace":"ai-tenant-e2e-shared-a-a16895","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T17:16:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f8eca533-7b24-4724-b82b-54025087ba36","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T17:16:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f8eca533-7b24-4724-b82b-54025087ba36","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T17:16:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f7b8698c-4fb7-4fa9-ad67-814d8042c688","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:36724","PortSpecifier":{"PortValue":36724}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f7b8698c-4fb7-4fa9-ad67-814d8042c688","method":"POST","path":"/ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895/v1/completions","host":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T17:16:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f7b8698c-4fb7-4fa9-ad67-814d8042c688","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:36724","PortSpecifier":{"PortValue":36724}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784567813,"nanos":461690087},"http":{"id":"f7b8698c-4fb7-4fa9-ad67-814d8042c688","method":"POST","headers":{":authority":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:16:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f7b8698c-4fb7-4fa9-ad67-814d8042c688","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1MSxBOEEmHNTFa3GR_5BTiKsDYGVUYeYCq1wmLPB01PogZxK0D3aHfyDzai7r"}
{"level":"debug","ts":"2026-07-20T17:16:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f7b8698c-4fb7-4fa9-ad67-814d8042c688","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1MSxBOEEmHNTFa3GR_5BTiKsDYGVUYeYCq1wmLPB01PogZxK0D3aHfyDzai7r\"}"}
{"level":"debug","ts":"2026-07-20T17:16:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f7b8698c-4fb7-4fa9-ad67-814d8042c688","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5399590f-cba6-4536-9e0b-3bb558af9be5","keyName":"e2e-rate-a-90b5ea","subscription":"e2e-rate-iso-a-90b5ea","tenant":"e2e-shared-a-a16895","userId":"5399590f-cba6-4536-9e0b-3bb558af9be5","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T17:16:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f7b8698c-4fb7-4fa9-ad67-814d8042c688","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895\",\"requestedSubscription\":\"e2e-rate-iso-a-90b5ea\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T17:16:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f7b8698c-4fb7-4fa9-ad67-814d8042c688","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a16895","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-90b5ea","namespace":"ai-tenant-e2e-shared-a-a16895","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895"}}
{"level":"debug","ts":"2026-07-20T17:16:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f7b8698c-4fb7-4fa9-ad67-814d8042c688","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:16:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7b8698c-4fb7-4fa9-ad67-814d8042c688","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:16:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7b8698c-4fb7-4fa9-ad67-814d8042c688","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:16:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7b8698c-4fb7-4fa9-ad67-814d8042c688","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a16895/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:16:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7b8698c-4fb7-4fa9-ad67-814d8042c688","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:16:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7b8698c-4fb7-4fa9-ad67-814d8042c688","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T17:16:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7b8698c-4fb7-4fa9-ad67-814d8042c688","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T17:16:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7b8698c-4fb7-4fa9-ad67-814d8042c688","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-90b5ea"}
{"level":"debug","ts":"2026-07-20T17:16:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7b8698c-4fb7-4fa9-ad67-814d8042c688","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5399590f-cba6-4536-9e0b-3bb558af9be5","keyName":"e2e-rate-a-90b5ea","selected_subscription":"e2e-rate-iso-a-90b5ea","selected_subscription_key":"ai-tenant-e2e-shared-a-a16895/e2e-rate-iso-a-90b5ea@ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a16895","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-90b5ea","namespace":"ai-tenant-e2e-shared-a-a16895","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T17:16:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f7b8698c-4fb7-4fa9-ad67-814d8042c688","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T17:16:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f7b8698c-4fb7-4fa9-ad67-814d8042c688","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T17:17:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"37269bb0-927e-493a-bd3f-82ce38456dc5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:36728","PortSpecifier":{"PortValue":36728}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"37269bb0-927e-493a-bd3f-82ce38456dc5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T17:17:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"37269bb0-927e-493a-bd3f-82ce38456dc5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:36728","PortSpecifier":{"PortValue":36728}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784567822,"nanos":327746336},"http":{"id":"37269bb0-927e-493a-bd3f-82ce38456dc5","method":"POST","headers":{":authority":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:17:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"37269bb0-927e-493a-bd3f-82ce38456dc5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-20T17:17:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"37269bb0-927e-493a-bd3f-82ce38456dc5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1b91b571-c80d-4224-bb2b-6fe9d0687db6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8940b42d-6f21-40dc-a902-53f729cc3b47"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/187485271a22"]}}
{"level":"debug","ts":"2026-07-20T17:17:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"37269bb0-927e-493a-bd3f-82ce38456dc5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/187485271a22"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8940b42d-6f21-40dc-a902-53f729cc3b47"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1b91b571-c80d-4224-bb2b-6fe9d0687db6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ad5c0a14cddabf54b41d68e875c01ed6288ff6f33e99b4c5d95955894887a6f3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:17:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37269bb0-927e-493a-bd3f-82ce38456dc5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:17:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37269bb0-927e-493a-bd3f-82ce38456dc5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:17:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37269bb0-927e-493a-bd3f-82ce38456dc5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a16895/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:17:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"37269bb0-927e-493a-bd3f-82ce38456dc5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-20T17:17:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37269bb0-927e-493a-bd3f-82ce38456dc5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T17:17:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37269bb0-927e-493a-bd3f-82ce38456dc5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-20T17:17:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"37269bb0-927e-493a-bd3f-82ce38456dc5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T17:17:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"37269bb0-927e-493a-bd3f-82ce38456dc5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T17:17:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b8be8906-7d30-4dc1-ac70-3bec4e6cbd29","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:43156","PortSpecifier":{"PortValue":43156}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b8be8906-7d30-4dc1-ac70-3bec4e6cbd29","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e142d5.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T17:17:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b8be8906-7d30-4dc1-ac70-3bec4e6cbd29","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:43156","PortSpecifier":{"PortValue":43156}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784567822,"nanos":367050883},"http":{"id":"b8be8906-7d30-4dc1-ac70-3bec4e6cbd29","method":"POST","headers":{":authority":"e2e-shared-b-e142d5.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:17:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b8be8906-7d30-4dc1-ac70-3bec4e6cbd29","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-20T17:17:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b8be8906-7d30-4dc1-ac70-3bec4e6cbd29","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1b91b571-c80d-4224-bb2b-6fe9d0687db6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8940b42d-6f21-40dc-a902-53f729cc3b47"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/187485271a22"]}}
{"level":"debug","ts":"2026-07-20T17:17:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b8be8906-7d30-4dc1-ac70-3bec4e6cbd29","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/187485271a22"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8940b42d-6f21-40dc-a902-53f729cc3b47"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1b91b571-c80d-4224-bb2b-6fe9d0687db6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e142d5.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:17:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b8be8906-7d30-4dc1-ac70-3bec4e6cbd29","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:17:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b8be8906-7d30-4dc1-ac70-3bec4e6cbd29","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:17:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b8be8906-7d30-4dc1-ac70-3bec4e6cbd29","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e142d5/rate-test-model-e142d5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-e142d5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:17:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b8be8906-7d30-4dc1-ac70-3bec4e6cbd29","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-20T17:17:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b8be8906-7d30-4dc1-ac70-3bec4e6cbd29","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T17:17:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b8be8906-7d30-4dc1-ac70-3bec4e6cbd29","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-20T17:17:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b8be8906-7d30-4dc1-ac70-3bec4e6cbd29","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T17:17:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b8be8906-7d30-4dc1-ac70-3bec4e6cbd29","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T17:17:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"51eec431-9f27-4513-b1c4-afc14fd8cf11","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:36732","PortSpecifier":{"PortValue":36732}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"51eec431-9f27-4513-b1c4-afc14fd8cf11","method":"POST","path":"/ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895/v1/completions","host":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T17:17:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"51eec431-9f27-4513-b1c4-afc14fd8cf11","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:36732","PortSpecifier":{"PortValue":36732}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784567822,"nanos":407062092},"http":{"id":"51eec431-9f27-4513-b1c4-afc14fd8cf11","method":"POST","headers":{":authority":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:17:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"51eec431-9f27-4513-b1c4-afc14fd8cf11","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-eXFNR0yYURtm94fR_UFWTthvpYogR3XYGAhtXrVRTMZLDny085avz3Lib7zY"}
{"level":"debug","ts":"2026-07-20T17:17:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"51eec431-9f27-4513-b1c4-afc14fd8cf11","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-eXFNR0yYURtm94fR_UFWTthvpYogR3XYGAhtXrVRTMZLDny085avz3Lib7zY\"}"}
{"level":"debug","ts":"2026-07-20T17:17:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"51eec431-9f27-4513-b1c4-afc14fd8cf11","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a1ff9108-073b-417f-bb55-1b1a0e4d97e3","keyName":"e2e-rate-a-1438c5","subscription":"e2e-rate-iso-a-1438c5","tenant":"e2e-shared-a-a16895","userId":"a1ff9108-073b-417f-bb55-1b1a0e4d97e3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T17:17:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"51eec431-9f27-4513-b1c4-afc14fd8cf11","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895\",\"requestedSubscription\":\"e2e-rate-iso-a-1438c5\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T17:17:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"51eec431-9f27-4513-b1c4-afc14fd8cf11","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a16895","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1438c5","namespace":"ai-tenant-e2e-shared-a-a16895","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895"}}
{"level":"debug","ts":"2026-07-20T17:17:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"51eec431-9f27-4513-b1c4-afc14fd8cf11","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:17:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"51eec431-9f27-4513-b1c4-afc14fd8cf11","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:17:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"51eec431-9f27-4513-b1c4-afc14fd8cf11","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:17:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"51eec431-9f27-4513-b1c4-afc14fd8cf11","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a16895/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:17:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"51eec431-9f27-4513-b1c4-afc14fd8cf11","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:17:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"51eec431-9f27-4513-b1c4-afc14fd8cf11","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T17:17:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"51eec431-9f27-4513-b1c4-afc14fd8cf11","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-1438c5"}
{"level":"debug","ts":"2026-07-20T17:17:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"51eec431-9f27-4513-b1c4-afc14fd8cf11","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T17:17:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"51eec431-9f27-4513-b1c4-afc14fd8cf11","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a1ff9108-073b-417f-bb55-1b1a0e4d97e3","keyName":"e2e-rate-a-1438c5","selected_subscription":"e2e-rate-iso-a-1438c5","selected_subscription_key":"ai-tenant-e2e-shared-a-a16895/e2e-rate-iso-a-1438c5@ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a16895","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1438c5","namespace":"ai-tenant-e2e-shared-a-a16895","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T17:17:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"51eec431-9f27-4513-b1c4-afc14fd8cf11","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T17:17:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"51eec431-9f27-4513-b1c4-afc14fd8cf11","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T17:17:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ee9d928c-f7dd-46ee-bb94-e6930e961561","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:51768","PortSpecifier":{"PortValue":51768}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ee9d928c-f7dd-46ee-bb94-e6930e961561","method":"POST","path":"/ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895/v1/completions","host":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T17:17:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ee9d928c-f7dd-46ee-bb94-e6930e961561","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:51768","PortSpecifier":{"PortValue":51768}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784567823,"nanos":447029770},"http":{"id":"ee9d928c-f7dd-46ee-bb94-e6930e961561","method":"POST","headers":{":authority":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:17:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ee9d928c-f7dd-46ee-bb94-e6930e961561","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-eXFNR0yYURtm94fR_UFWTthvpYogR3XYGAhtXrVRTMZLDny085avz3Lib7zY"}
{"level":"debug","ts":"2026-07-20T17:17:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ee9d928c-f7dd-46ee-bb94-e6930e961561","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-eXFNR0yYURtm94fR_UFWTthvpYogR3XYGAhtXrVRTMZLDny085avz3Lib7zY\"}"}
{"level":"debug","ts":"2026-07-20T17:17:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ee9d928c-f7dd-46ee-bb94-e6930e961561","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a1ff9108-073b-417f-bb55-1b1a0e4d97e3","keyName":"e2e-rate-a-1438c5","subscription":"e2e-rate-iso-a-1438c5","tenant":"e2e-shared-a-a16895","userId":"a1ff9108-073b-417f-bb55-1b1a0e4d97e3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T17:17:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ee9d928c-f7dd-46ee-bb94-e6930e961561","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895\",\"requestedSubscription\":\"e2e-rate-iso-a-1438c5\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T17:17:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ee9d928c-f7dd-46ee-bb94-e6930e961561","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a16895","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1438c5","namespace":"ai-tenant-e2e-shared-a-a16895","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895"}}
{"level":"debug","ts":"2026-07-20T17:17:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ee9d928c-f7dd-46ee-bb94-e6930e961561","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:17:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ee9d928c-f7dd-46ee-bb94-e6930e961561","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:17:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ee9d928c-f7dd-46ee-bb94-e6930e961561","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:17:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ee9d928c-f7dd-46ee-bb94-e6930e961561","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a16895/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:17:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ee9d928c-f7dd-46ee-bb94-e6930e961561","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:17:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ee9d928c-f7dd-46ee-bb94-e6930e961561","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-1438c5"}
{"level":"debug","ts":"2026-07-20T17:17:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ee9d928c-f7dd-46ee-bb94-e6930e961561","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T17:17:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ee9d928c-f7dd-46ee-bb94-e6930e961561","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T17:17:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ee9d928c-f7dd-46ee-bb94-e6930e961561","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a1ff9108-073b-417f-bb55-1b1a0e4d97e3","keyName":"e2e-rate-a-1438c5","selected_subscription":"e2e-rate-iso-a-1438c5","selected_subscription_key":"ai-tenant-e2e-shared-a-a16895/e2e-rate-iso-a-1438c5@ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a16895","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1438c5","namespace":"ai-tenant-e2e-shared-a-a16895","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T17:17:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ee9d928c-f7dd-46ee-bb94-e6930e961561","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T17:17:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ee9d928c-f7dd-46ee-bb94-e6930e961561","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T17:17:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ce431eac-6f08-427a-8741-3d5a297c6705","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:51774","PortSpecifier":{"PortValue":51774}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ce431eac-6f08-427a-8741-3d5a297c6705","method":"POST","path":"/ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895/v1/completions","host":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T17:17:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ce431eac-6f08-427a-8741-3d5a297c6705","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:51774","PortSpecifier":{"PortValue":51774}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784567824,"nanos":488173246},"http":{"id":"ce431eac-6f08-427a-8741-3d5a297c6705","method":"POST","headers":{":authority":"e2e-shared-a-a16895.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:17:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ce431eac-6f08-427a-8741-3d5a297c6705","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-eXFNR0yYURtm94fR_UFWTthvpYogR3XYGAhtXrVRTMZLDny085avz3Lib7zY"}
{"level":"debug","ts":"2026-07-20T17:17:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ce431eac-6f08-427a-8741-3d5a297c6705","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-eXFNR0yYURtm94fR_UFWTthvpYogR3XYGAhtXrVRTMZLDny085avz3Lib7zY\"}"}
{"level":"debug","ts":"2026-07-20T17:17:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ce431eac-6f08-427a-8741-3d5a297c6705","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a1ff9108-073b-417f-bb55-1b1a0e4d97e3","keyName":"e2e-rate-a-1438c5","subscription":"e2e-rate-iso-a-1438c5","tenant":"e2e-shared-a-a16895","userId":"a1ff9108-073b-417f-bb55-1b1a0e4d97e3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T17:17:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ce431eac-6f08-427a-8741-3d5a297c6705","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895\",\"requestedSubscription\":\"e2e-rate-iso-a-1438c5\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T17:17:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ce431eac-6f08-427a-8741-3d5a297c6705","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a16895.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a16895","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1438c5","namespace":"ai-tenant-e2e-shared-a-a16895","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895"}}
{"level":"debug","ts":"2026-07-20T17:17:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ce431eac-6f08-427a-8741-3d5a297c6705","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:17:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce431eac-6f08-427a-8741-3d5a297c6705","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:17:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce431eac-6f08-427a-8741-3d5a297c6705","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:17:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce431eac-6f08-427a-8741-3d5a297c6705","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a16895/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:17:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce431eac-6f08-427a-8741-3d5a297c6705","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:17:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce431eac-6f08-427a-8741-3d5a297c6705","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T17:17:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce431eac-6f08-427a-8741-3d5a297c6705","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T17:17:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce431eac-6f08-427a-8741-3d5a297c6705","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-1438c5"}
{"level":"debug","ts":"2026-07-20T17:17:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce431eac-6f08-427a-8741-3d5a297c6705","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a1ff9108-073b-417f-bb55-1b1a0e4d97e3","keyName":"e2e-rate-a-1438c5","selected_subscription":"e2e-rate-iso-a-1438c5","selected_subscription_key":"ai-tenant-e2e-shared-a-a16895/e2e-rate-iso-a-1438c5@ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a16895","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1438c5","namespace":"ai-tenant-e2e-shared-a-a16895","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a16895/rate-test-model-a16895"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T17:17:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ce431eac-6f08-427a-8741-3d5a297c6705","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T17:17:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ce431eac-6f08-427a-8741-3d5a297c6705","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T17:17:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ebd71503-4cfd-4e42-87a7-8d908a6aecc5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:51420","PortSpecifier":{"PortValue":51420}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ebd71503-4cfd-4e42-87a7-8d908a6aecc5","method":"POST","path":"/ai-tenant-e2e-shared-b-e142d5/rate-test-model-e142d5/v1/completions","host":"e2e-shared-b-e142d5.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-20T17:17:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ebd71503-4cfd-4e42-87a7-8d908a6aecc5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.18:51420","PortSpecifier":{"PortValue":51420}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784567824,"nanos":524792655},"http":{"id":"ebd71503-4cfd-4e42-87a7-8d908a6aecc5","method":"POST","headers":{":authority":"e2e-shared-b-e142d5.apps.bb0722f8-abd9-4e49-9037-187485271a22.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-e142d5/rate-test-model-e142d5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:17:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ebd71503-4cfd-4e42-87a7-8d908a6aecc5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1dG1bvagssc8PEnKk_qDUHYJq0jfME57VvuYOw8sNVyDt55Un1KWfLS5ZXmbi"}
{"level":"debug","ts":"2026-07-20T17:17:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ebd71503-4cfd-4e42-87a7-8d908a6aecc5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-e142d5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1dG1bvagssc8PEnKk_qDUHYJq0jfME57VvuYOw8sNVyDt55Un1KWfLS5ZXmbi\"}"}
{"level":"debug","ts":"2026-07-20T17:17:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ebd71503-4cfd-4e42-87a7-8d908a6aecc5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-e142d5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9b2cad8b-ed51-4578-af50-80571ba29357","keyName":"e2e-rate-b-1438c5","subscription":"e2e-rate-iso-b-1438c5","tenant":"e2e-shared-b-e142d5","userId":"9b2cad8b-ed51-4578-af50-80571ba29357","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-20T17:17:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ebd71503-4cfd-4e42-87a7-8d908a6aecc5","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-e142d5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-e142d5/rate-test-model-e142d5\",\"requestedSubscription\":\"e2e-rate-iso-b-1438c5\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-20T17:17:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ebd71503-4cfd-4e42-87a7-8d908a6aecc5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-e142d5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e142d5","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-1438c5","namespace":"ai-tenant-e2e-shared-b-e142d5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-e142d5/rate-test-model-e142d5"}}
{"level":"debug","ts":"2026-07-20T17:17:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ebd71503-4cfd-4e42-87a7-8d908a6aecc5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-20T17:17:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ebd71503-4cfd-4e42-87a7-8d908a6aecc5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:17:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ebd71503-4cfd-4e42-87a7-8d908a6aecc5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:17:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ebd71503-4cfd-4e42-87a7-8d908a6aecc5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e142d5/rate-test-model-e142d5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-e142d5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:17:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ebd71503-4cfd-4e42-87a7-8d908a6aecc5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-20T17:17:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ebd71503-4cfd-4e42-87a7-8d908a6aecc5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-20T17:17:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ebd71503-4cfd-4e42-87a7-8d908a6aecc5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-1438c5"}
{"level":"debug","ts":"2026-07-20T17:17:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ebd71503-4cfd-4e42-87a7-8d908a6aecc5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-20T17:17:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ebd71503-4cfd-4e42-87a7-8d908a6aecc5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9b2cad8b-ed51-4578-af50-80571ba29357","keyName":"e2e-rate-b-1438c5","selected_subscription":"e2e-rate-iso-b-1438c5","selected_subscription_key":"ai-tenant-e2e-shared-b-e142d5/e2e-rate-iso-b-1438c5@ai-tenant-e2e-shared-b-e142d5/rate-test-model-e142d5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e142d5","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-1438c5","namespace":"ai-tenant-e2e-shared-b-e142d5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-e142d5/rate-test-model-e142d5"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-20T17:17:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ebd71503-4cfd-4e42-87a7-8d908a6aecc5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-20T17:17:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ebd71503-4cfd-4e42-87a7-8d908a6aecc5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-20T17:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4ea84ece5cb348b0623da8a9c7591aca12e0722f2f42c949b1b2afaf0fd0ba7a"}
{"level":"info","ts":"2026-07-20T17:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ad5c0a14cddabf54b41d68e875c01ed6288ff6f33e99b4c5d95955894887a6f3"}
{"level":"info","ts":"2026-07-20T17:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b51383af851d6dd7769cd969fa521c3022020d0116905678acfb5c7b2f682a97"}
{"level":"info","ts":"2026-07-20T17:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4fa11bf6f2e440cd4a9d6543d7608ffd4fc8c19149e932468d30d908b8c322b1"}
{"level":"info","ts":"2026-07-20T17:17:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/232344594f759be3c4b5078ceca9368535a3fac7f2bd219d1e9e9846bdfc65eb"}
{"level":"info","ts":"2026-07-20T17:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/78eeedc081a776c1d8bbad66c9e5d7fa7eb74df65a9488bbda95e4a5cf275d0b"}
{"level":"info","ts":"2026-07-20T17:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5794fa5121fb3fc443289058c38ff08b9a9e6f159c003cd75ceb8283dc3f70a6"}
{"level":"info","ts":"2026-07-20T17:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/15135cb20e26fcad3e688ea783305ecd21ef31687198a756bbc3bb18a9c013d7"}
{"level":"info","ts":"2026-07-20T17:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8d82b950076523c29f6816d9fa540d0fcd37ca700738cceda857b6abff2d032f"}
{"level":"info","ts":"2026-07-20T17:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/76d4913bc7922e94eefff544c80c1f1affbf82dff1335ef70d23ab760725afb5"}
{"level":"info","ts":"2026-07-20T17:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7af43bac4c897b9e9abafbd02782ab788f262ddacb3f513bb570fcaefc8602c9"}
{"level":"info","ts":"2026-07-20T17:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/70ec503e2f9f1d8c1a07ac186ebf031baef5f6129a16e0a7eb1abc732c668d79"}
{"level":"info","ts":"2026-07-20T17:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0d867b02737a6600eabcf248b3af7280e9d589000b2830853ae3af60a9751f07"}
{"level":"info","ts":"2026-07-20T17:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9aa5cce3022cb2c1fc9aeae4d10c68d186e3aa1bf6b8bc6b80c4f091d9ff3d6f"}
{"level":"info","ts":"2026-07-20T17:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3b2a78a1fedbd6429cc6825d36f2a815b5a416ebe9819d35a3abd5f88f6cb022"}
{"level":"info","ts":"2026-07-20T17:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7a4ca78aaaa46694b3e45f77eeddbbccbc4dafc1de925b8f2d9822105ac36ea6"}
{"level":"info","ts":"2026-07-20T17:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a5aa146550e0994cd0a6e0e59665bf6b5f9cc34d61b6edfe010e5d2bf1b9414a"}
{"level":"info","ts":"2026-07-20T17:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1b9cb5a998f512106d07c82bde13b621a502000e315e048b271cb89a23aea110"}
{"level":"info","ts":"2026-07-20T17:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/207511008834288fd40d351f11629a032942a58554aca2695431978f7a516264"}
{"level":"info","ts":"2026-07-20T17:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2895c1db2469715b078f9bf0ce14abb8c5d8b8fdbcc357536bb06c27118aa4e1"}
{"level":"info","ts":"2026-07-20T17:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/af5d1b718c7c9246c26a7023b3056a5d52b44830cc191c66c135716963c5cc72"}
{"level":"info","ts":"2026-07-20T17:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/67a111975a6266dd3666b13cce82115a4fd66678e1d8cda047d3a39a881bf74d"}
{"level":"info","ts":"2026-07-20T17:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/73bc606ec9c141b55c1ccd96def2f16d851cf9a81f50da0d5ce9ef0caf4a200a"}
{"level":"info","ts":"2026-07-20T17:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bff7dca8c44716fbb266954b2ce867ba8bae4129f03b6754b24390d87446192a"}