--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"info","ts":"2026-07-06T19:58:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e7e42234-e60b-42e1-a631-441e0b74d05f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:58:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e7e42234-e60b-42e1-a631-441e0b74d05f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:58:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"693cbaff-8fb3-4e77-9f20-59f98549fd45","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:35548","PortSpecifier":{"PortValue":35548}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"693cbaff-8fb3-4e77-9f20-59f98549fd45","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-inf-a-1e033f.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:58:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"693cbaff-8fb3-4e77-9f20-59f98549fd45","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:35548","PortSpecifier":{"PortValue":35548}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.35:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783367931,"nanos":696433297},"http":{"id":"693cbaff-8fb3-4e77-9f20-59f98549fd45","method":"POST","headers":{":authority":"e2e-inf-a-1e033f.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:58:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"693cbaff-8fb3-4e77-9f20-59f98549fd45","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T19:58:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"693cbaff-8fb3-4e77-9f20-59f98549fd45","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a5d356b1-3180-412a-8dea-76750349e251","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=57fd0aa1-6d66-4aee-9de0-7b7661d60c4b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60474a7ad191"]}}
{"level":"debug","ts":"2026-07-06T19:58:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"693cbaff-8fb3-4e77-9f20-59f98549fd45","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60474a7ad191"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=57fd0aa1-6d66-4aee-9de0-7b7661d60c4b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a5d356b1-3180-412a-8dea-76750349e251","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6c59eb1e1d4d70d4d04d562750fad8d93541deb8a2810cea0691257f46d234b5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.35:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-inf-a-1e033f.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:58:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"693cbaff-8fb3-4e77-9f20-59f98549fd45","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:58:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"693cbaff-8fb3-4e77-9f20-59f98549fd45","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:58:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"693cbaff-8fb3-4e77-9f20-59f98549fd45","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-inf-a-1e033f/test-model-1e033f\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:58:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"693cbaff-8fb3-4e77-9f20-59f98549fd45","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T19:58:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"693cbaff-8fb3-4e77-9f20-59f98549fd45","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T19:58:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"693cbaff-8fb3-4e77-9f20-59f98549fd45","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T19:58:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"693cbaff-8fb3-4e77-9f20-59f98549fd45","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:58:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"693cbaff-8fb3-4e77-9f20-59f98549fd45","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:58:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b86bd8d2-3635-4c94-a9bb-6b8189738080","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:50028","PortSpecifier":{"PortValue":50028}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b86bd8d2-3635-4c94-a9bb-6b8189738080","method":"POST","path":"/ai-tenant-e2e-inf-b-64edc6/test-model-64edc6/v1/chat/completions","host":"e2e-inf-b-64edc6.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:58:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b86bd8d2-3635-4c94-a9bb-6b8189738080","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:50028","PortSpecifier":{"PortValue":50028}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783367931,"nanos":734874724},"http":{"id":"b86bd8d2-3635-4c94-a9bb-6b8189738080","method":"POST","headers":{":authority":"e2e-inf-b-64edc6.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-inf-b-64edc6/test-model-64edc6/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:58:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b86bd8d2-3635-4c94-a9bb-6b8189738080","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-IbNFXqnNbOamKlCP_toyFC2Exdp8CUdM4ON8E4YSkrDRRlXPyGjCxjXYIFYI"}
{"level":"debug","ts":"2026-07-06T19:58:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b86bd8d2-3635-4c94-a9bb-6b8189738080","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-inf-b-64edc6.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-IbNFXqnNbOamKlCP_toyFC2Exdp8CUdM4ON8E4YSkrDRRlXPyGjCxjXYIFYI\"}"}
{"level":"debug","ts":"2026-07-06T19:58:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b86bd8d2-3635-4c94-a9bb-6b8189738080","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-b-64edc6.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-06T19:58:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"cannot fetch metadata","request id":"b86bd8d2-3635-4c94-a9bb-6b8189738080","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-b-64edc6.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"reason":"no such key: groups"}
{"level":"debug","ts":"2026-07-06T19:58:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b86bd8d2-3635-4c94-a9bb-6b8189738080","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"1bf23e1e82281f3089d75c4bdba9812d99eb8aa2ef61e3f32b46a0a0c8f61196"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-inf-b-64edc6.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-inf-b-64edc6/test-model-64edc6/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:58:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"b86bd8d2-3635-4c94-a9bb-6b8189738080","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-06T19:58:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b86bd8d2-3635-4c94-a9bb-6b8189738080","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-06T19:58:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b86bd8d2-3635-4c94-a9bb-6b8189738080","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-06T19:59:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7f20e8dc0930e450f01a1ee04d82f276eddf7c7fc09fec43a91532f54eefb7c2"}
{"level":"info","ts":"2026-07-06T19:59:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2baf6d8efc79ba63baa55c136b8dcae3431b22113ec05e302880d42e5ba07c30"}
{"level":"info","ts":"2026-07-06T19:59:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/275072fd1a4d1fca6c53eb24a7c7a5388f600d52bdcf25ef95d9bb2a7d2155d2"}
{"level":"info","ts":"2026-07-06T19:59:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/74e122a8fef5636903ac6b1eba79e59450b1374e44ad5868614a1cbd057ee98e"}
{"level":"info","ts":"2026-07-06T19:59:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f3f497441b0945799ef120a6c8c17e1ec41a6eaa674618aac6e56420e0badf05"}
{"level":"info","ts":"2026-07-06T19:59:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f433fec8ebb212cfaed8a6ff478abd74af7b232cff33967119c937a7c9478f34"}
{"level":"info","ts":"2026-07-06T19:59:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1bf23e1e82281f3089d75c4bdba9812d99eb8aa2ef61e3f32b46a0a0c8f61196"}
{"level":"info","ts":"2026-07-06T19:59:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a70ee30978eede7ec7f5e71b534dcb84defe34e2ef9b58ba307e08740a9acbc2"}
{"level":"info","ts":"2026-07-06T19:59:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8afc7b8961114338c059b3a8c1d3455958e3fa752b604b316976246a69173b0c"}
{"level":"info","ts":"2026-07-06T19:59:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6d4f8a7070bdd7e7a7d01c83db07c0595c0eae5c36dd049fdd382d9fb6e46626"}
{"level":"info","ts":"2026-07-06T19:59:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/22cd24ba2a36eb24d2dd5ca49157ff09e89f259363bdb5da41973c3575f83fce"}
{"level":"info","ts":"2026-07-06T19:59:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a7bb88a2f9cb8257708b8216cd0dd7bd6e2fefbadfe31f291b84ef2c48c1b39c"}
{"level":"info","ts":"2026-07-06T19:59:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/612a376cbf3d772f9f3927669805aecfd22bb8e313224a5875fa043c378f7165"}
{"level":"info","ts":"2026-07-06T19:59:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6c59eb1e1d4d70d4d04d562750fad8d93541deb8a2810cea0691257f46d234b5"}
{"level":"info","ts":"2026-07-06T19:59:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c205679dbcf17bef2e80caf22784fe8ed892d0eb26771323a0ac35bf5b28ad8d"}
{"level":"info","ts":"2026-07-06T19:59:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9f7c6f82a8d4b265caba4539e98fc185349fdb734a17dd9a8507709c17b84193"}
{"level":"info","ts":"2026-07-06T19:59:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a1afa2132e257691919ceef3e3c5713255bb282651ea74934395b92a6f744768"}
{"level":"info","ts":"2026-07-06T19:59:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/accde5853d8aba299b8c910250506238e00f28fd939ff6aae4418f41ef2f5d59"}
{"level":"info","ts":"2026-07-06T19:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/30688d4953ae5e2b86ae0f69de0c0a0382c05bbdb81a6d13608ba7797187de11"}
{"level":"info","ts":"2026-07-06T19:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9d932747be3b8dd12dad0ce4ffd0b220d8abeba59bc6868c9380749181d1614c"}
{"level":"debug","ts":"2026-07-06T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80230b767f268fa4406b859cec46541c9a0a239eccb776053c4d683a52e451c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:00:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:00:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80230b767f268fa4406b859cec46541c9a0a239eccb776053c4d683a52e451c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80230b767f268fa4406b859cec46541c9a0a239eccb776053c4d683a52e451c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80230b767f268fa4406b859cec46541c9a0a239eccb776053c4d683a52e451c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80230b767f268fa4406b859cec46541c9a0a239eccb776053c4d683a52e451c7"}
{"level":"debug","ts":"2026-07-06T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80230b767f268fa4406b859cec46541c9a0a239eccb776053c4d683a52e451c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80230b767f268fa4406b859cec46541c9a0a239eccb776053c4d683a52e451c7"}
{"level":"debug","ts":"2026-07-06T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80230b767f268fa4406b859cec46541c9a0a239eccb776053c4d683a52e451c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:00:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:00:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80230b767f268fa4406b859cec46541c9a0a239eccb776053c4d683a52e451c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80230b767f268fa4406b859cec46541c9a0a239eccb776053c4d683a52e451c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80230b767f268fa4406b859cec46541c9a0a239eccb776053c4d683a52e451c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:00:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:00:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80230b767f268fa4406b859cec46541c9a0a239eccb776053c4d683a52e451c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80230b767f268fa4406b859cec46541c9a0a239eccb776053c4d683a52e451c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80230b767f268fa4406b859cec46541c9a0a239eccb776053c4d683a52e451c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80230b767f268fa4406b859cec46541c9a0a239eccb776053c4d683a52e451c7"}
{"level":"debug","ts":"2026-07-06T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80230b767f268fa4406b859cec46541c9a0a239eccb776053c4d683a52e451c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80230b767f268fa4406b859cec46541c9a0a239eccb776053c4d683a52e451c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80230b767f268fa4406b859cec46541c9a0a239eccb776053c4d683a52e451c7"}
{"level":"debug","ts":"2026-07-06T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80230b767f268fa4406b859cec46541c9a0a239eccb776053c4d683a52e451c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:00:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:00:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80230b767f268fa4406b859cec46541c9a0a239eccb776053c4d683a52e451c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80230b767f268fa4406b859cec46541c9a0a239eccb776053c4d683a52e451c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80230b767f268fa4406b859cec46541c9a0a239eccb776053c4d683a52e451c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d16ae6be517fc6a21a7c98f8fe454eee013a0133f99b4a2ef676ed27bf112a27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:00:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:00:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d16ae6be517fc6a21a7c98f8fe454eee013a0133f99b4a2ef676ed27bf112a27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d16ae6be517fc6a21a7c98f8fe454eee013a0133f99b4a2ef676ed27bf112a27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d16ae6be517fc6a21a7c98f8fe454eee013a0133f99b4a2ef676ed27bf112a27","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80230b767f268fa4406b859cec46541c9a0a239eccb776053c4d683a52e451c7"}
{"level":"debug","ts":"2026-07-06T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d16ae6be517fc6a21a7c98f8fe454eee013a0133f99b4a2ef676ed27bf112a27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:00:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:00:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d16ae6be517fc6a21a7c98f8fe454eee013a0133f99b4a2ef676ed27bf112a27"}
{"level":"info","ts":"2026-07-06T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d16ae6be517fc6a21a7c98f8fe454eee013a0133f99b4a2ef676ed27bf112a27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d16ae6be517fc6a21a7c98f8fe454eee013a0133f99b4a2ef676ed27bf112a27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:00:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:00:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d16ae6be517fc6a21a7c98f8fe454eee013a0133f99b4a2ef676ed27bf112a27"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d16ae6be517fc6a21a7c98f8fe454eee013a0133f99b4a2ef676ed27bf112a27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d16ae6be517fc6a21a7c98f8fe454eee013a0133f99b4a2ef676ed27bf112a27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:00:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:00:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d16ae6be517fc6a21a7c98f8fe454eee013a0133f99b4a2ef676ed27bf112a27"}
{"level":"info","ts":"2026-07-06T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d16ae6be517fc6a21a7c98f8fe454eee013a0133f99b4a2ef676ed27bf112a27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d16ae6be517fc6a21a7c98f8fe454eee013a0133f99b4a2ef676ed27bf112a27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:00:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:00:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d16ae6be517fc6a21a7c98f8fe454eee013a0133f99b4a2ef676ed27bf112a27","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d16ae6be517fc6a21a7c98f8fe454eee013a0133f99b4a2ef676ed27bf112a27\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d16ae6be517fc6a21a7c98f8fe454eee013a0133f99b4a2ef676ed27bf112a27","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d16ae6be517fc6a21a7c98f8fe454eee013a0133f99b4a2ef676ed27bf112a27"}
{"level":"debug","ts":"2026-07-06T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d16ae6be517fc6a21a7c98f8fe454eee013a0133f99b4a2ef676ed27bf112a27","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d16ae6be517fc6a21a7c98f8fe454eee013a0133f99b4a2ef676ed27bf112a27"}
{"level":"debug","ts":"2026-07-06T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d16ae6be517fc6a21a7c98f8fe454eee013a0133f99b4a2ef676ed27bf112a27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:00:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:00:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d16ae6be517fc6a21a7c98f8fe454eee013a0133f99b4a2ef676ed27bf112a27"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d16ae6be517fc6a21a7c98f8fe454eee013a0133f99b4a2ef676ed27bf112a27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d16ae6be517fc6a21a7c98f8fe454eee013a0133f99b4a2ef676ed27bf112a27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:00:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:00:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d16ae6be517fc6a21a7c98f8fe454eee013a0133f99b4a2ef676ed27bf112a27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d16ae6be517fc6a21a7c98f8fe454eee013a0133f99b4a2ef676ed27bf112a27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d16ae6be517fc6a21a7c98f8fe454eee013a0133f99b4a2ef676ed27bf112a27","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d16ae6be517fc6a21a7c98f8fe454eee013a0133f99b4a2ef676ed27bf112a27"}
{"level":"debug","ts":"2026-07-06T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d16ae6be517fc6a21a7c98f8fe454eee013a0133f99b4a2ef676ed27bf112a27","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d16ae6be517fc6a21a7c98f8fe454eee013a0133f99b4a2ef676ed27bf112a27"}
{"level":"debug","ts":"2026-07-06T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d16ae6be517fc6a21a7c98f8fe454eee013a0133f99b4a2ef676ed27bf112a27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:00:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:00:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d16ae6be517fc6a21a7c98f8fe454eee013a0133f99b4a2ef676ed27bf112a27"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d16ae6be517fc6a21a7c98f8fe454eee013a0133f99b4a2ef676ed27bf112a27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d16ae6be517fc6a21a7c98f8fe454eee013a0133f99b4a2ef676ed27bf112a27","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d16ae6be517fc6a21a7c98f8fe454eee013a0133f99b4a2ef676ed27bf112a27"}
{"level":"debug","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae3c8461a90dca128776c18efd4563a0124ffd085350d25e75174f525b2c554b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:00:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:00:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae3c8461a90dca128776c18efd4563a0124ffd085350d25e75174f525b2c554b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae3c8461a90dca128776c18efd4563a0124ffd085350d25e75174f525b2c554b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae3c8461a90dca128776c18efd4563a0124ffd085350d25e75174f525b2c554b"}
{"level":"debug","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae3c8461a90dca128776c18efd4563a0124ffd085350d25e75174f525b2c554b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae3c8461a90dca128776c18efd4563a0124ffd085350d25e75174f525b2c554b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae3c8461a90dca128776c18efd4563a0124ffd085350d25e75174f525b2c554b"}
{"level":"debug","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae3c8461a90dca128776c18efd4563a0124ffd085350d25e75174f525b2c554b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:00:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:00:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae3c8461a90dca128776c18efd4563a0124ffd085350d25e75174f525b2c554b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae3c8461a90dca128776c18efd4563a0124ffd085350d25e75174f525b2c554b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0114a9b221f337d395d3c7c29105e0f7b118bc0786b342e7d4730453f32f8415","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:00:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:00:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0114a9b221f337d395d3c7c29105e0f7b118bc0786b342e7d4730453f32f8415","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae3c8461a90dca128776c18efd4563a0124ffd085350d25e75174f525b2c554b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0114a9b221f337d395d3c7c29105e0f7b118bc0786b342e7d4730453f32f8415"}
{"level":"debug","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0114a9b221f337d395d3c7c29105e0f7b118bc0786b342e7d4730453f32f8415","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:00:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:00:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0114a9b221f337d395d3c7c29105e0f7b118bc0786b342e7d4730453f32f8415"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0114a9b221f337d395d3c7c29105e0f7b118bc0786b342e7d4730453f32f8415","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0114a9b221f337d395d3c7c29105e0f7b118bc0786b342e7d4730453f32f8415","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae3c8461a90dca128776c18efd4563a0124ffd085350d25e75174f525b2c554b"}
{"level":"info","ts":"2026-07-06T20:00:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0114a9b221f337d395d3c7c29105e0f7b118bc0786b342e7d4730453f32f8415"}
{"level":"info","ts":"2026-07-06T20:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/80230b767f268fa4406b859cec46541c9a0a239eccb776053c4d683a52e451c7"}
{"level":"info","ts":"2026-07-06T20:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d16ae6be517fc6a21a7c98f8fe454eee013a0133f99b4a2ef676ed27bf112a27"}
{"level":"info","ts":"2026-07-06T20:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0114a9b221f337d395d3c7c29105e0f7b118bc0786b342e7d4730453f32f8415"}
{"level":"info","ts":"2026-07-06T20:00:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ae3c8461a90dca128776c18efd4563a0124ffd085350d25e75174f525b2c554b"}
{"level":"debug","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46036451f3cf941baee8d8e7fa99e5c7589643188a92ace598d4eb6c58771fda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:01:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:01:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46036451f3cf941baee8d8e7fa99e5c7589643188a92ace598d4eb6c58771fda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46036451f3cf941baee8d8e7fa99e5c7589643188a92ace598d4eb6c58771fda","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46036451f3cf941baee8d8e7fa99e5c7589643188a92ace598d4eb6c58771fda"}
{"level":"debug","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46036451f3cf941baee8d8e7fa99e5c7589643188a92ace598d4eb6c58771fda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46036451f3cf941baee8d8e7fa99e5c7589643188a92ace598d4eb6c58771fda","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46036451f3cf941baee8d8e7fa99e5c7589643188a92ace598d4eb6c58771fda"}
{"level":"debug","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46036451f3cf941baee8d8e7fa99e5c7589643188a92ace598d4eb6c58771fda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:01:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:01:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["46036451f3cf941baee8d8e7fa99e5c7589643188a92ace598d4eb6c58771fda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46036451f3cf941baee8d8e7fa99e5c7589643188a92ace598d4eb6c58771fda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46036451f3cf941baee8d8e7fa99e5c7589643188a92ace598d4eb6c58771fda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:01:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:01:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46036451f3cf941baee8d8e7fa99e5c7589643188a92ace598d4eb6c58771fda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46036451f3cf941baee8d8e7fa99e5c7589643188a92ace598d4eb6c58771fda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46036451f3cf941baee8d8e7fa99e5c7589643188a92ace598d4eb6c58771fda","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46036451f3cf941baee8d8e7fa99e5c7589643188a92ace598d4eb6c58771fda"}
{"level":"debug","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46036451f3cf941baee8d8e7fa99e5c7589643188a92ace598d4eb6c58771fda","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46036451f3cf941baee8d8e7fa99e5c7589643188a92ace598d4eb6c58771fda"}
{"level":"debug","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46036451f3cf941baee8d8e7fa99e5c7589643188a92ace598d4eb6c58771fda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:01:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:01:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["46036451f3cf941baee8d8e7fa99e5c7589643188a92ace598d4eb6c58771fda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46036451f3cf941baee8d8e7fa99e5c7589643188a92ace598d4eb6c58771fda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae9140935df703a67523e12806d29ff394da9e9fafae301f8714c26c7ce98ba3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:01:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:01:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae9140935df703a67523e12806d29ff394da9e9fafae301f8714c26c7ce98ba3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46036451f3cf941baee8d8e7fa99e5c7589643188a92ace598d4eb6c58771fda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae9140935df703a67523e12806d29ff394da9e9fafae301f8714c26c7ce98ba3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae9140935df703a67523e12806d29ff394da9e9fafae301f8714c26c7ce98ba3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae9140935df703a67523e12806d29ff394da9e9fafae301f8714c26c7ce98ba3"}
{"level":"debug","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae9140935df703a67523e12806d29ff394da9e9fafae301f8714c26c7ce98ba3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:01:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:01:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae9140935df703a67523e12806d29ff394da9e9fafae301f8714c26c7ce98ba3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46036451f3cf941baee8d8e7fa99e5c7589643188a92ace598d4eb6c58771fda"}
{"level":"info","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae9140935df703a67523e12806d29ff394da9e9fafae301f8714c26c7ce98ba3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae9140935df703a67523e12806d29ff394da9e9fafae301f8714c26c7ce98ba3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:01:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:01:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae9140935df703a67523e12806d29ff394da9e9fafae301f8714c26c7ce98ba3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae9140935df703a67523e12806d29ff394da9e9fafae301f8714c26c7ce98ba3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae9140935df703a67523e12806d29ff394da9e9fafae301f8714c26c7ce98ba3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae9140935df703a67523e12806d29ff394da9e9fafae301f8714c26c7ce98ba3"}
{"level":"debug","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae9140935df703a67523e12806d29ff394da9e9fafae301f8714c26c7ce98ba3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae9140935df703a67523e12806d29ff394da9e9fafae301f8714c26c7ce98ba3"}
{"level":"debug","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae9140935df703a67523e12806d29ff394da9e9fafae301f8714c26c7ce98ba3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:01:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:01:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae9140935df703a67523e12806d29ff394da9e9fafae301f8714c26c7ce98ba3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae9140935df703a67523e12806d29ff394da9e9fafae301f8714c26c7ce98ba3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae9140935df703a67523e12806d29ff394da9e9fafae301f8714c26c7ce98ba3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:01:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:01:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae9140935df703a67523e12806d29ff394da9e9fafae301f8714c26c7ce98ba3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae9140935df703a67523e12806d29ff394da9e9fafae301f8714c26c7ce98ba3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae9140935df703a67523e12806d29ff394da9e9fafae301f8714c26c7ce98ba3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae9140935df703a67523e12806d29ff394da9e9fafae301f8714c26c7ce98ba3"}
{"level":"debug","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c04f33128bcaa6eefaf35c3355795c93149ec3a37de732db4e9486bf78f42cd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:01:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:01:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae9140935df703a67523e12806d29ff394da9e9fafae301f8714c26c7ce98ba3"}
{"level":"info","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c04f33128bcaa6eefaf35c3355795c93149ec3a37de732db4e9486bf78f42cd2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae9140935df703a67523e12806d29ff394da9e9fafae301f8714c26c7ce98ba3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:01:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:01:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae9140935df703a67523e12806d29ff394da9e9fafae301f8714c26c7ce98ba3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae9140935df703a67523e12806d29ff394da9e9fafae301f8714c26c7ce98ba3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c04f33128bcaa6eefaf35c3355795c93149ec3a37de732db4e9486bf78f42cd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:01:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:01:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c04f33128bcaa6eefaf35c3355795c93149ec3a37de732db4e9486bf78f42cd2"}
{"level":"info","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c04f33128bcaa6eefaf35c3355795c93149ec3a37de732db4e9486bf78f42cd2"}
{"level":"info","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c04f33128bcaa6eefaf35c3355795c93149ec3a37de732db4e9486bf78f42cd2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae9140935df703a67523e12806d29ff394da9e9fafae301f8714c26c7ce98ba3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:01:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:01:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae9140935df703a67523e12806d29ff394da9e9fafae301f8714c26c7ce98ba3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c04f33128bcaa6eefaf35c3355795c93149ec3a37de732db4e9486bf78f42cd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:01:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:01:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c04f33128bcaa6eefaf35c3355795c93149ec3a37de732db4e9486bf78f42cd2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae9140935df703a67523e12806d29ff394da9e9fafae301f8714c26c7ce98ba3"}
{"level":"info","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c04f33128bcaa6eefaf35c3355795c93149ec3a37de732db4e9486bf78f42cd2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae9140935df703a67523e12806d29ff394da9e9fafae301f8714c26c7ce98ba3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:01:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:01:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae9140935df703a67523e12806d29ff394da9e9fafae301f8714c26c7ce98ba3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c04f33128bcaa6eefaf35c3355795c93149ec3a37de732db4e9486bf78f42cd2"}
{"level":"info","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae9140935df703a67523e12806d29ff394da9e9fafae301f8714c26c7ce98ba3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c04f33128bcaa6eefaf35c3355795c93149ec3a37de732db4e9486bf78f42cd2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae9140935df703a67523e12806d29ff394da9e9fafae301f8714c26c7ce98ba3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:01:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:01:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae9140935df703a67523e12806d29ff394da9e9fafae301f8714c26c7ce98ba3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae9140935df703a67523e12806d29ff394da9e9fafae301f8714c26c7ce98ba3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae9140935df703a67523e12806d29ff394da9e9fafae301f8714c26c7ce98ba3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae9140935df703a67523e12806d29ff394da9e9fafae301f8714c26c7ce98ba3"}
{"level":"debug","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae9140935df703a67523e12806d29ff394da9e9fafae301f8714c26c7ce98ba3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:01:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:01:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae9140935df703a67523e12806d29ff394da9e9fafae301f8714c26c7ce98ba3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae9140935df703a67523e12806d29ff394da9e9fafae301f8714c26c7ce98ba3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae9140935df703a67523e12806d29ff394da9e9fafae301f8714c26c7ce98ba3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"587b77012c9a8af1e9972a639b5c14b5be92391d71cd7aa625674d0b445047ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:01:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:01:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c04f33128bcaa6eefaf35c3355795c93149ec3a37de732db4e9486bf78f42cd2"}
{"level":"info","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"587b77012c9a8af1e9972a639b5c14b5be92391d71cd7aa625674d0b445047ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa8785305a08abe890ff7dda026ae9e6cebf659c57e7cbbd766e12c5e21bc37e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:01:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:01:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa8785305a08abe890ff7dda026ae9e6cebf659c57e7cbbd766e12c5e21bc37e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"587b77012c9a8af1e9972a639b5c14b5be92391d71cd7aa625674d0b445047ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa8785305a08abe890ff7dda026ae9e6cebf659c57e7cbbd766e12c5e21bc37e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa8785305a08abe890ff7dda026ae9e6cebf659c57e7cbbd766e12c5e21bc37e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae9140935df703a67523e12806d29ff394da9e9fafae301f8714c26c7ce98ba3"}
{"level":"debug","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"587b77012c9a8af1e9972a639b5c14b5be92391d71cd7aa625674d0b445047ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:01:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:01:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"587b77012c9a8af1e9972a639b5c14b5be92391d71cd7aa625674d0b445047ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa8785305a08abe890ff7dda026ae9e6cebf659c57e7cbbd766e12c5e21bc37e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"587b77012c9a8af1e9972a639b5c14b5be92391d71cd7aa625674d0b445047ae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/587b77012c9a8af1e9972a639b5c14b5be92391d71cd7aa625674d0b445047ae"}
{"level":"debug","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"587b77012c9a8af1e9972a639b5c14b5be92391d71cd7aa625674d0b445047ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:01:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:01:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["587b77012c9a8af1e9972a639b5c14b5be92391d71cd7aa625674d0b445047ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa8785305a08abe890ff7dda026ae9e6cebf659c57e7cbbd766e12c5e21bc37e"}
{"level":"info","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"587b77012c9a8af1e9972a639b5c14b5be92391d71cd7aa625674d0b445047ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"587b77012c9a8af1e9972a639b5c14b5be92391d71cd7aa625674d0b445047ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:01:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:01:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/587b77012c9a8af1e9972a639b5c14b5be92391d71cd7aa625674d0b445047ae"}
{"level":"info","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"587b77012c9a8af1e9972a639b5c14b5be92391d71cd7aa625674d0b445047ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3de715f6e0eb67e268b4f3c29bbf89d17947767a3c44c5fce972c0859c7b7da2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:01:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:01:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3de715f6e0eb67e268b4f3c29bbf89d17947767a3c44c5fce972c0859c7b7da2"}
{"level":"info","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3de715f6e0eb67e268b4f3c29bbf89d17947767a3c44c5fce972c0859c7b7da2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa8785305a08abe890ff7dda026ae9e6cebf659c57e7cbbd766e12c5e21bc37e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:01:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:01:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa8785305a08abe890ff7dda026ae9e6cebf659c57e7cbbd766e12c5e21bc37e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/587b77012c9a8af1e9972a639b5c14b5be92391d71cd7aa625674d0b445047ae"}
{"level":"info","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa8785305a08abe890ff7dda026ae9e6cebf659c57e7cbbd766e12c5e21bc37e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"587b77012c9a8af1e9972a639b5c14b5be92391d71cd7aa625674d0b445047ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:01:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:01:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["587b77012c9a8af1e9972a639b5c14b5be92391d71cd7aa625674d0b445047ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3de715f6e0eb67e268b4f3c29bbf89d17947767a3c44c5fce972c0859c7b7da2"}
{"level":"info","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"587b77012c9a8af1e9972a639b5c14b5be92391d71cd7aa625674d0b445047ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3de715f6e0eb67e268b4f3c29bbf89d17947767a3c44c5fce972c0859c7b7da2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:01:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:01:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3de715f6e0eb67e268b4f3c29bbf89d17947767a3c44c5fce972c0859c7b7da2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3de715f6e0eb67e268b4f3c29bbf89d17947767a3c44c5fce972c0859c7b7da2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa8785305a08abe890ff7dda026ae9e6cebf659c57e7cbbd766e12c5e21bc37e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:01:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:01:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa8785305a08abe890ff7dda026ae9e6cebf659c57e7cbbd766e12c5e21bc37e"}
{"level":"info","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa8785305a08abe890ff7dda026ae9e6cebf659c57e7cbbd766e12c5e21bc37e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"587b77012c9a8af1e9972a639b5c14b5be92391d71cd7aa625674d0b445047ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:01:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:01:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"587b77012c9a8af1e9972a639b5c14b5be92391d71cd7aa625674d0b445047ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3de715f6e0eb67e268b4f3c29bbf89d17947767a3c44c5fce972c0859c7b7da2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/587b77012c9a8af1e9972a639b5c14b5be92391d71cd7aa625674d0b445047ae"}
{"level":"debug","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa8785305a08abe890ff7dda026ae9e6cebf659c57e7cbbd766e12c5e21bc37e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:01:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:01:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa8785305a08abe890ff7dda026ae9e6cebf659c57e7cbbd766e12c5e21bc37e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa8785305a08abe890ff7dda026ae9e6cebf659c57e7cbbd766e12c5e21bc37e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3d19a60c0113c6d258bb507a8971c729a0cbea820af9e888e343545fe04f647","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:01:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:01:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3de715f6e0eb67e268b4f3c29bbf89d17947767a3c44c5fce972c0859c7b7da2"}
{"level":"info","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3d19a60c0113c6d258bb507a8971c729a0cbea820af9e888e343545fe04f647","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"587b77012c9a8af1e9972a639b5c14b5be92391d71cd7aa625674d0b445047ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:01:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:01:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["587b77012c9a8af1e9972a639b5c14b5be92391d71cd7aa625674d0b445047ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"587b77012c9a8af1e9972a639b5c14b5be92391d71cd7aa625674d0b445047ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa8785305a08abe890ff7dda026ae9e6cebf659c57e7cbbd766e12c5e21bc37e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:01:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:01:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa8785305a08abe890ff7dda026ae9e6cebf659c57e7cbbd766e12c5e21bc37e"}
{"level":"info","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa8785305a08abe890ff7dda026ae9e6cebf659c57e7cbbd766e12c5e21bc37e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3d19a60c0113c6d258bb507a8971c729a0cbea820af9e888e343545fe04f647","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:01:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:01:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3d19a60c0113c6d258bb507a8971c729a0cbea820af9e888e343545fe04f647"}
{"level":"info","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3d19a60c0113c6d258bb507a8971c729a0cbea820af9e888e343545fe04f647","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"587b77012c9a8af1e9972a639b5c14b5be92391d71cd7aa625674d0b445047ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:01:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:01:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"587b77012c9a8af1e9972a639b5c14b5be92391d71cd7aa625674d0b445047ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa8785305a08abe890ff7dda026ae9e6cebf659c57e7cbbd766e12c5e21bc37e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:01:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:01:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa8785305a08abe890ff7dda026ae9e6cebf659c57e7cbbd766e12c5e21bc37e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/587b77012c9a8af1e9972a639b5c14b5be92391d71cd7aa625674d0b445047ae"}
{"level":"info","ts":"2026-07-06T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa8785305a08abe890ff7dda026ae9e6cebf659c57e7cbbd766e12c5e21bc37e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3d19a60c0113c6d258bb507a8971c729a0cbea820af9e888e343545fe04f647","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:01:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:01:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a3d19a60c0113c6d258bb507a8971c729a0cbea820af9e888e343545fe04f647"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa8785305a08abe890ff7dda026ae9e6cebf659c57e7cbbd766e12c5e21bc37e"}
{"level":"info","ts":"2026-07-06T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3d19a60c0113c6d258bb507a8971c729a0cbea820af9e888e343545fe04f647","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db85641636943a9da599a4dbd78d5e11680c7a2b24e8e7baa96a08c9e4ca2be3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:01:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:01:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3d19a60c0113c6d258bb507a8971c729a0cbea820af9e888e343545fe04f647"}
{"level":"info","ts":"2026-07-06T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db85641636943a9da599a4dbd78d5e11680c7a2b24e8e7baa96a08c9e4ca2be3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"587b77012c9a8af1e9972a639b5c14b5be92391d71cd7aa625674d0b445047ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:01:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:01:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["587b77012c9a8af1e9972a639b5c14b5be92391d71cd7aa625674d0b445047ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db85641636943a9da599a4dbd78d5e11680c7a2b24e8e7baa96a08c9e4ca2be3"}
{"level":"info","ts":"2026-07-06T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"587b77012c9a8af1e9972a639b5c14b5be92391d71cd7aa625674d0b445047ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa8785305a08abe890ff7dda026ae9e6cebf659c57e7cbbd766e12c5e21bc37e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3d19a60c0113c6d258bb507a8971c729a0cbea820af9e888e343545fe04f647","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db85641636943a9da599a4dbd78d5e11680c7a2b24e8e7baa96a08c9e4ca2be3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:01:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:01:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db85641636943a9da599a4dbd78d5e11680c7a2b24e8e7baa96a08c9e4ca2be3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db85641636943a9da599a4dbd78d5e11680c7a2b24e8e7baa96a08c9e4ca2be3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"587b77012c9a8af1e9972a639b5c14b5be92391d71cd7aa625674d0b445047ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:01:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:01:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/587b77012c9a8af1e9972a639b5c14b5be92391d71cd7aa625674d0b445047ae"}
{"level":"info","ts":"2026-07-06T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"587b77012c9a8af1e9972a639b5c14b5be92391d71cd7aa625674d0b445047ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db85641636943a9da599a4dbd78d5e11680c7a2b24e8e7baa96a08c9e4ca2be3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"587b77012c9a8af1e9972a639b5c14b5be92391d71cd7aa625674d0b445047ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:01:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:01:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["587b77012c9a8af1e9972a639b5c14b5be92391d71cd7aa625674d0b445047ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa8785305a08abe890ff7dda026ae9e6cebf659c57e7cbbd766e12c5e21bc37e"}
{"level":"info","ts":"2026-07-06T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"587b77012c9a8af1e9972a639b5c14b5be92391d71cd7aa625674d0b445047ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"587b77012c9a8af1e9972a639b5c14b5be92391d71cd7aa625674d0b445047ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:01:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:01:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["587b77012c9a8af1e9972a639b5c14b5be92391d71cd7aa625674d0b445047ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"587b77012c9a8af1e9972a639b5c14b5be92391d71cd7aa625674d0b445047ae","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"587b77012c9a8af1e9972a639b5c14b5be92391d71cd7aa625674d0b445047ae\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"587b77012c9a8af1e9972a639b5c14b5be92391d71cd7aa625674d0b445047ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"587b77012c9a8af1e9972a639b5c14b5be92391d71cd7aa625674d0b445047ae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3d19a60c0113c6d258bb507a8971c729a0cbea820af9e888e343545fe04f647"}
{"level":"info","ts":"2026-07-06T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db85641636943a9da599a4dbd78d5e11680c7a2b24e8e7baa96a08c9e4ca2be3"}
{"level":"debug","ts":"2026-07-06T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b37411e3d0f1bf1a4740a846c18b671b101a9d13d309d87d0821b22a113ec44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:01:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:01:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/587b77012c9a8af1e9972a639b5c14b5be92391d71cd7aa625674d0b445047ae"}
{"level":"info","ts":"2026-07-06T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b37411e3d0f1bf1a4740a846c18b671b101a9d13d309d87d0821b22a113ec44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b37411e3d0f1bf1a4740a846c18b671b101a9d13d309d87d0821b22a113ec44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:01:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:01:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b37411e3d0f1bf1a4740a846c18b671b101a9d13d309d87d0821b22a113ec44"}
{"level":"info","ts":"2026-07-06T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b37411e3d0f1bf1a4740a846c18b671b101a9d13d309d87d0821b22a113ec44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b37411e3d0f1bf1a4740a846c18b671b101a9d13d309d87d0821b22a113ec44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:01:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:01:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4b37411e3d0f1bf1a4740a846c18b671b101a9d13d309d87d0821b22a113ec44","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4b37411e3d0f1bf1a4740a846c18b671b101a9d13d309d87d0821b22a113ec44\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b37411e3d0f1bf1a4740a846c18b671b101a9d13d309d87d0821b22a113ec44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b37411e3d0f1bf1a4740a846c18b671b101a9d13d309d87d0821b22a113ec44","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b37411e3d0f1bf1a4740a846c18b671b101a9d13d309d87d0821b22a113ec44"}
{"level":"info","ts":"2026-07-06T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b37411e3d0f1bf1a4740a846c18b671b101a9d13d309d87d0821b22a113ec44"}
{"level":"debug","ts":"2026-07-06T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8b22a29055af34cbe176a60c38f365542ea9b0d5a3629d0c9d8674ed3229b7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:01:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:01:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8b22a29055af34cbe176a60c38f365542ea9b0d5a3629d0c9d8674ed3229b7c"}
{"level":"info","ts":"2026-07-06T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8b22a29055af34cbe176a60c38f365542ea9b0d5a3629d0c9d8674ed3229b7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b37411e3d0f1bf1a4740a846c18b671b101a9d13d309d87d0821b22a113ec44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:01:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:01:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b37411e3d0f1bf1a4740a846c18b671b101a9d13d309d87d0821b22a113ec44"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b37411e3d0f1bf1a4740a846c18b671b101a9d13d309d87d0821b22a113ec44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8b22a29055af34cbe176a60c38f365542ea9b0d5a3629d0c9d8674ed3229b7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b37411e3d0f1bf1a4740a846c18b671b101a9d13d309d87d0821b22a113ec44","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8b22a29055af34cbe176a60c38f365542ea9b0d5a3629d0c9d8674ed3229b7c"}
{"level":"debug","ts":"2026-07-06T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8b22a29055af34cbe176a60c38f365542ea9b0d5a3629d0c9d8674ed3229b7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:01:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:01:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d8b22a29055af34cbe176a60c38f365542ea9b0d5a3629d0c9d8674ed3229b7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8b22a29055af34cbe176a60c38f365542ea9b0d5a3629d0c9d8674ed3229b7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8b22a29055af34cbe176a60c38f365542ea9b0d5a3629d0c9d8674ed3229b7c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b37411e3d0f1bf1a4740a846c18b671b101a9d13d309d87d0821b22a113ec44"}
{"level":"info","ts":"2026-07-06T20:01:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8b22a29055af34cbe176a60c38f365542ea9b0d5a3629d0c9d8674ed3229b7c"}
{"level":"debug","ts":"2026-07-06T20:01:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbeb5e94d6c6b8a0a548006ae3434238eccac96b538cc3db3264c746b6672e8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:01:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:01:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbeb5e94d6c6b8a0a548006ae3434238eccac96b538cc3db3264c746b6672e8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbeb5e94d6c6b8a0a548006ae3434238eccac96b538cc3db3264c746b6672e8c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbeb5e94d6c6b8a0a548006ae3434238eccac96b538cc3db3264c746b6672e8c"}
{"level":"debug","ts":"2026-07-06T20:01:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbeb5e94d6c6b8a0a548006ae3434238eccac96b538cc3db3264c746b6672e8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbeb5e94d6c6b8a0a548006ae3434238eccac96b538cc3db3264c746b6672e8c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbeb5e94d6c6b8a0a548006ae3434238eccac96b538cc3db3264c746b6672e8c"}
{"level":"debug","ts":"2026-07-06T20:01:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fbeb5e94d6c6b8a0a548006ae3434238eccac96b538cc3db3264c746b6672e8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:01:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:01:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fbeb5e94d6c6b8a0a548006ae3434238eccac96b538cc3db3264c746b6672e8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fbeb5e94d6c6b8a0a548006ae3434238eccac96b538cc3db3264c746b6672e8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fbeb5e94d6c6b8a0a548006ae3434238eccac96b538cc3db3264c746b6672e8c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fbeb5e94d6c6b8a0a548006ae3434238eccac96b538cc3db3264c746b6672e8c"}
{"level":"debug","ts":"2026-07-06T20:01:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40e3d5353e8d81831797688a39423707c6bf92a8999fa3557bb5c03dd7161fa0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:01:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:01:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40e3d5353e8d81831797688a39423707c6bf92a8999fa3557bb5c03dd7161fa0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40e3d5353e8d81831797688a39423707c6bf92a8999fa3557bb5c03dd7161fa0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40e3d5353e8d81831797688a39423707c6bf92a8999fa3557bb5c03dd7161fa0"}
{"level":"debug","ts":"2026-07-06T20:01:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40e3d5353e8d81831797688a39423707c6bf92a8999fa3557bb5c03dd7161fa0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40e3d5353e8d81831797688a39423707c6bf92a8999fa3557bb5c03dd7161fa0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40e3d5353e8d81831797688a39423707c6bf92a8999fa3557bb5c03dd7161fa0"}
{"level":"debug","ts":"2026-07-06T20:01:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40e3d5353e8d81831797688a39423707c6bf92a8999fa3557bb5c03dd7161fa0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:01:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:01:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40e3d5353e8d81831797688a39423707c6bf92a8999fa3557bb5c03dd7161fa0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40e3d5353e8d81831797688a39423707c6bf92a8999fa3557bb5c03dd7161fa0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cd6beaa00ca8e3c92fa5afeb88794ec62c64468462f6d7d45968e03de2b57b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:01:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:01:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3cd6beaa00ca8e3c92fa5afeb88794ec62c64468462f6d7d45968e03de2b57b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40e3d5353e8d81831797688a39423707c6bf92a8999fa3557bb5c03dd7161fa0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3cd6beaa00ca8e3c92fa5afeb88794ec62c64468462f6d7d45968e03de2b57b4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cd6beaa00ca8e3c92fa5afeb88794ec62c64468462f6d7d45968e03de2b57b4"}
{"level":"debug","ts":"2026-07-06T20:01:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cd6beaa00ca8e3c92fa5afeb88794ec62c64468462f6d7d45968e03de2b57b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:01:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:01:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3cd6beaa00ca8e3c92fa5afeb88794ec62c64468462f6d7d45968e03de2b57b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3cd6beaa00ca8e3c92fa5afeb88794ec62c64468462f6d7d45968e03de2b57b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3cd6beaa00ca8e3c92fa5afeb88794ec62c64468462f6d7d45968e03de2b57b4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40e3d5353e8d81831797688a39423707c6bf92a8999fa3557bb5c03dd7161fa0"}
{"level":"info","ts":"2026-07-06T20:01:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cd6beaa00ca8e3c92fa5afeb88794ec62c64468462f6d7d45968e03de2b57b4"}
{"level":"debug","ts":"2026-07-06T20:01:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b4a5cb6f51602f97e73c34cd2b0ca6ef6baf8bce86c049065ff092e0392d435","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:01:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:01:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b4a5cb6f51602f97e73c34cd2b0ca6ef6baf8bce86c049065ff092e0392d435","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b4a5cb6f51602f97e73c34cd2b0ca6ef6baf8bce86c049065ff092e0392d435"}
{"level":"debug","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b4a5cb6f51602f97e73c34cd2b0ca6ef6baf8bce86c049065ff092e0392d435","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b4a5cb6f51602f97e73c34cd2b0ca6ef6baf8bce86c049065ff092e0392d435","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b4a5cb6f51602f97e73c34cd2b0ca6ef6baf8bce86c049065ff092e0392d435"}
{"level":"debug","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b4a5cb6f51602f97e73c34cd2b0ca6ef6baf8bce86c049065ff092e0392d435","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:01:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:01:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b4a5cb6f51602f97e73c34cd2b0ca6ef6baf8bce86c049065ff092e0392d435"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b4a5cb6f51602f97e73c34cd2b0ca6ef6baf8bce86c049065ff092e0392d435","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b4a5cb6f51602f97e73c34cd2b0ca6ef6baf8bce86c049065ff092e0392d435","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:01:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:01:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b4a5cb6f51602f97e73c34cd2b0ca6ef6baf8bce86c049065ff092e0392d435","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b4a5cb6f51602f97e73c34cd2b0ca6ef6baf8bce86c049065ff092e0392d435"}
{"level":"debug","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b4a5cb6f51602f97e73c34cd2b0ca6ef6baf8bce86c049065ff092e0392d435","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b4a5cb6f51602f97e73c34cd2b0ca6ef6baf8bce86c049065ff092e0392d435","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c67542aaf78cf16d867757395fe70e09c02abefcd2fec8ac13de139713714f37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:01:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:01:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b4a5cb6f51602f97e73c34cd2b0ca6ef6baf8bce86c049065ff092e0392d435"}
{"level":"info","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c67542aaf78cf16d867757395fe70e09c02abefcd2fec8ac13de139713714f37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b4a5cb6f51602f97e73c34cd2b0ca6ef6baf8bce86c049065ff092e0392d435","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:01:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:01:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b4a5cb6f51602f97e73c34cd2b0ca6ef6baf8bce86c049065ff092e0392d435"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c67542aaf78cf16d867757395fe70e09c02abefcd2fec8ac13de139713714f37"}
{"level":"info","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b4a5cb6f51602f97e73c34cd2b0ca6ef6baf8bce86c049065ff092e0392d435","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c67542aaf78cf16d867757395fe70e09c02abefcd2fec8ac13de139713714f37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:01:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:01:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c67542aaf78cf16d867757395fe70e09c02abefcd2fec8ac13de139713714f37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b4a5cb6f51602f97e73c34cd2b0ca6ef6baf8bce86c049065ff092e0392d435","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c67542aaf78cf16d867757395fe70e09c02abefcd2fec8ac13de139713714f37","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c67542aaf78cf16d867757395fe70e09c02abefcd2fec8ac13de139713714f37"}
{"level":"debug","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c67542aaf78cf16d867757395fe70e09c02abefcd2fec8ac13de139713714f37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:01:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:01:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c67542aaf78cf16d867757395fe70e09c02abefcd2fec8ac13de139713714f37"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b4a5cb6f51602f97e73c34cd2b0ca6ef6baf8bce86c049065ff092e0392d435"}
{"level":"info","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c67542aaf78cf16d867757395fe70e09c02abefcd2fec8ac13de139713714f37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c67542aaf78cf16d867757395fe70e09c02abefcd2fec8ac13de139713714f37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:01:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:01:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c67542aaf78cf16d867757395fe70e09c02abefcd2fec8ac13de139713714f37"}
{"level":"info","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c67542aaf78cf16d867757395fe70e09c02abefcd2fec8ac13de139713714f37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c1f13340f47de62b5e4510e754f4df0289605c777bae191a0e12d0c2c744c9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:01:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:01:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c1f13340f47de62b5e4510e754f4df0289605c777bae191a0e12d0c2c744c9a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c67542aaf78cf16d867757395fe70e09c02abefcd2fec8ac13de139713714f37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:01:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:01:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c67542aaf78cf16d867757395fe70e09c02abefcd2fec8ac13de139713714f37"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c1f13340f47de62b5e4510e754f4df0289605c777bae191a0e12d0c2c744c9a"}
{"level":"info","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c67542aaf78cf16d867757395fe70e09c02abefcd2fec8ac13de139713714f37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a286657a61605a6c4db687cecdec77fb08d52d653428a8ecc52e94838d856af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:01:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:01:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c67542aaf78cf16d867757395fe70e09c02abefcd2fec8ac13de139713714f37"}
{"level":"info","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a286657a61605a6c4db687cecdec77fb08d52d653428a8ecc52e94838d856af"}
{"level":"info","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a286657a61605a6c4db687cecdec77fb08d52d653428a8ecc52e94838d856af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c1f13340f47de62b5e4510e754f4df0289605c777bae191a0e12d0c2c744c9a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c67542aaf78cf16d867757395fe70e09c02abefcd2fec8ac13de139713714f37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a286657a61605a6c4db687cecdec77fb08d52d653428a8ecc52e94838d856af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:01:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:01:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a286657a61605a6c4db687cecdec77fb08d52d653428a8ecc52e94838d856af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c1f13340f47de62b5e4510e754f4df0289605c777bae191a0e12d0c2c744c9a"}
{"level":"info","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c67542aaf78cf16d867757395fe70e09c02abefcd2fec8ac13de139713714f37"}
{"level":"info","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a286657a61605a6c4db687cecdec77fb08d52d653428a8ecc52e94838d856af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c1f13340f47de62b5e4510e754f4df0289605c777bae191a0e12d0c2c744c9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:01:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:01:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c1f13340f47de62b5e4510e754f4df0289605c777bae191a0e12d0c2c744c9a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c1f13340f47de62b5e4510e754f4df0289605c777bae191a0e12d0c2c744c9a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad83318f1b5e556e121c965dd813b7161bfa9f6500e444f33e86d8ad2fb58a21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:01:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:01:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a286657a61605a6c4db687cecdec77fb08d52d653428a8ecc52e94838d856af"}
{"level":"info","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad83318f1b5e556e121c965dd813b7161bfa9f6500e444f33e86d8ad2fb58a21"}
{"level":"info","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad83318f1b5e556e121c965dd813b7161bfa9f6500e444f33e86d8ad2fb58a21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a286657a61605a6c4db687cecdec77fb08d52d653428a8ecc52e94838d856af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f797bfd6a17a2d499681245c032b83029220a351281bb6a0fea3e6af8b2cc3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:01:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:01:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f797bfd6a17a2d499681245c032b83029220a351281bb6a0fea3e6af8b2cc3c"}
{"level":"info","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f797bfd6a17a2d499681245c032b83029220a351281bb6a0fea3e6af8b2cc3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c1f13340f47de62b5e4510e754f4df0289605c777bae191a0e12d0c2c744c9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:01:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:01:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c1f13340f47de62b5e4510e754f4df0289605c777bae191a0e12d0c2c744c9a"}
{"level":"info","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c1f13340f47de62b5e4510e754f4df0289605c777bae191a0e12d0c2c744c9a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad83318f1b5e556e121c965dd813b7161bfa9f6500e444f33e86d8ad2fb58a21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:01:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:01:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad83318f1b5e556e121c965dd813b7161bfa9f6500e444f33e86d8ad2fb58a21"}
{"level":"info","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad83318f1b5e556e121c965dd813b7161bfa9f6500e444f33e86d8ad2fb58a21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f797bfd6a17a2d499681245c032b83029220a351281bb6a0fea3e6af8b2cc3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d887f049f6f89e1e3c7dcd1bbf70d327f508a8df951d1a871039b5089ae17e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:01:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:01:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d887f049f6f89e1e3c7dcd1bbf70d327f508a8df951d1a871039b5089ae17e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c1f13340f47de62b5e4510e754f4df0289605c777bae191a0e12d0c2c744c9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:01:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:01:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c1f13340f47de62b5e4510e754f4df0289605c777bae191a0e12d0c2c744c9a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f797bfd6a17a2d499681245c032b83029220a351281bb6a0fea3e6af8b2cc3c"}
{"level":"info","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c1f13340f47de62b5e4510e754f4df0289605c777bae191a0e12d0c2c744c9a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad83318f1b5e556e121c965dd813b7161bfa9f6500e444f33e86d8ad2fb58a21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:01:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:01:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad83318f1b5e556e121c965dd813b7161bfa9f6500e444f33e86d8ad2fb58a21"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d887f049f6f89e1e3c7dcd1bbf70d327f508a8df951d1a871039b5089ae17e4"}
{"level":"info","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad83318f1b5e556e121c965dd813b7161bfa9f6500e444f33e86d8ad2fb58a21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f797bfd6a17a2d499681245c032b83029220a351281bb6a0fea3e6af8b2cc3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:01:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:01:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f797bfd6a17a2d499681245c032b83029220a351281bb6a0fea3e6af8b2cc3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c1f13340f47de62b5e4510e754f4df0289605c777bae191a0e12d0c2c744c9a"}
{"level":"info","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f797bfd6a17a2d499681245c032b83029220a351281bb6a0fea3e6af8b2cc3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d887f049f6f89e1e3c7dcd1bbf70d327f508a8df951d1a871039b5089ae17e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:01:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:01:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d887f049f6f89e1e3c7dcd1bbf70d327f508a8df951d1a871039b5089ae17e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d887f049f6f89e1e3c7dcd1bbf70d327f508a8df951d1a871039b5089ae17e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c1f13340f47de62b5e4510e754f4df0289605c777bae191a0e12d0c2c744c9a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad83318f1b5e556e121c965dd813b7161bfa9f6500e444f33e86d8ad2fb58a21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:01:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:01:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad83318f1b5e556e121c965dd813b7161bfa9f6500e444f33e86d8ad2fb58a21"}
{"level":"info","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad83318f1b5e556e121c965dd813b7161bfa9f6500e444f33e86d8ad2fb58a21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f797bfd6a17a2d499681245c032b83029220a351281bb6a0fea3e6af8b2cc3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:01:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:01:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f797bfd6a17a2d499681245c032b83029220a351281bb6a0fea3e6af8b2cc3c"}
{"level":"info","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f797bfd6a17a2d499681245c032b83029220a351281bb6a0fea3e6af8b2cc3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d887f049f6f89e1e3c7dcd1bbf70d327f508a8df951d1a871039b5089ae17e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:01:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:01:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d887f049f6f89e1e3c7dcd1bbf70d327f508a8df951d1a871039b5089ae17e4"}
{"level":"info","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d887f049f6f89e1e3c7dcd1bbf70d327f508a8df951d1a871039b5089ae17e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad83318f1b5e556e121c965dd813b7161bfa9f6500e444f33e86d8ad2fb58a21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f797bfd6a17a2d499681245c032b83029220a351281bb6a0fea3e6af8b2cc3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:01:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:01:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f797bfd6a17a2d499681245c032b83029220a351281bb6a0fea3e6af8b2cc3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad83318f1b5e556e121c965dd813b7161bfa9f6500e444f33e86d8ad2fb58a21"}
{"level":"info","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f797bfd6a17a2d499681245c032b83029220a351281bb6a0fea3e6af8b2cc3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d887f049f6f89e1e3c7dcd1bbf70d327f508a8df951d1a871039b5089ae17e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:01:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:01:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d887f049f6f89e1e3c7dcd1bbf70d327f508a8df951d1a871039b5089ae17e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f797bfd6a17a2d499681245c032b83029220a351281bb6a0fea3e6af8b2cc3c"}
{"level":"info","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d887f049f6f89e1e3c7dcd1bbf70d327f508a8df951d1a871039b5089ae17e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad83318f1b5e556e121c965dd813b7161bfa9f6500e444f33e86d8ad2fb58a21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:01:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:01:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad83318f1b5e556e121c965dd813b7161bfa9f6500e444f33e86d8ad2fb58a21"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad83318f1b5e556e121c965dd813b7161bfa9f6500e444f33e86d8ad2fb58a21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f797bfd6a17a2d499681245c032b83029220a351281bb6a0fea3e6af8b2cc3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d887f049f6f89e1e3c7dcd1bbf70d327f508a8df951d1a871039b5089ae17e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:01:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:01:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d887f049f6f89e1e3c7dcd1bbf70d327f508a8df951d1a871039b5089ae17e4"}
{"level":"info","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d887f049f6f89e1e3c7dcd1bbf70d327f508a8df951d1a871039b5089ae17e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad83318f1b5e556e121c965dd813b7161bfa9f6500e444f33e86d8ad2fb58a21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d887f049f6f89e1e3c7dcd1bbf70d327f508a8df951d1a871039b5089ae17e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:01:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:01:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d887f049f6f89e1e3c7dcd1bbf70d327f508a8df951d1a871039b5089ae17e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f797bfd6a17a2d499681245c032b83029220a351281bb6a0fea3e6af8b2cc3c"}
{"level":"info","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d887f049f6f89e1e3c7dcd1bbf70d327f508a8df951d1a871039b5089ae17e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d887f049f6f89e1e3c7dcd1bbf70d327f508a8df951d1a871039b5089ae17e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:01:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:01:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d887f049f6f89e1e3c7dcd1bbf70d327f508a8df951d1a871039b5089ae17e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7d887f049f6f89e1e3c7dcd1bbf70d327f508a8df951d1a871039b5089ae17e4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7d887f049f6f89e1e3c7dcd1bbf70d327f508a8df951d1a871039b5089ae17e4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d887f049f6f89e1e3c7dcd1bbf70d327f508a8df951d1a871039b5089ae17e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d887f049f6f89e1e3c7dcd1bbf70d327f508a8df951d1a871039b5089ae17e4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad83318f1b5e556e121c965dd813b7161bfa9f6500e444f33e86d8ad2fb58a21"}
{"level":"info","ts":"2026-07-06T20:01:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d887f049f6f89e1e3c7dcd1bbf70d327f508a8df951d1a871039b5089ae17e4"}
{"level":"info","ts":"2026-07-06T20:01:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d263e800-b385-432e-9c88-1f8d34075b96","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:46534","PortSpecifier":{"PortValue":46534}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d263e800-b385-432e-9c88-1f8d34075b96","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e1f716.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:01:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d263e800-b385-432e-9c88-1f8d34075b96","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:46534","PortSpecifier":{"PortValue":46534}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368119,"nanos":767078470},"http":{"id":"d263e800-b385-432e-9c88-1f8d34075b96","method":"POST","headers":{":authority":"e2e-shared-a-e1f716.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:01:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d263e800-b385-432e-9c88-1f8d34075b96","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:01:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d263e800-b385-432e-9c88-1f8d34075b96","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a5d356b1-3180-412a-8dea-76750349e251","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=57fd0aa1-6d66-4aee-9de0-7b7661d60c4b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60474a7ad191"]}}
{"level":"debug","ts":"2026-07-06T20:01:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d263e800-b385-432e-9c88-1f8d34075b96","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60474a7ad191"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=57fd0aa1-6d66-4aee-9de0-7b7661d60c4b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a5d356b1-3180-412a-8dea-76750349e251","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"aa8785305a08abe890ff7dda026ae9e6cebf659c57e7cbbd766e12c5e21bc37e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e1f716.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:01:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d263e800-b385-432e-9c88-1f8d34075b96","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:01:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d263e800-b385-432e-9c88-1f8d34075b96","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:01:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d263e800-b385-432e-9c88-1f8d34075b96","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e1f716/auth-test-model-e1f716\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:01:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d263e800-b385-432e-9c88-1f8d34075b96","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:01:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d263e800-b385-432e-9c88-1f8d34075b96","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:01:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d263e800-b385-432e-9c88-1f8d34075b96","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T20:01:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d263e800-b385-432e-9c88-1f8d34075b96","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:01:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d263e800-b385-432e-9c88-1f8d34075b96","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:01:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6219180e-467d-4078-88fd-3f25d80fe012","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:57600","PortSpecifier":{"PortValue":57600}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6219180e-467d-4078-88fd-3f25d80fe012","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-035267.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:01:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6219180e-467d-4078-88fd-3f25d80fe012","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:57600","PortSpecifier":{"PortValue":57600}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368119,"nanos":829810685},"http":{"id":"6219180e-467d-4078-88fd-3f25d80fe012","method":"POST","headers":{":authority":"e2e-shared-b-035267.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:01:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6219180e-467d-4078-88fd-3f25d80fe012","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:01:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6219180e-467d-4078-88fd-3f25d80fe012","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a5d356b1-3180-412a-8dea-76750349e251","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=57fd0aa1-6d66-4aee-9de0-7b7661d60c4b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60474a7ad191"]}}
{"level":"debug","ts":"2026-07-06T20:01:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6219180e-467d-4078-88fd-3f25d80fe012","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60474a7ad191"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=57fd0aa1-6d66-4aee-9de0-7b7661d60c4b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a5d356b1-3180-412a-8dea-76750349e251","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"40e3d5353e8d81831797688a39423707c6bf92a8999fa3557bb5c03dd7161fa0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-035267.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:01:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6219180e-467d-4078-88fd-3f25d80fe012","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:01:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6219180e-467d-4078-88fd-3f25d80fe012","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:01:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6219180e-467d-4078-88fd-3f25d80fe012","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-035267/auth-test-model-035267\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:01:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6219180e-467d-4078-88fd-3f25d80fe012","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:01:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6219180e-467d-4078-88fd-3f25d80fe012","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:01:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6219180e-467d-4078-88fd-3f25d80fe012","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:01:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6219180e-467d-4078-88fd-3f25d80fe012","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:01:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6219180e-467d-4078-88fd-3f25d80fe012","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:01:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3ab37ee5-08e2-40e7-87db-75e06db4182a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:46548","PortSpecifier":{"PortValue":46548}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3ab37ee5-08e2-40e7-87db-75e06db4182a","method":"GET","path":"/maas-api/v1/api-keys/fa6cb70e-24ac-48ea-99a1-25c432e3b3fc","host":"e2e-shared-a-e1f716.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:01:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3ab37ee5-08e2-40e7-87db-75e06db4182a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:46548","PortSpecifier":{"PortValue":46548}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368119,"nanos":922499884},"http":{"id":"3ab37ee5-08e2-40e7-87db-75e06db4182a","method":"GET","headers":{":authority":"e2e-shared-a-e1f716.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/fa6cb70e-24ac-48ea-99a1-25c432e3b3fc",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:01:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3ab37ee5-08e2-40e7-87db-75e06db4182a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:01:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3ab37ee5-08e2-40e7-87db-75e06db4182a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a5d356b1-3180-412a-8dea-76750349e251","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=57fd0aa1-6d66-4aee-9de0-7b7661d60c4b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60474a7ad191"]}}
{"level":"debug","ts":"2026-07-06T20:01:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3ab37ee5-08e2-40e7-87db-75e06db4182a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60474a7ad191"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=57fd0aa1-6d66-4aee-9de0-7b7661d60c4b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a5d356b1-3180-412a-8dea-76750349e251","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"aa8785305a08abe890ff7dda026ae9e6cebf659c57e7cbbd766e12c5e21bc37e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e1f716.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/fa6cb70e-24ac-48ea-99a1-25c432e3b3fc",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:01:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ab37ee5-08e2-40e7-87db-75e06db4182a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:01:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ab37ee5-08e2-40e7-87db-75e06db4182a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:01:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ab37ee5-08e2-40e7-87db-75e06db4182a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e1f716/auth-test-model-e1f716\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:01:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3ab37ee5-08e2-40e7-87db-75e06db4182a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:01:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ab37ee5-08e2-40e7-87db-75e06db4182a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:01:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ab37ee5-08e2-40e7-87db-75e06db4182a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:01:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3ab37ee5-08e2-40e7-87db-75e06db4182a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:01:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3ab37ee5-08e2-40e7-87db-75e06db4182a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:01:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1d3800a0-2eb3-41d1-9be6-03b895a80f35","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:57608","PortSpecifier":{"PortValue":57608}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1d3800a0-2eb3-41d1-9be6-03b895a80f35","method":"GET","path":"/maas-api/v1/api-keys/2cf24660-d75d-4985-a062-be5d67cfbaec","host":"e2e-shared-b-035267.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:01:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1d3800a0-2eb3-41d1-9be6-03b895a80f35","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:57608","PortSpecifier":{"PortValue":57608}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368119,"nanos":958409413},"http":{"id":"1d3800a0-2eb3-41d1-9be6-03b895a80f35","method":"GET","headers":{":authority":"e2e-shared-b-035267.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/2cf24660-d75d-4985-a062-be5d67cfbaec",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:01:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1d3800a0-2eb3-41d1-9be6-03b895a80f35","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:01:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1d3800a0-2eb3-41d1-9be6-03b895a80f35","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a5d356b1-3180-412a-8dea-76750349e251","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=57fd0aa1-6d66-4aee-9de0-7b7661d60c4b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60474a7ad191"]}}
{"level":"debug","ts":"2026-07-06T20:01:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1d3800a0-2eb3-41d1-9be6-03b895a80f35","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60474a7ad191"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=57fd0aa1-6d66-4aee-9de0-7b7661d60c4b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a5d356b1-3180-412a-8dea-76750349e251","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"40e3d5353e8d81831797688a39423707c6bf92a8999fa3557bb5c03dd7161fa0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-035267.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/2cf24660-d75d-4985-a062-be5d67cfbaec",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:01:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1d3800a0-2eb3-41d1-9be6-03b895a80f35","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:01:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1d3800a0-2eb3-41d1-9be6-03b895a80f35","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:01:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1d3800a0-2eb3-41d1-9be6-03b895a80f35","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-035267/auth-test-model-035267\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:01:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1d3800a0-2eb3-41d1-9be6-03b895a80f35","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:01:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1d3800a0-2eb3-41d1-9be6-03b895a80f35","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:01:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1d3800a0-2eb3-41d1-9be6-03b895a80f35","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:01:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1d3800a0-2eb3-41d1-9be6-03b895a80f35","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:01:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1d3800a0-2eb3-41d1-9be6-03b895a80f35","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:02:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"831137b6-9989-4bc2-8103-28baa3806cbf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:42714","PortSpecifier":{"PortValue":42714}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"831137b6-9989-4bc2-8103-28baa3806cbf","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e1f716.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:02:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"831137b6-9989-4bc2-8103-28baa3806cbf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:42714","PortSpecifier":{"PortValue":42714}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368135,"nanos":861859187},"http":{"id":"831137b6-9989-4bc2-8103-28baa3806cbf","method":"POST","headers":{":authority":"e2e-shared-a-e1f716.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:02:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"831137b6-9989-4bc2-8103-28baa3806cbf","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:02:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"831137b6-9989-4bc2-8103-28baa3806cbf","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a5d356b1-3180-412a-8dea-76750349e251","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=57fd0aa1-6d66-4aee-9de0-7b7661d60c4b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60474a7ad191"]}}
{"level":"debug","ts":"2026-07-06T20:02:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"831137b6-9989-4bc2-8103-28baa3806cbf","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60474a7ad191"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=57fd0aa1-6d66-4aee-9de0-7b7661d60c4b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a5d356b1-3180-412a-8dea-76750349e251","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"aa8785305a08abe890ff7dda026ae9e6cebf659c57e7cbbd766e12c5e21bc37e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e1f716.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:02:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"831137b6-9989-4bc2-8103-28baa3806cbf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:02:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"831137b6-9989-4bc2-8103-28baa3806cbf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:02:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"831137b6-9989-4bc2-8103-28baa3806cbf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e1f716/auth-test-model-e1f716\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:02:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"831137b6-9989-4bc2-8103-28baa3806cbf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:02:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"831137b6-9989-4bc2-8103-28baa3806cbf","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:02:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"831137b6-9989-4bc2-8103-28baa3806cbf","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:02:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"831137b6-9989-4bc2-8103-28baa3806cbf","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:02:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"831137b6-9989-4bc2-8103-28baa3806cbf","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:02:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c4aeb978-771e-48d1-b2c0-9921ab463180","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43532","PortSpecifier":{"PortValue":43532}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c4aeb978-771e-48d1-b2c0-9921ab463180","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-035267.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:02:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c4aeb978-771e-48d1-b2c0-9921ab463180","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:43532","PortSpecifier":{"PortValue":43532}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368135,"nanos":901613417},"http":{"id":"c4aeb978-771e-48d1-b2c0-9921ab463180","method":"POST","headers":{":authority":"e2e-shared-b-035267.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:02:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c4aeb978-771e-48d1-b2c0-9921ab463180","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:02:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c4aeb978-771e-48d1-b2c0-9921ab463180","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a5d356b1-3180-412a-8dea-76750349e251","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=57fd0aa1-6d66-4aee-9de0-7b7661d60c4b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60474a7ad191"]}}
{"level":"debug","ts":"2026-07-06T20:02:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c4aeb978-771e-48d1-b2c0-9921ab463180","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60474a7ad191"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=57fd0aa1-6d66-4aee-9de0-7b7661d60c4b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a5d356b1-3180-412a-8dea-76750349e251","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"40e3d5353e8d81831797688a39423707c6bf92a8999fa3557bb5c03dd7161fa0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-035267.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:02:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4aeb978-771e-48d1-b2c0-9921ab463180","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:02:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4aeb978-771e-48d1-b2c0-9921ab463180","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:02:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4aeb978-771e-48d1-b2c0-9921ab463180","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-035267/auth-test-model-035267\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:02:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c4aeb978-771e-48d1-b2c0-9921ab463180","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:02:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c4aeb978-771e-48d1-b2c0-9921ab463180","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:02:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c4aeb978-771e-48d1-b2c0-9921ab463180","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:02:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c4aeb978-771e-48d1-b2c0-9921ab463180","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:02:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c4aeb978-771e-48d1-b2c0-9921ab463180","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:02:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7ea12547-bcec-94a7-8eee-3d2f5cb69c7c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:42724","PortSpecifier":{"PortValue":42724}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7ea12547-bcec-94a7-8eee-3d2f5cb69c7c","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-e1f716.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:02:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7ea12547-bcec-94a7-8eee-3d2f5cb69c7c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:42724","PortSpecifier":{"PortValue":42724}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368135,"nanos":938064663},"http":{"id":"7ea12547-bcec-94a7-8eee-3d2f5cb69c7c","method":"GET","headers":{":authority":"e2e-shared-a-e1f716.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:02:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7ea12547-bcec-94a7-8eee-3d2f5cb69c7c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-q1y68cybn7HD0irc_MEjEK0B1sJpatZ7yBWDc9pnS2pDk8YnJX5ZOhMYWWD4"}
{"level":"debug","ts":"2026-07-06T20:02:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7ea12547-bcec-94a7-8eee-3d2f5cb69c7c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e1f716.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-q1y68cybn7HD0irc_MEjEK0B1sJpatZ7yBWDc9pnS2pDk8YnJX5ZOhMYWWD4\"}"}
{"level":"debug","ts":"2026-07-06T20:02:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7ea12547-bcec-94a7-8eee-3d2f5cb69c7c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e1f716.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"214871a8-9792-4dd8-8704-59e1aecf6ad8","keyName":"e2e-auth-iso-a-194b8a","subscription":"e2e-auth-iso-6690e4","tenant":"e2e-shared-a-e1f716","userId":"214871a8-9792-4dd8-8704-59e1aecf6ad8","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:02:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7ea12547-bcec-94a7-8eee-3d2f5cb69c7c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:02:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ea12547-bcec-94a7-8eee-3d2f5cb69c7c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:02:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ea12547-bcec-94a7-8eee-3d2f5cb69c7c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:02:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ea12547-bcec-94a7-8eee-3d2f5cb69c7c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e1f716/auth-test-model-e1f716\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:02:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ea12547-bcec-94a7-8eee-3d2f5cb69c7c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:02:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ea12547-bcec-94a7-8eee-3d2f5cb69c7c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-6690e4"}
{"level":"debug","ts":"2026-07-06T20:02:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ea12547-bcec-94a7-8eee-3d2f5cb69c7c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:02:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7ea12547-bcec-94a7-8eee-3d2f5cb69c7c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-06T20:02:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7ea12547-bcec-94a7-8eee-3d2f5cb69c7c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:02:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7ea12547-bcec-94a7-8eee-3d2f5cb69c7c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:02:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2780cc85-fb88-4d62-bf42-67d0a472ffc8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:33652","PortSpecifier":{"PortValue":33652}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2780cc85-fb88-4d62-bf42-67d0a472ffc8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e1f716.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:02:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2780cc85-fb88-4d62-bf42-67d0a472ffc8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:33652","PortSpecifier":{"PortValue":33652}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368153,"nanos":74446137},"http":{"id":"2780cc85-fb88-4d62-bf42-67d0a472ffc8","method":"POST","headers":{":authority":"e2e-shared-a-e1f716.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:02:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2780cc85-fb88-4d62-bf42-67d0a472ffc8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:02:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2780cc85-fb88-4d62-bf42-67d0a472ffc8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a5d356b1-3180-412a-8dea-76750349e251","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=57fd0aa1-6d66-4aee-9de0-7b7661d60c4b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60474a7ad191"]}}
{"level":"debug","ts":"2026-07-06T20:02:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2780cc85-fb88-4d62-bf42-67d0a472ffc8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60474a7ad191"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=57fd0aa1-6d66-4aee-9de0-7b7661d60c4b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a5d356b1-3180-412a-8dea-76750349e251","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"aa8785305a08abe890ff7dda026ae9e6cebf659c57e7cbbd766e12c5e21bc37e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e1f716.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:02:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2780cc85-fb88-4d62-bf42-67d0a472ffc8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:02:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2780cc85-fb88-4d62-bf42-67d0a472ffc8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:02:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2780cc85-fb88-4d62-bf42-67d0a472ffc8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e1f716/auth-test-model-e1f716\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:02:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2780cc85-fb88-4d62-bf42-67d0a472ffc8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:02:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2780cc85-fb88-4d62-bf42-67d0a472ffc8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:02:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2780cc85-fb88-4d62-bf42-67d0a472ffc8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T20:02:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2780cc85-fb88-4d62-bf42-67d0a472ffc8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:02:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2780cc85-fb88-4d62-bf42-67d0a472ffc8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:02:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6d812c57-cfb2-4676-a220-afbd48dd4d12","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:39588","PortSpecifier":{"PortValue":39588}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6d812c57-cfb2-4676-a220-afbd48dd4d12","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-035267.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:02:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6d812c57-cfb2-4676-a220-afbd48dd4d12","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:39588","PortSpecifier":{"PortValue":39588}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368153,"nanos":113093178},"http":{"id":"6d812c57-cfb2-4676-a220-afbd48dd4d12","method":"POST","headers":{":authority":"e2e-shared-b-035267.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:02:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6d812c57-cfb2-4676-a220-afbd48dd4d12","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:02:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6d812c57-cfb2-4676-a220-afbd48dd4d12","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a5d356b1-3180-412a-8dea-76750349e251","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=57fd0aa1-6d66-4aee-9de0-7b7661d60c4b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60474a7ad191"]}}
{"level":"debug","ts":"2026-07-06T20:02:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6d812c57-cfb2-4676-a220-afbd48dd4d12","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60474a7ad191"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=57fd0aa1-6d66-4aee-9de0-7b7661d60c4b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a5d356b1-3180-412a-8dea-76750349e251","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"40e3d5353e8d81831797688a39423707c6bf92a8999fa3557bb5c03dd7161fa0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-035267.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:02:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d812c57-cfb2-4676-a220-afbd48dd4d12","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:02:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d812c57-cfb2-4676-a220-afbd48dd4d12","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:02:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d812c57-cfb2-4676-a220-afbd48dd4d12","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-035267/auth-test-model-035267\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:02:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6d812c57-cfb2-4676-a220-afbd48dd4d12","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:02:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6d812c57-cfb2-4676-a220-afbd48dd4d12","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:02:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6d812c57-cfb2-4676-a220-afbd48dd4d12","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:02:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6d812c57-cfb2-4676-a220-afbd48dd4d12","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:02:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6d812c57-cfb2-4676-a220-afbd48dd4d12","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:02:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7ae99eb8-d995-4de9-bcdc-01f970475afa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:39600","PortSpecifier":{"PortValue":39600}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7ae99eb8-d995-4de9-bcdc-01f970475afa","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-035267.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:02:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7ae99eb8-d995-4de9-bcdc-01f970475afa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:39600","PortSpecifier":{"PortValue":39600}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368153,"nanos":179730476},"http":{"id":"7ae99eb8-d995-4de9-bcdc-01f970475afa","method":"GET","headers":{":authority":"e2e-shared-b-035267.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:02:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7ae99eb8-d995-4de9-bcdc-01f970475afa","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-14wBfpJImsClsoX4G_fiqHHbcD1dd270ITOIBAXSAWDYVkNwkEsBeL0PZUMCP"}
{"level":"debug","ts":"2026-07-06T20:02:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7ae99eb8-d995-4de9-bcdc-01f970475afa","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-035267.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-14wBfpJImsClsoX4G_fiqHHbcD1dd270ITOIBAXSAWDYVkNwkEsBeL0PZUMCP\"}"}
{"level":"debug","ts":"2026-07-06T20:02:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7ae99eb8-d995-4de9-bcdc-01f970475afa","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-035267.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-06T20:02:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7ae99eb8-d995-4de9-bcdc-01f970475afa","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"40e3d5353e8d81831797688a39423707c6bf92a8999fa3557bb5c03dd7161fa0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-035267.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:02:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ae99eb8-d995-4de9-bcdc-01f970475afa","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:02:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"7ae99eb8-d995-4de9-bcdc-01f970475afa","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-06T20:02:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7ae99eb8-d995-4de9-bcdc-01f970475afa","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-06T20:02:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7ae99eb8-d995-4de9-bcdc-01f970475afa","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-06T20:02:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5abfc37f-f4d7-4fb9-aeae-f436a0ee16c6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:50282","PortSpecifier":{"PortValue":50282}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5abfc37f-f4d7-4fb9-aeae-f436a0ee16c6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e1f716.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:02:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5abfc37f-f4d7-4fb9-aeae-f436a0ee16c6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:50282","PortSpecifier":{"PortValue":50282}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368168,"nanos":175033567},"http":{"id":"5abfc37f-f4d7-4fb9-aeae-f436a0ee16c6","method":"POST","headers":{":authority":"e2e-shared-a-e1f716.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:02:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5abfc37f-f4d7-4fb9-aeae-f436a0ee16c6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:02:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5abfc37f-f4d7-4fb9-aeae-f436a0ee16c6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a5d356b1-3180-412a-8dea-76750349e251","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=57fd0aa1-6d66-4aee-9de0-7b7661d60c4b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60474a7ad191"]}}
{"level":"debug","ts":"2026-07-06T20:02:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5abfc37f-f4d7-4fb9-aeae-f436a0ee16c6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60474a7ad191"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=57fd0aa1-6d66-4aee-9de0-7b7661d60c4b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a5d356b1-3180-412a-8dea-76750349e251","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"aa8785305a08abe890ff7dda026ae9e6cebf659c57e7cbbd766e12c5e21bc37e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e1f716.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:02:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5abfc37f-f4d7-4fb9-aeae-f436a0ee16c6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:02:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5abfc37f-f4d7-4fb9-aeae-f436a0ee16c6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:02:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5abfc37f-f4d7-4fb9-aeae-f436a0ee16c6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e1f716/auth-test-model-e1f716\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:02:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5abfc37f-f4d7-4fb9-aeae-f436a0ee16c6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:02:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5abfc37f-f4d7-4fb9-aeae-f436a0ee16c6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:02:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5abfc37f-f4d7-4fb9-aeae-f436a0ee16c6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:02:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5abfc37f-f4d7-4fb9-aeae-f436a0ee16c6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:02:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5abfc37f-f4d7-4fb9-aeae-f436a0ee16c6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:02:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5bbafaae-04b9-4144-95e7-b41e3090fe7d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:50318","PortSpecifier":{"PortValue":50318}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5bbafaae-04b9-4144-95e7-b41e3090fe7d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-035267.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:02:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5bbafaae-04b9-4144-95e7-b41e3090fe7d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:50318","PortSpecifier":{"PortValue":50318}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368168,"nanos":212716107},"http":{"id":"5bbafaae-04b9-4144-95e7-b41e3090fe7d","method":"POST","headers":{":authority":"e2e-shared-b-035267.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:02:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5bbafaae-04b9-4144-95e7-b41e3090fe7d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:02:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5bbafaae-04b9-4144-95e7-b41e3090fe7d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a5d356b1-3180-412a-8dea-76750349e251","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=57fd0aa1-6d66-4aee-9de0-7b7661d60c4b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60474a7ad191"]}}
{"level":"debug","ts":"2026-07-06T20:02:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5bbafaae-04b9-4144-95e7-b41e3090fe7d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60474a7ad191"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=57fd0aa1-6d66-4aee-9de0-7b7661d60c4b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a5d356b1-3180-412a-8dea-76750349e251","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"40e3d5353e8d81831797688a39423707c6bf92a8999fa3557bb5c03dd7161fa0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-035267.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:02:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5bbafaae-04b9-4144-95e7-b41e3090fe7d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:02:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5bbafaae-04b9-4144-95e7-b41e3090fe7d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:02:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5bbafaae-04b9-4144-95e7-b41e3090fe7d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-035267/auth-test-model-035267\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:02:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5bbafaae-04b9-4144-95e7-b41e3090fe7d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:02:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5bbafaae-04b9-4144-95e7-b41e3090fe7d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:02:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5bbafaae-04b9-4144-95e7-b41e3090fe7d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:02:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5bbafaae-04b9-4144-95e7-b41e3090fe7d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:02:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5bbafaae-04b9-4144-95e7-b41e3090fe7d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:02:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ec7854e1-cd32-4991-a9b3-b8b7ce0f8553","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:50290","PortSpecifier":{"PortValue":50290}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ec7854e1-cd32-4991-a9b3-b8b7ce0f8553","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-e1f716.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:02:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ec7854e1-cd32-4991-a9b3-b8b7ce0f8553","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:50290","PortSpecifier":{"PortValue":50290}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368168,"nanos":251260974},"http":{"id":"ec7854e1-cd32-4991-a9b3-b8b7ce0f8553","method":"POST","headers":{":authority":"e2e-shared-a-e1f716.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:02:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ec7854e1-cd32-4991-a9b3-b8b7ce0f8553","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:02:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ec7854e1-cd32-4991-a9b3-b8b7ce0f8553","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a5d356b1-3180-412a-8dea-76750349e251","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=57fd0aa1-6d66-4aee-9de0-7b7661d60c4b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60474a7ad191"]}}
{"level":"debug","ts":"2026-07-06T20:02:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ec7854e1-cd32-4991-a9b3-b8b7ce0f8553","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60474a7ad191"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=57fd0aa1-6d66-4aee-9de0-7b7661d60c4b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a5d356b1-3180-412a-8dea-76750349e251","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"aa8785305a08abe890ff7dda026ae9e6cebf659c57e7cbbd766e12c5e21bc37e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e1f716.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:02:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec7854e1-cd32-4991-a9b3-b8b7ce0f8553","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:02:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec7854e1-cd32-4991-a9b3-b8b7ce0f8553","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:02:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec7854e1-cd32-4991-a9b3-b8b7ce0f8553","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e1f716/auth-test-model-e1f716\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:02:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ec7854e1-cd32-4991-a9b3-b8b7ce0f8553","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:02:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ec7854e1-cd32-4991-a9b3-b8b7ce0f8553","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:02:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ec7854e1-cd32-4991-a9b3-b8b7ce0f8553","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T20:02:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ec7854e1-cd32-4991-a9b3-b8b7ce0f8553","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:02:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ec7854e1-cd32-4991-a9b3-b8b7ce0f8553","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:02:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2d10a6d3-b3b0-41d6-a4f5-408ce263f77e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:50332","PortSpecifier":{"PortValue":50332}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2d10a6d3-b3b0-41d6-a4f5-408ce263f77e","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-035267.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:02:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2d10a6d3-b3b0-41d6-a4f5-408ce263f77e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:50332","PortSpecifier":{"PortValue":50332}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368168,"nanos":287069476},"http":{"id":"2d10a6d3-b3b0-41d6-a4f5-408ce263f77e","method":"POST","headers":{":authority":"e2e-shared-b-035267.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:02:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2d10a6d3-b3b0-41d6-a4f5-408ce263f77e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:02:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2d10a6d3-b3b0-41d6-a4f5-408ce263f77e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a5d356b1-3180-412a-8dea-76750349e251","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=57fd0aa1-6d66-4aee-9de0-7b7661d60c4b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60474a7ad191"]}}
{"level":"debug","ts":"2026-07-06T20:02:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2d10a6d3-b3b0-41d6-a4f5-408ce263f77e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60474a7ad191"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=57fd0aa1-6d66-4aee-9de0-7b7661d60c4b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a5d356b1-3180-412a-8dea-76750349e251","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"40e3d5353e8d81831797688a39423707c6bf92a8999fa3557bb5c03dd7161fa0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-035267.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:02:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d10a6d3-b3b0-41d6-a4f5-408ce263f77e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:02:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d10a6d3-b3b0-41d6-a4f5-408ce263f77e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:02:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d10a6d3-b3b0-41d6-a4f5-408ce263f77e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-035267/auth-test-model-035267\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:02:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2d10a6d3-b3b0-41d6-a4f5-408ce263f77e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:02:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2d10a6d3-b3b0-41d6-a4f5-408ce263f77e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:02:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2d10a6d3-b3b0-41d6-a4f5-408ce263f77e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:02:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2d10a6d3-b3b0-41d6-a4f5-408ce263f77e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:02:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2d10a6d3-b3b0-41d6-a4f5-408ce263f77e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:03:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"edb51211-1934-4727-838a-087cfa09cf25","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:35036","PortSpecifier":{"PortValue":35036}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"edb51211-1934-4727-838a-087cfa09cf25","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e1f716.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:03:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"edb51211-1934-4727-838a-087cfa09cf25","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:35036","PortSpecifier":{"PortValue":35036}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368185,"nanos":437024760},"http":{"id":"edb51211-1934-4727-838a-087cfa09cf25","method":"POST","headers":{":authority":"e2e-shared-a-e1f716.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:03:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"edb51211-1934-4727-838a-087cfa09cf25","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:03:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"edb51211-1934-4727-838a-087cfa09cf25","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a5d356b1-3180-412a-8dea-76750349e251","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=57fd0aa1-6d66-4aee-9de0-7b7661d60c4b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60474a7ad191"]}}
{"level":"debug","ts":"2026-07-06T20:03:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"edb51211-1934-4727-838a-087cfa09cf25","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60474a7ad191"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=57fd0aa1-6d66-4aee-9de0-7b7661d60c4b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a5d356b1-3180-412a-8dea-76750349e251","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"aa8785305a08abe890ff7dda026ae9e6cebf659c57e7cbbd766e12c5e21bc37e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e1f716.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:03:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"edb51211-1934-4727-838a-087cfa09cf25","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:03:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"edb51211-1934-4727-838a-087cfa09cf25","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:03:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"edb51211-1934-4727-838a-087cfa09cf25","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e1f716/auth-test-model-e1f716\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:03:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"edb51211-1934-4727-838a-087cfa09cf25","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:03:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"edb51211-1934-4727-838a-087cfa09cf25","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:03:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"edb51211-1934-4727-838a-087cfa09cf25","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:03:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"edb51211-1934-4727-838a-087cfa09cf25","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:03:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"edb51211-1934-4727-838a-087cfa09cf25","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:03:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4b747cc3-6ee9-41a3-ab3b-33cca535b721","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:60256","PortSpecifier":{"PortValue":60256}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4b747cc3-6ee9-41a3-ab3b-33cca535b721","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-035267.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:03:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4b747cc3-6ee9-41a3-ab3b-33cca535b721","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:60256","PortSpecifier":{"PortValue":60256}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368185,"nanos":472629785},"http":{"id":"4b747cc3-6ee9-41a3-ab3b-33cca535b721","method":"POST","headers":{":authority":"e2e-shared-b-035267.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:03:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4b747cc3-6ee9-41a3-ab3b-33cca535b721","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:03:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4b747cc3-6ee9-41a3-ab3b-33cca535b721","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a5d356b1-3180-412a-8dea-76750349e251","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=57fd0aa1-6d66-4aee-9de0-7b7661d60c4b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60474a7ad191"]}}
{"level":"debug","ts":"2026-07-06T20:03:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4b747cc3-6ee9-41a3-ab3b-33cca535b721","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60474a7ad191"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=57fd0aa1-6d66-4aee-9de0-7b7661d60c4b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a5d356b1-3180-412a-8dea-76750349e251","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"40e3d5353e8d81831797688a39423707c6bf92a8999fa3557bb5c03dd7161fa0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-035267.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:03:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4b747cc3-6ee9-41a3-ab3b-33cca535b721","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:03:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4b747cc3-6ee9-41a3-ab3b-33cca535b721","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:03:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4b747cc3-6ee9-41a3-ab3b-33cca535b721","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-035267/auth-test-model-035267\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:03:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4b747cc3-6ee9-41a3-ab3b-33cca535b721","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:03:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4b747cc3-6ee9-41a3-ab3b-33cca535b721","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:03:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4b747cc3-6ee9-41a3-ab3b-33cca535b721","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:03:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4b747cc3-6ee9-41a3-ab3b-33cca535b721","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:03:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4b747cc3-6ee9-41a3-ab3b-33cca535b721","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:03:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2f3610d6-9ab7-4e6c-81d2-768b4644c52a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:60258","PortSpecifier":{"PortValue":60258}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2f3610d6-9ab7-4e6c-81d2-768b4644c52a","method":"GET","path":"/maas-api/v1/api-keys/01d6a723-7124-455b-a16e-d1878235a058","host":"e2e-shared-b-035267.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:03:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2f3610d6-9ab7-4e6c-81d2-768b4644c52a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:60258","PortSpecifier":{"PortValue":60258}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368185,"nanos":516035612},"http":{"id":"2f3610d6-9ab7-4e6c-81d2-768b4644c52a","method":"GET","headers":{":authority":"e2e-shared-b-035267.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/01d6a723-7124-455b-a16e-d1878235a058",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:03:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2f3610d6-9ab7-4e6c-81d2-768b4644c52a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:03:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2f3610d6-9ab7-4e6c-81d2-768b4644c52a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a5d356b1-3180-412a-8dea-76750349e251","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=57fd0aa1-6d66-4aee-9de0-7b7661d60c4b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60474a7ad191"]}}
{"level":"debug","ts":"2026-07-06T20:03:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2f3610d6-9ab7-4e6c-81d2-768b4644c52a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60474a7ad191"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=57fd0aa1-6d66-4aee-9de0-7b7661d60c4b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a5d356b1-3180-412a-8dea-76750349e251","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"40e3d5353e8d81831797688a39423707c6bf92a8999fa3557bb5c03dd7161fa0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-035267.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/01d6a723-7124-455b-a16e-d1878235a058",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:03:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f3610d6-9ab7-4e6c-81d2-768b4644c52a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:03:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f3610d6-9ab7-4e6c-81d2-768b4644c52a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:03:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f3610d6-9ab7-4e6c-81d2-768b4644c52a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-035267/auth-test-model-035267\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:03:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2f3610d6-9ab7-4e6c-81d2-768b4644c52a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:03:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2f3610d6-9ab7-4e6c-81d2-768b4644c52a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:03:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2f3610d6-9ab7-4e6c-81d2-768b4644c52a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:03:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2f3610d6-9ab7-4e6c-81d2-768b4644c52a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:03:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2f3610d6-9ab7-4e6c-81d2-768b4644c52a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:03:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"835733ed-9f0d-4b9f-ae93-1f8e6e3d15aa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:35038","PortSpecifier":{"PortValue":35038}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"835733ed-9f0d-4b9f-ae93-1f8e6e3d15aa","method":"GET","path":"/maas-api/v1/api-keys/01d6a723-7124-455b-a16e-d1878235a058","host":"e2e-shared-a-e1f716.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:03:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"835733ed-9f0d-4b9f-ae93-1f8e6e3d15aa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:35038","PortSpecifier":{"PortValue":35038}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368185,"nanos":548730696},"http":{"id":"835733ed-9f0d-4b9f-ae93-1f8e6e3d15aa","method":"GET","headers":{":authority":"e2e-shared-a-e1f716.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/01d6a723-7124-455b-a16e-d1878235a058",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:03:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"835733ed-9f0d-4b9f-ae93-1f8e6e3d15aa","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:03:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"835733ed-9f0d-4b9f-ae93-1f8e6e3d15aa","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a5d356b1-3180-412a-8dea-76750349e251","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=57fd0aa1-6d66-4aee-9de0-7b7661d60c4b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60474a7ad191"]}}
{"level":"debug","ts":"2026-07-06T20:03:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"835733ed-9f0d-4b9f-ae93-1f8e6e3d15aa","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60474a7ad191"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=57fd0aa1-6d66-4aee-9de0-7b7661d60c4b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a5d356b1-3180-412a-8dea-76750349e251","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"aa8785305a08abe890ff7dda026ae9e6cebf659c57e7cbbd766e12c5e21bc37e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e1f716.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/01d6a723-7124-455b-a16e-d1878235a058",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:03:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"835733ed-9f0d-4b9f-ae93-1f8e6e3d15aa","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:03:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"835733ed-9f0d-4b9f-ae93-1f8e6e3d15aa","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:03:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"835733ed-9f0d-4b9f-ae93-1f8e6e3d15aa","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e1f716/auth-test-model-e1f716\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:03:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"835733ed-9f0d-4b9f-ae93-1f8e6e3d15aa","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:03:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"835733ed-9f0d-4b9f-ae93-1f8e6e3d15aa","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:03:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"835733ed-9f0d-4b9f-ae93-1f8e6e3d15aa","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T20:03:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"835733ed-9f0d-4b9f-ae93-1f8e6e3d15aa","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:03:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"835733ed-9f0d-4b9f-ae93-1f8e6e3d15aa","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:03:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8e521cd6-e552-4f81-a4e5-ac20a685b6bc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:58592","PortSpecifier":{"PortValue":58592}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8e521cd6-e552-4f81-a4e5-ac20a685b6bc","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e1f716.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:03:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8e521cd6-e552-4f81-a4e5-ac20a685b6bc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:58592","PortSpecifier":{"PortValue":58592}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368215,"nanos":110182761},"http":{"id":"8e521cd6-e552-4f81-a4e5-ac20a685b6bc","method":"POST","headers":{":authority":"e2e-shared-a-e1f716.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:03:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8e521cd6-e552-4f81-a4e5-ac20a685b6bc","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:03:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8e521cd6-e552-4f81-a4e5-ac20a685b6bc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a5d356b1-3180-412a-8dea-76750349e251","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=57fd0aa1-6d66-4aee-9de0-7b7661d60c4b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60474a7ad191"]}}
{"level":"debug","ts":"2026-07-06T20:03:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8e521cd6-e552-4f81-a4e5-ac20a685b6bc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60474a7ad191"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=57fd0aa1-6d66-4aee-9de0-7b7661d60c4b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a5d356b1-3180-412a-8dea-76750349e251","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"aa8785305a08abe890ff7dda026ae9e6cebf659c57e7cbbd766e12c5e21bc37e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e1f716.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:03:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e521cd6-e552-4f81-a4e5-ac20a685b6bc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:03:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e521cd6-e552-4f81-a4e5-ac20a685b6bc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:03:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e521cd6-e552-4f81-a4e5-ac20a685b6bc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e1f716/auth-test-model-e1f716\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:03:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8e521cd6-e552-4f81-a4e5-ac20a685b6bc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:03:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e521cd6-e552-4f81-a4e5-ac20a685b6bc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:03:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e521cd6-e552-4f81-a4e5-ac20a685b6bc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:03:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8e521cd6-e552-4f81-a4e5-ac20a685b6bc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:03:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8e521cd6-e552-4f81-a4e5-ac20a685b6bc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:03:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"09b4b55c-7fe8-4f73-b556-c246d953d55b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:60564","PortSpecifier":{"PortValue":60564}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"09b4b55c-7fe8-4f73-b556-c246d953d55b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-035267.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:03:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"09b4b55c-7fe8-4f73-b556-c246d953d55b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:60564","PortSpecifier":{"PortValue":60564}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368215,"nanos":174175894},"http":{"id":"09b4b55c-7fe8-4f73-b556-c246d953d55b","method":"POST","headers":{":authority":"e2e-shared-b-035267.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:03:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"09b4b55c-7fe8-4f73-b556-c246d953d55b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:03:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"09b4b55c-7fe8-4f73-b556-c246d953d55b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a5d356b1-3180-412a-8dea-76750349e251","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=57fd0aa1-6d66-4aee-9de0-7b7661d60c4b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60474a7ad191"]}}
{"level":"debug","ts":"2026-07-06T20:03:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"09b4b55c-7fe8-4f73-b556-c246d953d55b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60474a7ad191"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=57fd0aa1-6d66-4aee-9de0-7b7661d60c4b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a5d356b1-3180-412a-8dea-76750349e251","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"40e3d5353e8d81831797688a39423707c6bf92a8999fa3557bb5c03dd7161fa0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-035267.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:03:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09b4b55c-7fe8-4f73-b556-c246d953d55b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:03:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09b4b55c-7fe8-4f73-b556-c246d953d55b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:03:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09b4b55c-7fe8-4f73-b556-c246d953d55b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-035267/auth-test-model-035267\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:03:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"09b4b55c-7fe8-4f73-b556-c246d953d55b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:03:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"09b4b55c-7fe8-4f73-b556-c246d953d55b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:03:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"09b4b55c-7fe8-4f73-b556-c246d953d55b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:03:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"09b4b55c-7fe8-4f73-b556-c246d953d55b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:03:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"09b4b55c-7fe8-4f73-b556-c246d953d55b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:03:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"59313e3f-8df9-4d18-997f-709e31794e10","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:59318","PortSpecifier":{"PortValue":59318}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"59313e3f-8df9-4d18-997f-709e31794e10","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-e1f716.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:03:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"59313e3f-8df9-4d18-997f-709e31794e10","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:59318","PortSpecifier":{"PortValue":59318}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368215,"nanos":214884379},"http":{"id":"59313e3f-8df9-4d18-997f-709e31794e10","method":"POST","headers":{":authority":"e2e-shared-a-e1f716.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:03:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"59313e3f-8df9-4d18-997f-709e31794e10","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Id3HqJzFZ2pzQgPR_1KxQt9hVC8EXF8RGZUi9RPEud9ayXfwFhLzf71VKC3m"}
{"level":"debug","ts":"2026-07-06T20:03:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"59313e3f-8df9-4d18-997f-709e31794e10","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e1f716.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Id3HqJzFZ2pzQgPR_1KxQt9hVC8EXF8RGZUi9RPEud9ayXfwFhLzf71VKC3m\"}"}
{"level":"debug","ts":"2026-07-06T20:03:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"59313e3f-8df9-4d18-997f-709e31794e10","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e1f716.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"12e84047-2f31-413f-8c9b-169bd565422e","keyName":"e2e-auth-iso-a-f760ee","subscription":"e2e-auth-iso-27ebbf","tenant":"e2e-shared-a-e1f716","userId":"12e84047-2f31-413f-8c9b-169bd565422e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:03:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"59313e3f-8df9-4d18-997f-709e31794e10","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:03:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59313e3f-8df9-4d18-997f-709e31794e10","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:03:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59313e3f-8df9-4d18-997f-709e31794e10","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:03:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59313e3f-8df9-4d18-997f-709e31794e10","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e1f716/auth-test-model-e1f716\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:03:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"59313e3f-8df9-4d18-997f-709e31794e10","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:03:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"59313e3f-8df9-4d18-997f-709e31794e10","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T20:03:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"59313e3f-8df9-4d18-997f-709e31794e10","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-27ebbf"}
{"level":"debug","ts":"2026-07-06T20:03:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"59313e3f-8df9-4d18-997f-709e31794e10","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:03:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"59313e3f-8df9-4d18-997f-709e31794e10","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:03:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"59313e3f-8df9-4d18-997f-709e31794e10","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:03:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d8b22a29055af34cbe176a60c38f365542ea9b0d5a3629d0c9d8674ed3229b7c"}
{"level":"info","ts":"2026-07-06T20:03:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a3d19a60c0113c6d258bb507a8971c729a0cbea820af9e888e343545fe04f647"}
{"level":"info","ts":"2026-07-06T20:03:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ae9140935df703a67523e12806d29ff394da9e9fafae301f8714c26c7ce98ba3"}
{"level":"info","ts":"2026-07-06T20:03:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3cd6beaa00ca8e3c92fa5afeb88794ec62c64468462f6d7d45968e03de2b57b4"}
{"level":"info","ts":"2026-07-06T20:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7d887f049f6f89e1e3c7dcd1bbf70d327f508a8df951d1a871039b5089ae17e4"}
{"level":"info","ts":"2026-07-06T20:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1f797bfd6a17a2d499681245c032b83029220a351281bb6a0fea3e6af8b2cc3c"}
{"level":"info","ts":"2026-07-06T20:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4b37411e3d0f1bf1a4740a846c18b671b101a9d13d309d87d0821b22a113ec44"}
{"level":"info","ts":"2026-07-06T20:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ad83318f1b5e556e121c965dd813b7161bfa9f6500e444f33e86d8ad2fb58a21"}
{"level":"info","ts":"2026-07-06T20:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c04f33128bcaa6eefaf35c3355795c93149ec3a37de732db4e9486bf78f42cd2"}
{"level":"info","ts":"2026-07-06T20:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/db85641636943a9da599a4dbd78d5e11680c7a2b24e8e7baa96a08c9e4ca2be3"}
{"level":"info","ts":"2026-07-06T20:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c67542aaf78cf16d867757395fe70e09c02abefcd2fec8ac13de139713714f37"}
{"level":"info","ts":"2026-07-06T20:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3de715f6e0eb67e268b4f3c29bbf89d17947767a3c44c5fce972c0859c7b7da2"}
{"level":"info","ts":"2026-07-06T20:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0b4a5cb6f51602f97e73c34cd2b0ca6ef6baf8bce86c049065ff092e0392d435"}
{"level":"info","ts":"2026-07-06T20:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/46036451f3cf941baee8d8e7fa99e5c7589643188a92ace598d4eb6c58771fda"}
{"level":"info","ts":"2026-07-06T20:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fbeb5e94d6c6b8a0a548006ae3434238eccac96b538cc3db3264c746b6672e8c"}
{"level":"info","ts":"2026-07-06T20:03:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3c1f13340f47de62b5e4510e754f4df0289605c777bae191a0e12d0c2c744c9a"}
{"level":"debug","ts":"2026-07-06T20:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3b4412331fd14df5e1ce110c2fa077877c535581d5178269a914e1a05b37c55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:03:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:03:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3b4412331fd14df5e1ce110c2fa077877c535581d5178269a914e1a05b37c55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3b4412331fd14df5e1ce110c2fa077877c535581d5178269a914e1a05b37c55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3b4412331fd14df5e1ce110c2fa077877c535581d5178269a914e1a05b37c55","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3b4412331fd14df5e1ce110c2fa077877c535581d5178269a914e1a05b37c55"}
{"level":"debug","ts":"2026-07-06T20:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3b4412331fd14df5e1ce110c2fa077877c535581d5178269a914e1a05b37c55","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3b4412331fd14df5e1ce110c2fa077877c535581d5178269a914e1a05b37c55"}
{"level":"debug","ts":"2026-07-06T20:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3b4412331fd14df5e1ce110c2fa077877c535581d5178269a914e1a05b37c55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:03:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:03:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b3b4412331fd14df5e1ce110c2fa077877c535581d5178269a914e1a05b37c55"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3b4412331fd14df5e1ce110c2fa077877c535581d5178269a914e1a05b37c55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3b4412331fd14df5e1ce110c2fa077877c535581d5178269a914e1a05b37c55","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3b4412331fd14df5e1ce110c2fa077877c535581d5178269a914e1a05b37c55"}
{"level":"debug","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5af25ac388ea3e61a3598de10687a8d6ad7b449a741b2af7a2f673f1e60622b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:03:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:03:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5af25ac388ea3e61a3598de10687a8d6ad7b449a741b2af7a2f673f1e60622b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5af25ac388ea3e61a3598de10687a8d6ad7b449a741b2af7a2f673f1e60622b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:03:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:03:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5af25ac388ea3e61a3598de10687a8d6ad7b449a741b2af7a2f673f1e60622b0"}
{"level":"info","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5af25ac388ea3e61a3598de10687a8d6ad7b449a741b2af7a2f673f1e60622b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5af25ac388ea3e61a3598de10687a8d6ad7b449a741b2af7a2f673f1e60622b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:03:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:03:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5af25ac388ea3e61a3598de10687a8d6ad7b449a741b2af7a2f673f1e60622b0"}
{"level":"error","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5af25ac388ea3e61a3598de10687a8d6ad7b449a741b2af7a2f673f1e60622b0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5af25ac388ea3e61a3598de10687a8d6ad7b449a741b2af7a2f673f1e60622b0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5af25ac388ea3e61a3598de10687a8d6ad7b449a741b2af7a2f673f1e60622b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5af25ac388ea3e61a3598de10687a8d6ad7b449a741b2af7a2f673f1e60622b0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5af25ac388ea3e61a3598de10687a8d6ad7b449a741b2af7a2f673f1e60622b0"}
{"level":"debug","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23887d458d12974eb16a81c1d58f9b00fabb401daabfb13da6b426f25d5bfafc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:03:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:03:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23887d458d12974eb16a81c1d58f9b00fabb401daabfb13da6b426f25d5bfafc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23887d458d12974eb16a81c1d58f9b00fabb401daabfb13da6b426f25d5bfafc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23887d458d12974eb16a81c1d58f9b00fabb401daabfb13da6b426f25d5bfafc"}
{"level":"debug","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5af25ac388ea3e61a3598de10687a8d6ad7b449a741b2af7a2f673f1e60622b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:03:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:03:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5af25ac388ea3e61a3598de10687a8d6ad7b449a741b2af7a2f673f1e60622b0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23887d458d12974eb16a81c1d58f9b00fabb401daabfb13da6b426f25d5bfafc"}
{"level":"info","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5af25ac388ea3e61a3598de10687a8d6ad7b449a741b2af7a2f673f1e60622b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23887d458d12974eb16a81c1d58f9b00fabb401daabfb13da6b426f25d5bfafc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:03:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:03:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["23887d458d12974eb16a81c1d58f9b00fabb401daabfb13da6b426f25d5bfafc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23887d458d12974eb16a81c1d58f9b00fabb401daabfb13da6b426f25d5bfafc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5af25ac388ea3e61a3598de10687a8d6ad7b449a741b2af7a2f673f1e60622b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:03:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:03:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5af25ac388ea3e61a3598de10687a8d6ad7b449a741b2af7a2f673f1e60622b0"}
{"level":"info","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5af25ac388ea3e61a3598de10687a8d6ad7b449a741b2af7a2f673f1e60622b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23887d458d12974eb16a81c1d58f9b00fabb401daabfb13da6b426f25d5bfafc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:03:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:03:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23887d458d12974eb16a81c1d58f9b00fabb401daabfb13da6b426f25d5bfafc"}
{"level":"info","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23887d458d12974eb16a81c1d58f9b00fabb401daabfb13da6b426f25d5bfafc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5af25ac388ea3e61a3598de10687a8d6ad7b449a741b2af7a2f673f1e60622b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23887d458d12974eb16a81c1d58f9b00fabb401daabfb13da6b426f25d5bfafc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:03:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:03:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["23887d458d12974eb16a81c1d58f9b00fabb401daabfb13da6b426f25d5bfafc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23887d458d12974eb16a81c1d58f9b00fabb401daabfb13da6b426f25d5bfafc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"669179458dfa21c2fd483aae8487fe274e4175fe64d4582d0d8cd8032cba66e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:03:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:03:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5af25ac388ea3e61a3598de10687a8d6ad7b449a741b2af7a2f673f1e60622b0"}
{"level":"info","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"669179458dfa21c2fd483aae8487fe274e4175fe64d4582d0d8cd8032cba66e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5af25ac388ea3e61a3598de10687a8d6ad7b449a741b2af7a2f673f1e60622b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:03:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:03:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5af25ac388ea3e61a3598de10687a8d6ad7b449a741b2af7a2f673f1e60622b0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23887d458d12974eb16a81c1d58f9b00fabb401daabfb13da6b426f25d5bfafc"}
{"level":"info","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5af25ac388ea3e61a3598de10687a8d6ad7b449a741b2af7a2f673f1e60622b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23887d458d12974eb16a81c1d58f9b00fabb401daabfb13da6b426f25d5bfafc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"669179458dfa21c2fd483aae8487fe274e4175fe64d4582d0d8cd8032cba66e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:03:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:03:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/669179458dfa21c2fd483aae8487fe274e4175fe64d4582d0d8cd8032cba66e6"}
{"level":"info","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"669179458dfa21c2fd483aae8487fe274e4175fe64d4582d0d8cd8032cba66e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5af25ac388ea3e61a3598de10687a8d6ad7b449a741b2af7a2f673f1e60622b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:03:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:03:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5af25ac388ea3e61a3598de10687a8d6ad7b449a741b2af7a2f673f1e60622b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"669179458dfa21c2fd483aae8487fe274e4175fe64d4582d0d8cd8032cba66e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:03:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:03:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["669179458dfa21c2fd483aae8487fe274e4175fe64d4582d0d8cd8032cba66e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5af25ac388ea3e61a3598de10687a8d6ad7b449a741b2af7a2f673f1e60622b0"}
{"level":"info","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"669179458dfa21c2fd483aae8487fe274e4175fe64d4582d0d8cd8032cba66e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5af25ac388ea3e61a3598de10687a8d6ad7b449a741b2af7a2f673f1e60622b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:03:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:03:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5af25ac388ea3e61a3598de10687a8d6ad7b449a741b2af7a2f673f1e60622b0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/669179458dfa21c2fd483aae8487fe274e4175fe64d4582d0d8cd8032cba66e6"}
{"level":"info","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5af25ac388ea3e61a3598de10687a8d6ad7b449a741b2af7a2f673f1e60622b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"669179458dfa21c2fd483aae8487fe274e4175fe64d4582d0d8cd8032cba66e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5af25ac388ea3e61a3598de10687a8d6ad7b449a741b2af7a2f673f1e60622b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:03:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:03:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5af25ac388ea3e61a3598de10687a8d6ad7b449a741b2af7a2f673f1e60622b0"}
{"level":"info","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5af25ac388ea3e61a3598de10687a8d6ad7b449a741b2af7a2f673f1e60622b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5af25ac388ea3e61a3598de10687a8d6ad7b449a741b2af7a2f673f1e60622b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:03:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:03:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5af25ac388ea3e61a3598de10687a8d6ad7b449a741b2af7a2f673f1e60622b0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/669179458dfa21c2fd483aae8487fe274e4175fe64d4582d0d8cd8032cba66e6"}
{"level":"info","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5af25ac388ea3e61a3598de10687a8d6ad7b449a741b2af7a2f673f1e60622b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5af25ac388ea3e61a3598de10687a8d6ad7b449a741b2af7a2f673f1e60622b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5af25ac388ea3e61a3598de10687a8d6ad7b449a741b2af7a2f673f1e60622b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:03:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:03:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5af25ac388ea3e61a3598de10687a8d6ad7b449a741b2af7a2f673f1e60622b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5af25ac388ea3e61a3598de10687a8d6ad7b449a741b2af7a2f673f1e60622b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:03:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:03:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5af25ac388ea3e61a3598de10687a8d6ad7b449a741b2af7a2f673f1e60622b0"}
{"level":"error","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5af25ac388ea3e61a3598de10687a8d6ad7b449a741b2af7a2f673f1e60622b0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5af25ac388ea3e61a3598de10687a8d6ad7b449a741b2af7a2f673f1e60622b0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5af25ac388ea3e61a3598de10687a8d6ad7b449a741b2af7a2f673f1e60622b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5af25ac388ea3e61a3598de10687a8d6ad7b449a741b2af7a2f673f1e60622b0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5af25ac388ea3e61a3598de10687a8d6ad7b449a741b2af7a2f673f1e60622b0"}
{"level":"debug","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f74a890e5903a55326fc797ab3d42687105167292febde50a1e6cf1db7f41a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:03:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:03:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f74a890e5903a55326fc797ab3d42687105167292febde50a1e6cf1db7f41a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f74a890e5903a55326fc797ab3d42687105167292febde50a1e6cf1db7f41a5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5af25ac388ea3e61a3598de10687a8d6ad7b449a741b2af7a2f673f1e60622b0"}
{"level":"debug","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f74a890e5903a55326fc797ab3d42687105167292febde50a1e6cf1db7f41a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:03:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:03:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f74a890e5903a55326fc797ab3d42687105167292febde50a1e6cf1db7f41a5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f74a890e5903a55326fc797ab3d42687105167292febde50a1e6cf1db7f41a5"}
{"level":"debug","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f74a890e5903a55326fc797ab3d42687105167292febde50a1e6cf1db7f41a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:03:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:03:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f74a890e5903a55326fc797ab3d42687105167292febde50a1e6cf1db7f41a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f74a890e5903a55326fc797ab3d42687105167292febde50a1e6cf1db7f41a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f74a890e5903a55326fc797ab3d42687105167292febde50a1e6cf1db7f41a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:03:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:03:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f74a890e5903a55326fc797ab3d42687105167292febde50a1e6cf1db7f41a5"}
{"level":"info","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f74a890e5903a55326fc797ab3d42687105167292febde50a1e6cf1db7f41a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5af25ac388ea3e61a3598de10687a8d6ad7b449a741b2af7a2f673f1e60622b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:03:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:03:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5af25ac388ea3e61a3598de10687a8d6ad7b449a741b2af7a2f673f1e60622b0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f74a890e5903a55326fc797ab3d42687105167292febde50a1e6cf1db7f41a5"}
{"level":"info","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5af25ac388ea3e61a3598de10687a8d6ad7b449a741b2af7a2f673f1e60622b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f74a890e5903a55326fc797ab3d42687105167292febde50a1e6cf1db7f41a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5af25ac388ea3e61a3598de10687a8d6ad7b449a741b2af7a2f673f1e60622b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f74a890e5903a55326fc797ab3d42687105167292febde50a1e6cf1db7f41a5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f74a890e5903a55326fc797ab3d42687105167292febde50a1e6cf1db7f41a5"}
{"level":"debug","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f74a890e5903a55326fc797ab3d42687105167292febde50a1e6cf1db7f41a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:03:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:03:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f74a890e5903a55326fc797ab3d42687105167292febde50a1e6cf1db7f41a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5af25ac388ea3e61a3598de10687a8d6ad7b449a741b2af7a2f673f1e60622b0"}
{"level":"info","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f74a890e5903a55326fc797ab3d42687105167292febde50a1e6cf1db7f41a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f74a890e5903a55326fc797ab3d42687105167292febde50a1e6cf1db7f41a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:03:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:03:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f74a890e5903a55326fc797ab3d42687105167292febde50a1e6cf1db7f41a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f74a890e5903a55326fc797ab3d42687105167292febde50a1e6cf1db7f41a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f74a890e5903a55326fc797ab3d42687105167292febde50a1e6cf1db7f41a5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f74a890e5903a55326fc797ab3d42687105167292febde50a1e6cf1db7f41a5"}
{"level":"debug","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f74a890e5903a55326fc797ab3d42687105167292febde50a1e6cf1db7f41a5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f74a890e5903a55326fc797ab3d42687105167292febde50a1e6cf1db7f41a5"}
{"level":"debug","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df3a62cb7774afc461b48b0ab92135491c58da3e72d9b9f2c5a6a5906c65d847","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:03:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:03:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df3a62cb7774afc461b48b0ab92135491c58da3e72d9b9f2c5a6a5906c65d847","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df3a62cb7774afc461b48b0ab92135491c58da3e72d9b9f2c5a6a5906c65d847","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df3a62cb7774afc461b48b0ab92135491c58da3e72d9b9f2c5a6a5906c65d847","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f74a890e5903a55326fc797ab3d42687105167292febde50a1e6cf1db7f41a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:03:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:03:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f74a890e5903a55326fc797ab3d42687105167292febde50a1e6cf1db7f41a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df3a62cb7774afc461b48b0ab92135491c58da3e72d9b9f2c5a6a5906c65d847"}
{"level":"info","ts":"2026-07-06T20:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f74a890e5903a55326fc797ab3d42687105167292febde50a1e6cf1db7f41a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df3a62cb7774afc461b48b0ab92135491c58da3e72d9b9f2c5a6a5906c65d847","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f74a890e5903a55326fc797ab3d42687105167292febde50a1e6cf1db7f41a5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df3a62cb7774afc461b48b0ab92135491c58da3e72d9b9f2c5a6a5906c65d847"}
{"level":"info","ts":"2026-07-06T20:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f74a890e5903a55326fc797ab3d42687105167292febde50a1e6cf1db7f41a5"}
{"level":"debug","ts":"2026-07-06T20:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df3a62cb7774afc461b48b0ab92135491c58da3e72d9b9f2c5a6a5906c65d847","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:03:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:03:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df3a62cb7774afc461b48b0ab92135491c58da3e72d9b9f2c5a6a5906c65d847"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df3a62cb7774afc461b48b0ab92135491c58da3e72d9b9f2c5a6a5906c65d847","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c901ccabfb5d0f2861f521813833ee741d9884d40db40279cd7bc18fb9ee3e05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:03:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:03:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c901ccabfb5d0f2861f521813833ee741d9884d40db40279cd7bc18fb9ee3e05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df3a62cb7774afc461b48b0ab92135491c58da3e72d9b9f2c5a6a5906c65d847","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e163a20d14a3d699d5396262817d2f024272ac784fca95c9b82c4405e7b9c134","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:03:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:03:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c901ccabfb5d0f2861f521813833ee741d9884d40db40279cd7bc18fb9ee3e05"}
{"level":"info","ts":"2026-07-06T20:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e163a20d14a3d699d5396262817d2f024272ac784fca95c9b82c4405e7b9c134","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c901ccabfb5d0f2861f521813833ee741d9884d40db40279cd7bc18fb9ee3e05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:03:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:03:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c901ccabfb5d0f2861f521813833ee741d9884d40db40279cd7bc18fb9ee3e05"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df3a62cb7774afc461b48b0ab92135491c58da3e72d9b9f2c5a6a5906c65d847"}
{"level":"info","ts":"2026-07-06T20:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c901ccabfb5d0f2861f521813833ee741d9884d40db40279cd7bc18fb9ee3e05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e163a20d14a3d699d5396262817d2f024272ac784fca95c9b82c4405e7b9c134","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:03:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:03:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e163a20d14a3d699d5396262817d2f024272ac784fca95c9b82c4405e7b9c134","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c901ccabfb5d0f2861f521813833ee741d9884d40db40279cd7bc18fb9ee3e05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e163a20d14a3d699d5396262817d2f024272ac784fca95c9b82c4405e7b9c134","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e163a20d14a3d699d5396262817d2f024272ac784fca95c9b82c4405e7b9c134"}
{"level":"debug","ts":"2026-07-06T20:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e163a20d14a3d699d5396262817d2f024272ac784fca95c9b82c4405e7b9c134","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:03:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:03:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e163a20d14a3d699d5396262817d2f024272ac784fca95c9b82c4405e7b9c134"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c901ccabfb5d0f2861f521813833ee741d9884d40db40279cd7bc18fb9ee3e05"}
{"level":"info","ts":"2026-07-06T20:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e163a20d14a3d699d5396262817d2f024272ac784fca95c9b82c4405e7b9c134","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e163a20d14a3d699d5396262817d2f024272ac784fca95c9b82c4405e7b9c134","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:03:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:03:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e163a20d14a3d699d5396262817d2f024272ac784fca95c9b82c4405e7b9c134","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e163a20d14a3d699d5396262817d2f024272ac784fca95c9b82c4405e7b9c134","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e163a20d14a3d699d5396262817d2f024272ac784fca95c9b82c4405e7b9c134","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e163a20d14a3d699d5396262817d2f024272ac784fca95c9b82c4405e7b9c134"}
{"level":"debug","ts":"2026-07-06T20:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e163a20d14a3d699d5396262817d2f024272ac784fca95c9b82c4405e7b9c134","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e163a20d14a3d699d5396262817d2f024272ac784fca95c9b82c4405e7b9c134"}
{"level":"debug","ts":"2026-07-06T20:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e163a20d14a3d699d5396262817d2f024272ac784fca95c9b82c4405e7b9c134","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:03:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:03:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e163a20d14a3d699d5396262817d2f024272ac784fca95c9b82c4405e7b9c134"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e163a20d14a3d699d5396262817d2f024272ac784fca95c9b82c4405e7b9c134","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e163a20d14a3d699d5396262817d2f024272ac784fca95c9b82c4405e7b9c134","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:03:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:03:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e163a20d14a3d699d5396262817d2f024272ac784fca95c9b82c4405e7b9c134","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e163a20d14a3d699d5396262817d2f024272ac784fca95c9b82c4405e7b9c134","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e163a20d14a3d699d5396262817d2f024272ac784fca95c9b82c4405e7b9c134","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e163a20d14a3d699d5396262817d2f024272ac784fca95c9b82c4405e7b9c134"}
{"level":"debug","ts":"2026-07-06T20:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e163a20d14a3d699d5396262817d2f024272ac784fca95c9b82c4405e7b9c134","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e163a20d14a3d699d5396262817d2f024272ac784fca95c9b82c4405e7b9c134"}
{"level":"debug","ts":"2026-07-06T20:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e163a20d14a3d699d5396262817d2f024272ac784fca95c9b82c4405e7b9c134","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:03:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:03:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e163a20d14a3d699d5396262817d2f024272ac784fca95c9b82c4405e7b9c134"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e163a20d14a3d699d5396262817d2f024272ac784fca95c9b82c4405e7b9c134","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e163a20d14a3d699d5396262817d2f024272ac784fca95c9b82c4405e7b9c134","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e163a20d14a3d699d5396262817d2f024272ac784fca95c9b82c4405e7b9c134"}
{"level":"debug","ts":"2026-07-06T20:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"493f33b4684f80f9ac9cfb88272d45de09f24f01322d9cfb360764c6f37a6582","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"493f33b4684f80f9ac9cfb88272d45de09f24f01322d9cfb360764c6f37a6582","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"493f33b4684f80f9ac9cfb88272d45de09f24f01322d9cfb360764c6f37a6582","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"493f33b4684f80f9ac9cfb88272d45de09f24f01322d9cfb360764c6f37a6582","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/493f33b4684f80f9ac9cfb88272d45de09f24f01322d9cfb360764c6f37a6582"}
{"level":"debug","ts":"2026-07-06T20:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"493f33b4684f80f9ac9cfb88272d45de09f24f01322d9cfb360764c6f37a6582","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/493f33b4684f80f9ac9cfb88272d45de09f24f01322d9cfb360764c6f37a6582"}
{"level":"debug","ts":"2026-07-06T20:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"493f33b4684f80f9ac9cfb88272d45de09f24f01322d9cfb360764c6f37a6582","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["493f33b4684f80f9ac9cfb88272d45de09f24f01322d9cfb360764c6f37a6582"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"493f33b4684f80f9ac9cfb88272d45de09f24f01322d9cfb360764c6f37a6582","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"493f33b4684f80f9ac9cfb88272d45de09f24f01322d9cfb360764c6f37a6582","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/493f33b4684f80f9ac9cfb88272d45de09f24f01322d9cfb360764c6f37a6582"}
{"level":"debug","ts":"2026-07-06T20:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd75f7e87f6b5b8245c31a4ef7d2ea19bed0dbb521dc8ee570c1793934d40b90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd75f7e87f6b5b8245c31a4ef7d2ea19bed0dbb521dc8ee570c1793934d40b90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd75f7e87f6b5b8245c31a4ef7d2ea19bed0dbb521dc8ee570c1793934d40b90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd75f7e87f6b5b8245c31a4ef7d2ea19bed0dbb521dc8ee570c1793934d40b90","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd75f7e87f6b5b8245c31a4ef7d2ea19bed0dbb521dc8ee570c1793934d40b90"}
{"level":"debug","ts":"2026-07-06T20:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd75f7e87f6b5b8245c31a4ef7d2ea19bed0dbb521dc8ee570c1793934d40b90","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd75f7e87f6b5b8245c31a4ef7d2ea19bed0dbb521dc8ee570c1793934d40b90"}
{"level":"debug","ts":"2026-07-06T20:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd75f7e87f6b5b8245c31a4ef7d2ea19bed0dbb521dc8ee570c1793934d40b90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd75f7e87f6b5b8245c31a4ef7d2ea19bed0dbb521dc8ee570c1793934d40b90"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd75f7e87f6b5b8245c31a4ef7d2ea19bed0dbb521dc8ee570c1793934d40b90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd75f7e87f6b5b8245c31a4ef7d2ea19bed0dbb521dc8ee570c1793934d40b90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd75f7e87f6b5b8245c31a4ef7d2ea19bed0dbb521dc8ee570c1793934d40b90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de8f59bfa8156d990446a656d8ee50c0cc4ecc88c6097044357143fd88c028a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd75f7e87f6b5b8245c31a4ef7d2ea19bed0dbb521dc8ee570c1793934d40b90"}
{"level":"info","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de8f59bfa8156d990446a656d8ee50c0cc4ecc88c6097044357143fd88c028a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd75f7e87f6b5b8245c31a4ef7d2ea19bed0dbb521dc8ee570c1793934d40b90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd75f7e87f6b5b8245c31a4ef7d2ea19bed0dbb521dc8ee570c1793934d40b90"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de8f59bfa8156d990446a656d8ee50c0cc4ecc88c6097044357143fd88c028a0"}
{"level":"info","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd75f7e87f6b5b8245c31a4ef7d2ea19bed0dbb521dc8ee570c1793934d40b90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de8f59bfa8156d990446a656d8ee50c0cc4ecc88c6097044357143fd88c028a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de8f59bfa8156d990446a656d8ee50c0cc4ecc88c6097044357143fd88c028a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd75f7e87f6b5b8245c31a4ef7d2ea19bed0dbb521dc8ee570c1793934d40b90"}
{"level":"info","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de8f59bfa8156d990446a656d8ee50c0cc4ecc88c6097044357143fd88c028a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd75f7e87f6b5b8245c31a4ef7d2ea19bed0dbb521dc8ee570c1793934d40b90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de8f59bfa8156d990446a656d8ee50c0cc4ecc88c6097044357143fd88c028a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de8f59bfa8156d990446a656d8ee50c0cc4ecc88c6097044357143fd88c028a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de8f59bfa8156d990446a656d8ee50c0cc4ecc88c6097044357143fd88c028a0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de8f59bfa8156d990446a656d8ee50c0cc4ecc88c6097044357143fd88c028a0"}
{"level":"debug","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de8f59bfa8156d990446a656d8ee50c0cc4ecc88c6097044357143fd88c028a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de8f59bfa8156d990446a656d8ee50c0cc4ecc88c6097044357143fd88c028a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd75f7e87f6b5b8245c31a4ef7d2ea19bed0dbb521dc8ee570c1793934d40b90"}
{"level":"info","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de8f59bfa8156d990446a656d8ee50c0cc4ecc88c6097044357143fd88c028a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de8f59bfa8156d990446a656d8ee50c0cc4ecc88c6097044357143fd88c028a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de8f59bfa8156d990446a656d8ee50c0cc4ecc88c6097044357143fd88c028a0"}
{"level":"info","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de8f59bfa8156d990446a656d8ee50c0cc4ecc88c6097044357143fd88c028a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f3dcb001ca1403d3b99f09b881832176c6ddeca2506eac67e1366120416bbe5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f3dcb001ca1403d3b99f09b881832176c6ddeca2506eac67e1366120416bbe5"}
{"level":"info","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f3dcb001ca1403d3b99f09b881832176c6ddeca2506eac67e1366120416bbe5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de8f59bfa8156d990446a656d8ee50c0cc4ecc88c6097044357143fd88c028a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f3dcb001ca1403d3b99f09b881832176c6ddeca2506eac67e1366120416bbe5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f3dcb001ca1403d3b99f09b881832176c6ddeca2506eac67e1366120416bbe5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f3dcb001ca1403d3b99f09b881832176c6ddeca2506eac67e1366120416bbe5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de8f59bfa8156d990446a656d8ee50c0cc4ecc88c6097044357143fd88c028a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f3dcb001ca1403d3b99f09b881832176c6ddeca2506eac67e1366120416bbe5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f3dcb001ca1403d3b99f09b881832176c6ddeca2506eac67e1366120416bbe5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de8f59bfa8156d990446a656d8ee50c0cc4ecc88c6097044357143fd88c028a0"}
{"level":"error","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5f3dcb001ca1403d3b99f09b881832176c6ddeca2506eac67e1366120416bbe5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5f3dcb001ca1403d3b99f09b881832176c6ddeca2506eac67e1366120416bbe5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f3dcb001ca1403d3b99f09b881832176c6ddeca2506eac67e1366120416bbe5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f3dcb001ca1403d3b99f09b881832176c6ddeca2506eac67e1366120416bbe5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de8f59bfa8156d990446a656d8ee50c0cc4ecc88c6097044357143fd88c028a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de8f59bfa8156d990446a656d8ee50c0cc4ecc88c6097044357143fd88c028a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f3dcb001ca1403d3b99f09b881832176c6ddeca2506eac67e1366120416bbe5"}
{"level":"info","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de8f59bfa8156d990446a656d8ee50c0cc4ecc88c6097044357143fd88c028a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f3dcb001ca1403d3b99f09b881832176c6ddeca2506eac67e1366120416bbe5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f41f34ba9534e6c7d8aab3b448d83d46d5f3479d35a789e76cc1362dd4de859","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f3dcb001ca1403d3b99f09b881832176c6ddeca2506eac67e1366120416bbe5"}
{"level":"info","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f41f34ba9534e6c7d8aab3b448d83d46d5f3479d35a789e76cc1362dd4de859","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de8f59bfa8156d990446a656d8ee50c0cc4ecc88c6097044357143fd88c028a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f41f34ba9534e6c7d8aab3b448d83d46d5f3479d35a789e76cc1362dd4de859","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f41f34ba9534e6c7d8aab3b448d83d46d5f3479d35a789e76cc1362dd4de859"}
{"level":"info","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f41f34ba9534e6c7d8aab3b448d83d46d5f3479d35a789e76cc1362dd4de859","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f3dcb001ca1403d3b99f09b881832176c6ddeca2506eac67e1366120416bbe5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f3dcb001ca1403d3b99f09b881832176c6ddeca2506eac67e1366120416bbe5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de8f59bfa8156d990446a656d8ee50c0cc4ecc88c6097044357143fd88c028a0"}
{"level":"info","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f3dcb001ca1403d3b99f09b881832176c6ddeca2506eac67e1366120416bbe5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f41f34ba9534e6c7d8aab3b448d83d46d5f3479d35a789e76cc1362dd4de859","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f3dcb001ca1403d3b99f09b881832176c6ddeca2506eac67e1366120416bbe5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f41f34ba9534e6c7d8aab3b448d83d46d5f3479d35a789e76cc1362dd4de859","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f41f34ba9534e6c7d8aab3b448d83d46d5f3479d35a789e76cc1362dd4de859"}
{"level":"debug","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1b5b8b8d64f721c804ae1a30c98fc0d2fb9732fadbe744451b7f8ed165199c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f3dcb001ca1403d3b99f09b881832176c6ddeca2506eac67e1366120416bbe5"}
{"level":"info","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1b5b8b8d64f721c804ae1a30c98fc0d2fb9732fadbe744451b7f8ed165199c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"872d6c79b2125d01f658f1782f59aa62e8f2700c76f7dd8c1102f8e3e9631000","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"872d6c79b2125d01f658f1782f59aa62e8f2700c76f7dd8c1102f8e3e9631000","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1b5b8b8d64f721c804ae1a30c98fc0d2fb9732fadbe744451b7f8ed165199c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1b5b8b8d64f721c804ae1a30c98fc0d2fb9732fadbe744451b7f8ed165199c8"}
{"level":"info","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1b5b8b8d64f721c804ae1a30c98fc0d2fb9732fadbe744451b7f8ed165199c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f41f34ba9534e6c7d8aab3b448d83d46d5f3479d35a789e76cc1362dd4de859","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f41f34ba9534e6c7d8aab3b448d83d46d5f3479d35a789e76cc1362dd4de859"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/872d6c79b2125d01f658f1782f59aa62e8f2700c76f7dd8c1102f8e3e9631000"}
{"level":"info","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f41f34ba9534e6c7d8aab3b448d83d46d5f3479d35a789e76cc1362dd4de859","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"872d6c79b2125d01f658f1782f59aa62e8f2700c76f7dd8c1102f8e3e9631000","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["872d6c79b2125d01f658f1782f59aa62e8f2700c76f7dd8c1102f8e3e9631000"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"872d6c79b2125d01f658f1782f59aa62e8f2700c76f7dd8c1102f8e3e9631000","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1b5b8b8d64f721c804ae1a30c98fc0d2fb9732fadbe744451b7f8ed165199c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f41f34ba9534e6c7d8aab3b448d83d46d5f3479d35a789e76cc1362dd4de859","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"872d6c79b2125d01f658f1782f59aa62e8f2700c76f7dd8c1102f8e3e9631000","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1b5b8b8d64f721c804ae1a30c98fc0d2fb9732fadbe744451b7f8ed165199c8"}
{"level":"debug","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1b5b8b8d64f721c804ae1a30c98fc0d2fb9732fadbe744451b7f8ed165199c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c1b5b8b8d64f721c804ae1a30c98fc0d2fb9732fadbe744451b7f8ed165199c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f41f34ba9534e6c7d8aab3b448d83d46d5f3479d35a789e76cc1362dd4de859"}
{"level":"info","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1b5b8b8d64f721c804ae1a30c98fc0d2fb9732fadbe744451b7f8ed165199c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33920d92b9254c05d22ba00c95567464574dd1863392cbae239205cf6209f937","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/872d6c79b2125d01f658f1782f59aa62e8f2700c76f7dd8c1102f8e3e9631000"}
{"level":"info","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33920d92b9254c05d22ba00c95567464574dd1863392cbae239205cf6209f937","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1b5b8b8d64f721c804ae1a30c98fc0d2fb9732fadbe744451b7f8ed165199c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33920d92b9254c05d22ba00c95567464574dd1863392cbae239205cf6209f937","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33920d92b9254c05d22ba00c95567464574dd1863392cbae239205cf6209f937"}
{"level":"info","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33920d92b9254c05d22ba00c95567464574dd1863392cbae239205cf6209f937","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33920d92b9254c05d22ba00c95567464574dd1863392cbae239205cf6209f937","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33920d92b9254c05d22ba00c95567464574dd1863392cbae239205cf6209f937"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"33920d92b9254c05d22ba00c95567464574dd1863392cbae239205cf6209f937","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"33920d92b9254c05d22ba00c95567464574dd1863392cbae239205cf6209f937\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33920d92b9254c05d22ba00c95567464574dd1863392cbae239205cf6209f937","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33920d92b9254c05d22ba00c95567464574dd1863392cbae239205cf6209f937"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1b5b8b8d64f721c804ae1a30c98fc0d2fb9732fadbe744451b7f8ed165199c8"}
{"level":"info","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33920d92b9254c05d22ba00c95567464574dd1863392cbae239205cf6209f937","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33920d92b9254c05d22ba00c95567464574dd1863392cbae239205cf6209f937","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33920d92b9254c05d22ba00c95567464574dd1863392cbae239205cf6209f937","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33920d92b9254c05d22ba00c95567464574dd1863392cbae239205cf6209f937","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33920d92b9254c05d22ba00c95567464574dd1863392cbae239205cf6209f937","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33920d92b9254c05d22ba00c95567464574dd1863392cbae239205cf6209f937"}
{"level":"error","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"33920d92b9254c05d22ba00c95567464574dd1863392cbae239205cf6209f937","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"33920d92b9254c05d22ba00c95567464574dd1863392cbae239205cf6209f937\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33920d92b9254c05d22ba00c95567464574dd1863392cbae239205cf6209f937","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33920d92b9254c05d22ba00c95567464574dd1863392cbae239205cf6209f937"}
{"level":"debug","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33920d92b9254c05d22ba00c95567464574dd1863392cbae239205cf6209f937","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33920d92b9254c05d22ba00c95567464574dd1863392cbae239205cf6209f937"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33920d92b9254c05d22ba00c95567464574dd1863392cbae239205cf6209f937","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33920d92b9254c05d22ba00c95567464574dd1863392cbae239205cf6209f937","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33920d92b9254c05d22ba00c95567464574dd1863392cbae239205cf6209f937","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33920d92b9254c05d22ba00c95567464574dd1863392cbae239205cf6209f937","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33920d92b9254c05d22ba00c95567464574dd1863392cbae239205cf6209f937","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33920d92b9254c05d22ba00c95567464574dd1863392cbae239205cf6209f937"}
{"level":"debug","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33920d92b9254c05d22ba00c95567464574dd1863392cbae239205cf6209f937","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33920d92b9254c05d22ba00c95567464574dd1863392cbae239205cf6209f937"}
{"level":"debug","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33920d92b9254c05d22ba00c95567464574dd1863392cbae239205cf6209f937","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33920d92b9254c05d22ba00c95567464574dd1863392cbae239205cf6209f937"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33920d92b9254c05d22ba00c95567464574dd1863392cbae239205cf6209f937","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33920d92b9254c05d22ba00c95567464574dd1863392cbae239205cf6209f937","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:04:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33920d92b9254c05d22ba00c95567464574dd1863392cbae239205cf6209f937"}
{"level":"debug","ts":"2026-07-06T20:04:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de8f59bfa8156d990446a656d8ee50c0cc4ecc88c6097044357143fd88c028a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de8f59bfa8156d990446a656d8ee50c0cc4ecc88c6097044357143fd88c028a0"}
{"level":"info","ts":"2026-07-06T20:04:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de8f59bfa8156d990446a656d8ee50c0cc4ecc88c6097044357143fd88c028a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de8f59bfa8156d990446a656d8ee50c0cc4ecc88c6097044357143fd88c028a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de8f59bfa8156d990446a656d8ee50c0cc4ecc88c6097044357143fd88c028a0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:04:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de8f59bfa8156d990446a656d8ee50c0cc4ecc88c6097044357143fd88c028a0"}
{"level":"debug","ts":"2026-07-06T20:04:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de8f59bfa8156d990446a656d8ee50c0cc4ecc88c6097044357143fd88c028a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de8f59bfa8156d990446a656d8ee50c0cc4ecc88c6097044357143fd88c028a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de8f59bfa8156d990446a656d8ee50c0cc4ecc88c6097044357143fd88c028a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de8f59bfa8156d990446a656d8ee50c0cc4ecc88c6097044357143fd88c028a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de8f59bfa8156d990446a656d8ee50c0cc4ecc88c6097044357143fd88c028a0"}
{"level":"info","ts":"2026-07-06T20:04:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de8f59bfa8156d990446a656d8ee50c0cc4ecc88c6097044357143fd88c028a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd75f7e87f6b5b8245c31a4ef7d2ea19bed0dbb521dc8ee570c1793934d40b90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de8f59bfa8156d990446a656d8ee50c0cc4ecc88c6097044357143fd88c028a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de8f59bfa8156d990446a656d8ee50c0cc4ecc88c6097044357143fd88c028a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de8f59bfa8156d990446a656d8ee50c0cc4ecc88c6097044357143fd88c028a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de8f59bfa8156d990446a656d8ee50c0cc4ecc88c6097044357143fd88c028a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de8f59bfa8156d990446a656d8ee50c0cc4ecc88c6097044357143fd88c028a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T20:04:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"de8f59bfa8156d990446a656d8ee50c0cc4ecc88c6097044357143fd88c028a0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"de8f59bfa8156d990446a656d8ee50c0cc4ecc88c6097044357143fd88c028a0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:04:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de8f59bfa8156d990446a656d8ee50c0cc4ecc88c6097044357143fd88c028a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de8f59bfa8156d990446a656d8ee50c0cc4ecc88c6097044357143fd88c028a0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:04:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd75f7e87f6b5b8245c31a4ef7d2ea19bed0dbb521dc8ee570c1793934d40b90"}
{"level":"info","ts":"2026-07-06T20:04:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de8f59bfa8156d990446a656d8ee50c0cc4ecc88c6097044357143fd88c028a0"}
{"level":"debug","ts":"2026-07-06T20:04:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f41f34ba9534e6c7d8aab3b448d83d46d5f3479d35a789e76cc1362dd4de859","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:04:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f41f34ba9534e6c7d8aab3b448d83d46d5f3479d35a789e76cc1362dd4de859"}
{"level":"debug","ts":"2026-07-06T20:04:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1b5b8b8d64f721c804ae1a30c98fc0d2fb9732fadbe744451b7f8ed165199c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1b5b8b8d64f721c804ae1a30c98fc0d2fb9732fadbe744451b7f8ed165199c8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:04:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1b5b8b8d64f721c804ae1a30c98fc0d2fb9732fadbe744451b7f8ed165199c8"}
{"level":"debug","ts":"2026-07-06T20:04:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1b5b8b8d64f721c804ae1a30c98fc0d2fb9732fadbe744451b7f8ed165199c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c1b5b8b8d64f721c804ae1a30c98fc0d2fb9732fadbe744451b7f8ed165199c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1b5b8b8d64f721c804ae1a30c98fc0d2fb9732fadbe744451b7f8ed165199c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1b5b8b8d64f721c804ae1a30c98fc0d2fb9732fadbe744451b7f8ed165199c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1b5b8b8d64f721c804ae1a30c98fc0d2fb9732fadbe744451b7f8ed165199c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1b5b8b8d64f721c804ae1a30c98fc0d2fb9732fadbe744451b7f8ed165199c8"}
{"level":"info","ts":"2026-07-06T20:04:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1b5b8b8d64f721c804ae1a30c98fc0d2fb9732fadbe744451b7f8ed165199c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1b5b8b8d64f721c804ae1a30c98fc0d2fb9732fadbe744451b7f8ed165199c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T20:04:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c1b5b8b8d64f721c804ae1a30c98fc0d2fb9732fadbe744451b7f8ed165199c8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c1b5b8b8d64f721c804ae1a30c98fc0d2fb9732fadbe744451b7f8ed165199c8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:04:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1b5b8b8d64f721c804ae1a30c98fc0d2fb9732fadbe744451b7f8ed165199c8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:04:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1b5b8b8d64f721c804ae1a30c98fc0d2fb9732fadbe744451b7f8ed165199c8"}
{"level":"debug","ts":"2026-07-06T20:04:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1b5b8b8d64f721c804ae1a30c98fc0d2fb9732fadbe744451b7f8ed165199c8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:04:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1b5b8b8d64f721c804ae1a30c98fc0d2fb9732fadbe744451b7f8ed165199c8"}
{"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1b5b8b8d64f721c804ae1a30c98fc0d2fb9732fadbe744451b7f8ed165199c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c1b5b8b8d64f721c804ae1a30c98fc0d2fb9732fadbe744451b7f8ed165199c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1b5b8b8d64f721c804ae1a30c98fc0d2fb9732fadbe744451b7f8ed165199c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1b5b8b8d64f721c804ae1a30c98fc0d2fb9732fadbe744451b7f8ed165199c8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1b5b8b8d64f721c804ae1a30c98fc0d2fb9732fadbe744451b7f8ed165199c8"}
{"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f74a890e5903a55326fc797ab3d42687105167292febde50a1e6cf1db7f41a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f74a890e5903a55326fc797ab3d42687105167292febde50a1e6cf1db7f41a5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f74a890e5903a55326fc797ab3d42687105167292febde50a1e6cf1db7f41a5"}
{"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f74a890e5903a55326fc797ab3d42687105167292febde50a1e6cf1db7f41a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f74a890e5903a55326fc797ab3d42687105167292febde50a1e6cf1db7f41a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f74a890e5903a55326fc797ab3d42687105167292febde50a1e6cf1db7f41a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f74a890e5903a55326fc797ab3d42687105167292febde50a1e6cf1db7f41a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f74a890e5903a55326fc797ab3d42687105167292febde50a1e6cf1db7f41a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f74a890e5903a55326fc797ab3d42687105167292febde50a1e6cf1db7f41a5"}
{"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f74a890e5903a55326fc797ab3d42687105167292febde50a1e6cf1db7f41a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f74a890e5903a55326fc797ab3d42687105167292febde50a1e6cf1db7f41a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f74a890e5903a55326fc797ab3d42687105167292febde50a1e6cf1db7f41a5"}
{"level":"error","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6f74a890e5903a55326fc797ab3d42687105167292febde50a1e6cf1db7f41a5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6f74a890e5903a55326fc797ab3d42687105167292febde50a1e6cf1db7f41a5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f74a890e5903a55326fc797ab3d42687105167292febde50a1e6cf1db7f41a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f74a890e5903a55326fc797ab3d42687105167292febde50a1e6cf1db7f41a5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f74a890e5903a55326fc797ab3d42687105167292febde50a1e6cf1db7f41a5"}
{"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f74a890e5903a55326fc797ab3d42687105167292febde50a1e6cf1db7f41a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f74a890e5903a55326fc797ab3d42687105167292febde50a1e6cf1db7f41a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f74a890e5903a55326fc797ab3d42687105167292febde50a1e6cf1db7f41a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f74a890e5903a55326fc797ab3d42687105167292febde50a1e6cf1db7f41a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f74a890e5903a55326fc797ab3d42687105167292febde50a1e6cf1db7f41a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f74a890e5903a55326fc797ab3d42687105167292febde50a1e6cf1db7f41a5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f74a890e5903a55326fc797ab3d42687105167292febde50a1e6cf1db7f41a5"}
{"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f74a890e5903a55326fc797ab3d42687105167292febde50a1e6cf1db7f41a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5af25ac388ea3e61a3598de10687a8d6ad7b449a741b2af7a2f673f1e60622b0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f74a890e5903a55326fc797ab3d42687105167292febde50a1e6cf1db7f41a5"}
{"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f74a890e5903a55326fc797ab3d42687105167292febde50a1e6cf1db7f41a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f74a890e5903a55326fc797ab3d42687105167292febde50a1e6cf1db7f41a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f74a890e5903a55326fc797ab3d42687105167292febde50a1e6cf1db7f41a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f74a890e5903a55326fc797ab3d42687105167292febde50a1e6cf1db7f41a5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5af25ac388ea3e61a3598de10687a8d6ad7b449a741b2af7a2f673f1e60622b0"}
{"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f74a890e5903a55326fc797ab3d42687105167292febde50a1e6cf1db7f41a5"}
{"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"493f33b4684f80f9ac9cfb88272d45de09f24f01322d9cfb360764c6f37a6582","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"493f33b4684f80f9ac9cfb88272d45de09f24f01322d9cfb360764c6f37a6582","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"493f33b4684f80f9ac9cfb88272d45de09f24f01322d9cfb360764c6f37a6582","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/493f33b4684f80f9ac9cfb88272d45de09f24f01322d9cfb360764c6f37a6582"}
{"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"493f33b4684f80f9ac9cfb88272d45de09f24f01322d9cfb360764c6f37a6582","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"872d6c79b2125d01f658f1782f59aa62e8f2700c76f7dd8c1102f8e3e9631000","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/493f33b4684f80f9ac9cfb88272d45de09f24f01322d9cfb360764c6f37a6582"}
{"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"493f33b4684f80f9ac9cfb88272d45de09f24f01322d9cfb360764c6f37a6582","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["493f33b4684f80f9ac9cfb88272d45de09f24f01322d9cfb360764c6f37a6582"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/872d6c79b2125d01f658f1782f59aa62e8f2700c76f7dd8c1102f8e3e9631000"}
{"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"493f33b4684f80f9ac9cfb88272d45de09f24f01322d9cfb360764c6f37a6582","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"493f33b4684f80f9ac9cfb88272d45de09f24f01322d9cfb360764c6f37a6582","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"493f33b4684f80f9ac9cfb88272d45de09f24f01322d9cfb360764c6f37a6582","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"493f33b4684f80f9ac9cfb88272d45de09f24f01322d9cfb360764c6f37a6582","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/493f33b4684f80f9ac9cfb88272d45de09f24f01322d9cfb360764c6f37a6582"}
{"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"493f33b4684f80f9ac9cfb88272d45de09f24f01322d9cfb360764c6f37a6582","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/493f33b4684f80f9ac9cfb88272d45de09f24f01322d9cfb360764c6f37a6582"}
{"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"493f33b4684f80f9ac9cfb88272d45de09f24f01322d9cfb360764c6f37a6582","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["493f33b4684f80f9ac9cfb88272d45de09f24f01322d9cfb360764c6f37a6582"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"493f33b4684f80f9ac9cfb88272d45de09f24f01322d9cfb360764c6f37a6582","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"493f33b4684f80f9ac9cfb88272d45de09f24f01322d9cfb360764c6f37a6582","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"493f33b4684f80f9ac9cfb88272d45de09f24f01322d9cfb360764c6f37a6582","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"493f33b4684f80f9ac9cfb88272d45de09f24f01322d9cfb360764c6f37a6582","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/493f33b4684f80f9ac9cfb88272d45de09f24f01322d9cfb360764c6f37a6582"}
{"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"493f33b4684f80f9ac9cfb88272d45de09f24f01322d9cfb360764c6f37a6582","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/493f33b4684f80f9ac9cfb88272d45de09f24f01322d9cfb360764c6f37a6582"}
{"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"493f33b4684f80f9ac9cfb88272d45de09f24f01322d9cfb360764c6f37a6582","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["493f33b4684f80f9ac9cfb88272d45de09f24f01322d9cfb360764c6f37a6582"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"493f33b4684f80f9ac9cfb88272d45de09f24f01322d9cfb360764c6f37a6582","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"493f33b4684f80f9ac9cfb88272d45de09f24f01322d9cfb360764c6f37a6582","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"493f33b4684f80f9ac9cfb88272d45de09f24f01322d9cfb360764c6f37a6582","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"587b77012c9a8af1e9972a639b5c14b5be92391d71cd7aa625674d0b445047ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"493f33b4684f80f9ac9cfb88272d45de09f24f01322d9cfb360764c6f37a6582","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/493f33b4684f80f9ac9cfb88272d45de09f24f01322d9cfb360764c6f37a6582"}
{"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"493f33b4684f80f9ac9cfb88272d45de09f24f01322d9cfb360764c6f37a6582","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["493f33b4684f80f9ac9cfb88272d45de09f24f01322d9cfb360764c6f37a6582"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/587b77012c9a8af1e9972a639b5c14b5be92391d71cd7aa625674d0b445047ae"}
{"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"493f33b4684f80f9ac9cfb88272d45de09f24f01322d9cfb360764c6f37a6582","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"493f33b4684f80f9ac9cfb88272d45de09f24f01322d9cfb360764c6f37a6582","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"493f33b4684f80f9ac9cfb88272d45de09f24f01322d9cfb360764c6f37a6582","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"493f33b4684f80f9ac9cfb88272d45de09f24f01322d9cfb360764c6f37a6582","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"493f33b4684f80f9ac9cfb88272d45de09f24f01322d9cfb360764c6f37a6582","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/493f33b4684f80f9ac9cfb88272d45de09f24f01322d9cfb360764c6f37a6582"}
{"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"493f33b4684f80f9ac9cfb88272d45de09f24f01322d9cfb360764c6f37a6582","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/493f33b4684f80f9ac9cfb88272d45de09f24f01322d9cfb360764c6f37a6582"}
{"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c901ccabfb5d0f2861f521813833ee741d9884d40db40279cd7bc18fb9ee3e05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c901ccabfb5d0f2861f521813833ee741d9884d40db40279cd7bc18fb9ee3e05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c901ccabfb5d0f2861f521813833ee741d9884d40db40279cd7bc18fb9ee3e05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c901ccabfb5d0f2861f521813833ee741d9884d40db40279cd7bc18fb9ee3e05","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c901ccabfb5d0f2861f521813833ee741d9884d40db40279cd7bc18fb9ee3e05"}
{"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"493f33b4684f80f9ac9cfb88272d45de09f24f01322d9cfb360764c6f37a6582","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["493f33b4684f80f9ac9cfb88272d45de09f24f01322d9cfb360764c6f37a6582"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c901ccabfb5d0f2861f521813833ee741d9884d40db40279cd7bc18fb9ee3e05"}
{"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"493f33b4684f80f9ac9cfb88272d45de09f24f01322d9cfb360764c6f37a6582","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a286657a61605a6c4db687cecdec77fb08d52d653428a8ecc52e94838d856af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a286657a61605a6c4db687cecdec77fb08d52d653428a8ecc52e94838d856af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c901ccabfb5d0f2861f521813833ee741d9884d40db40279cd7bc18fb9ee3e05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c901ccabfb5d0f2861f521813833ee741d9884d40db40279cd7bc18fb9ee3e05"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a286657a61605a6c4db687cecdec77fb08d52d653428a8ecc52e94838d856af"}
{"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c901ccabfb5d0f2861f521813833ee741d9884d40db40279cd7bc18fb9ee3e05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"493f33b4684f80f9ac9cfb88272d45de09f24f01322d9cfb360764c6f37a6582","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/493f33b4684f80f9ac9cfb88272d45de09f24f01322d9cfb360764c6f37a6582"}
{"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"493f33b4684f80f9ac9cfb88272d45de09f24f01322d9cfb360764c6f37a6582","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a286657a61605a6c4db687cecdec77fb08d52d653428a8ecc52e94838d856af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c901ccabfb5d0f2861f521813833ee741d9884d40db40279cd7bc18fb9ee3e05","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"493f33b4684f80f9ac9cfb88272d45de09f24f01322d9cfb360764c6f37a6582","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["493f33b4684f80f9ac9cfb88272d45de09f24f01322d9cfb360764c6f37a6582"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"493f33b4684f80f9ac9cfb88272d45de09f24f01322d9cfb360764c6f37a6582","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3b4412331fd14df5e1ce110c2fa077877c535581d5178269a914e1a05b37c55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a286657a61605a6c4db687cecdec77fb08d52d653428a8ecc52e94838d856af","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a286657a61605a6c4db687cecdec77fb08d52d653428a8ecc52e94838d856af"}
{"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"493f33b4684f80f9ac9cfb88272d45de09f24f01322d9cfb360764c6f37a6582","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["493f33b4684f80f9ac9cfb88272d45de09f24f01322d9cfb360764c6f37a6582"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"493f33b4684f80f9ac9cfb88272d45de09f24f01322d9cfb360764c6f37a6582","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"493f33b4684f80f9ac9cfb88272d45de09f24f01322d9cfb360764c6f37a6582\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"493f33b4684f80f9ac9cfb88272d45de09f24f01322d9cfb360764c6f37a6582","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f3dcb001ca1403d3b99f09b881832176c6ddeca2506eac67e1366120416bbe5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"493f33b4684f80f9ac9cfb88272d45de09f24f01322d9cfb360764c6f37a6582","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a286657a61605a6c4db687cecdec77fb08d52d653428a8ecc52e94838d856af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a286657a61605a6c4db687cecdec77fb08d52d653428a8ecc52e94838d856af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c901ccabfb5d0f2861f521813833ee741d9884d40db40279cd7bc18fb9ee3e05"}
{"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a286657a61605a6c4db687cecdec77fb08d52d653428a8ecc52e94838d856af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40e3d5353e8d81831797688a39423707c6bf92a8999fa3557bb5c03dd7161fa0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a286657a61605a6c4db687cecdec77fb08d52d653428a8ecc52e94838d856af","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/493f33b4684f80f9ac9cfb88272d45de09f24f01322d9cfb360764c6f37a6582"}
{"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3b4412331fd14df5e1ce110c2fa077877c535581d5178269a914e1a05b37c55"}
{"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f3dcb001ca1403d3b99f09b881832176c6ddeca2506eac67e1366120416bbe5"}
{"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e163a20d14a3d699d5396262817d2f024272ac784fca95c9b82c4405e7b9c134","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40e3d5353e8d81831797688a39423707c6bf92a8999fa3557bb5c03dd7161fa0"}
{"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"669179458dfa21c2fd483aae8487fe274e4175fe64d4582d0d8cd8032cba66e6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a286657a61605a6c4db687cecdec77fb08d52d653428a8ecc52e94838d856af"}
{"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e163a20d14a3d699d5396262817d2f024272ac784fca95c9b82c4405e7b9c134"}
{"level":"debug","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa8785305a08abe890ff7dda026ae9e6cebf659c57e7cbbd766e12c5e21bc37e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:04:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/669179458dfa21c2fd483aae8487fe274e4175fe64d4582d0d8cd8032cba66e6"}
{"level":"info","ts":"2026-07-06T20:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa8785305a08abe890ff7dda026ae9e6cebf659c57e7cbbd766e12c5e21bc37e"}
{"level":"debug","ts":"2026-07-06T20:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df3a62cb7774afc461b48b0ab92135491c58da3e72d9b9f2c5a6a5906c65d847","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33920d92b9254c05d22ba00c95567464574dd1863392cbae239205cf6209f937","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df3a62cb7774afc461b48b0ab92135491c58da3e72d9b9f2c5a6a5906c65d847"}
{"level":"debug","ts":"2026-07-06T20:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23887d458d12974eb16a81c1d58f9b00fabb401daabfb13da6b426f25d5bfafc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33920d92b9254c05d22ba00c95567464574dd1863392cbae239205cf6209f937"}
{"level":"info","ts":"2026-07-06T20:04:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23887d458d12974eb16a81c1d58f9b00fabb401daabfb13da6b426f25d5bfafc"}
{"level":"info","ts":"2026-07-06T20:04:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0be33d31-ef42-44a5-90f4-949135a58e17","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:51802","PortSpecifier":{"PortValue":51802}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0be33d31-ef42-44a5-90f4-949135a58e17","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e1f716.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:04:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0be33d31-ef42-44a5-90f4-949135a58e17","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:51802","PortSpecifier":{"PortValue":51802}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368272,"nanos":680749198},"http":{"id":"0be33d31-ef42-44a5-90f4-949135a58e17","method":"POST","headers":{":authority":"e2e-shared-a-e1f716.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:04:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0be33d31-ef42-44a5-90f4-949135a58e17","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:04:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0be33d31-ef42-44a5-90f4-949135a58e17","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a5d356b1-3180-412a-8dea-76750349e251","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=57fd0aa1-6d66-4aee-9de0-7b7661d60c4b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60474a7ad191"]}}
{"level":"debug","ts":"2026-07-06T20:04:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0be33d31-ef42-44a5-90f4-949135a58e17","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60474a7ad191"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=57fd0aa1-6d66-4aee-9de0-7b7661d60c4b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a5d356b1-3180-412a-8dea-76750349e251","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"aa8785305a08abe890ff7dda026ae9e6cebf659c57e7cbbd766e12c5e21bc37e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e1f716.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:04:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0be33d31-ef42-44a5-90f4-949135a58e17","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:04:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0be33d31-ef42-44a5-90f4-949135a58e17","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:04:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0be33d31-ef42-44a5-90f4-949135a58e17","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e1f716/sub-test-model-e1f716\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:04:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0be33d31-ef42-44a5-90f4-949135a58e17","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:04:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0be33d31-ef42-44a5-90f4-949135a58e17","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:04:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0be33d31-ef42-44a5-90f4-949135a58e17","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:04:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0be33d31-ef42-44a5-90f4-949135a58e17","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:04:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0be33d31-ef42-44a5-90f4-949135a58e17","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:04:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7f86cbca-dfe1-4da6-a61d-9aa47428495d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:58224","PortSpecifier":{"PortValue":58224}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7f86cbca-dfe1-4da6-a61d-9aa47428495d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-035267.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:04:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7f86cbca-dfe1-4da6-a61d-9aa47428495d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:58224","PortSpecifier":{"PortValue":58224}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368272,"nanos":721940232},"http":{"id":"7f86cbca-dfe1-4da6-a61d-9aa47428495d","method":"POST","headers":{":authority":"e2e-shared-b-035267.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:04:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7f86cbca-dfe1-4da6-a61d-9aa47428495d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:04:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7f86cbca-dfe1-4da6-a61d-9aa47428495d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a5d356b1-3180-412a-8dea-76750349e251","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=57fd0aa1-6d66-4aee-9de0-7b7661d60c4b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60474a7ad191"]}}
{"level":"debug","ts":"2026-07-06T20:04:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7f86cbca-dfe1-4da6-a61d-9aa47428495d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60474a7ad191"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=57fd0aa1-6d66-4aee-9de0-7b7661d60c4b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a5d356b1-3180-412a-8dea-76750349e251","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"40e3d5353e8d81831797688a39423707c6bf92a8999fa3557bb5c03dd7161fa0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-035267.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:04:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7f86cbca-dfe1-4da6-a61d-9aa47428495d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:04:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7f86cbca-dfe1-4da6-a61d-9aa47428495d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:04:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7f86cbca-dfe1-4da6-a61d-9aa47428495d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-035267/sub-test-model-035267\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:04:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7f86cbca-dfe1-4da6-a61d-9aa47428495d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:04:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7f86cbca-dfe1-4da6-a61d-9aa47428495d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:04:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7f86cbca-dfe1-4da6-a61d-9aa47428495d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T20:04:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7f86cbca-dfe1-4da6-a61d-9aa47428495d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:04:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7f86cbca-dfe1-4da6-a61d-9aa47428495d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:04:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aa11be2d-f04a-448c-9bc8-3e4209857ef7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:51818","PortSpecifier":{"PortValue":51818}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"aa11be2d-f04a-448c-9bc8-3e4209857ef7","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-e1f716.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:04:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aa11be2d-f04a-448c-9bc8-3e4209857ef7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:51818","PortSpecifier":{"PortValue":51818}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368272,"nanos":763817589},"http":{"id":"aa11be2d-f04a-448c-9bc8-3e4209857ef7","method":"GET","headers":{":authority":"e2e-shared-a-e1f716.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:04:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"aa11be2d-f04a-448c-9bc8-3e4209857ef7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1C2cwkKUplDfAOb7H_YtSbzYCeZWVSlJ7mrpm10Yz69MoNjbFY4tPWiHpoDNJ"}
{"level":"debug","ts":"2026-07-06T20:04:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"aa11be2d-f04a-448c-9bc8-3e4209857ef7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e1f716.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1C2cwkKUplDfAOb7H_YtSbzYCeZWVSlJ7mrpm10Yz69MoNjbFY4tPWiHpoDNJ\"}"}
{"level":"debug","ts":"2026-07-06T20:04:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"aa11be2d-f04a-448c-9bc8-3e4209857ef7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e1f716.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a4a88e86-c67a-4f37-b30b-d583987b52c3","keyName":"e2e-sub-iso-e59a64","subscription":"e2e-a-only-e3fbfb","tenant":"e2e-shared-a-e1f716","userId":"a4a88e86-c67a-4f37-b30b-d583987b52c3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:04:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"aa11be2d-f04a-448c-9bc8-3e4209857ef7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:04:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aa11be2d-f04a-448c-9bc8-3e4209857ef7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:04:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aa11be2d-f04a-448c-9bc8-3e4209857ef7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:04:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aa11be2d-f04a-448c-9bc8-3e4209857ef7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e1f716/sub-test-model-e1f716\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:04:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aa11be2d-f04a-448c-9bc8-3e4209857ef7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:04:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aa11be2d-f04a-448c-9bc8-3e4209857ef7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-e3fbfb"}
{"level":"debug","ts":"2026-07-06T20:04:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aa11be2d-f04a-448c-9bc8-3e4209857ef7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:04:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"aa11be2d-f04a-448c-9bc8-3e4209857ef7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-06T20:04:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aa11be2d-f04a-448c-9bc8-3e4209857ef7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:04:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aa11be2d-f04a-448c-9bc8-3e4209857ef7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:04:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cbb24647-3932-4d74-a115-e493bdf64c71","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:58228","PortSpecifier":{"PortValue":58228}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cbb24647-3932-4d74-a115-e493bdf64c71","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-035267.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:04:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cbb24647-3932-4d74-a115-e493bdf64c71","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:58228","PortSpecifier":{"PortValue":58228}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368272,"nanos":794533180},"http":{"id":"cbb24647-3932-4d74-a115-e493bdf64c71","method":"GET","headers":{":authority":"e2e-shared-b-035267.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:04:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cbb24647-3932-4d74-a115-e493bdf64c71","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ryCMJSRrf180fEiN_YR14vhb0Lf4jaGmWxQT33OfqdiTtrI9Ssu5ut01qgJN"}
{"level":"debug","ts":"2026-07-06T20:04:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cbb24647-3932-4d74-a115-e493bdf64c71","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-035267.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ryCMJSRrf180fEiN_YR14vhb0Lf4jaGmWxQT33OfqdiTtrI9Ssu5ut01qgJN\"}"}
{"level":"debug","ts":"2026-07-06T20:04:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cbb24647-3932-4d74-a115-e493bdf64c71","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-035267.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2a04db7b-45c5-489a-9b48-6d14e4524637","keyName":"e2e-sub-iso-22e511","subscription":"e2e-b-only-e3fbfb","tenant":"e2e-shared-b-035267","userId":"2a04db7b-45c5-489a-9b48-6d14e4524637","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:04:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cbb24647-3932-4d74-a115-e493bdf64c71","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:04:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cbb24647-3932-4d74-a115-e493bdf64c71","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:04:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cbb24647-3932-4d74-a115-e493bdf64c71","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:04:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cbb24647-3932-4d74-a115-e493bdf64c71","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-035267/sub-test-model-035267\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:04:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cbb24647-3932-4d74-a115-e493bdf64c71","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:04:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cbb24647-3932-4d74-a115-e493bdf64c71","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-e3fbfb"}
{"level":"debug","ts":"2026-07-06T20:04:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cbb24647-3932-4d74-a115-e493bdf64c71","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:04:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cbb24647-3932-4d74-a115-e493bdf64c71","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-06T20:04:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cbb24647-3932-4d74-a115-e493bdf64c71","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:04:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cbb24647-3932-4d74-a115-e493bdf64c71","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3813972f-7131-4088-a58a-d85eb12f6e69","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:32984","PortSpecifier":{"PortValue":32984}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3813972f-7131-4088-a58a-d85eb12f6e69","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e1f716.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3813972f-7131-4088-a58a-d85eb12f6e69","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:32984","PortSpecifier":{"PortValue":32984}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368280,"nanos":707293493},"http":{"id":"3813972f-7131-4088-a58a-d85eb12f6e69","method":"POST","headers":{":authority":"e2e-shared-a-e1f716.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3813972f-7131-4088-a58a-d85eb12f6e69","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3813972f-7131-4088-a58a-d85eb12f6e69","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a5d356b1-3180-412a-8dea-76750349e251","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=57fd0aa1-6d66-4aee-9de0-7b7661d60c4b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60474a7ad191"]}}
{"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3813972f-7131-4088-a58a-d85eb12f6e69","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60474a7ad191"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=57fd0aa1-6d66-4aee-9de0-7b7661d60c4b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a5d356b1-3180-412a-8dea-76750349e251","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"aa8785305a08abe890ff7dda026ae9e6cebf659c57e7cbbd766e12c5e21bc37e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e1f716.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3813972f-7131-4088-a58a-d85eb12f6e69","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3813972f-7131-4088-a58a-d85eb12f6e69","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3813972f-7131-4088-a58a-d85eb12f6e69","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e1f716/sub-test-model-e1f716\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3813972f-7131-4088-a58a-d85eb12f6e69","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3813972f-7131-4088-a58a-d85eb12f6e69","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3813972f-7131-4088-a58a-d85eb12f6e69","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3813972f-7131-4088-a58a-d85eb12f6e69","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3813972f-7131-4088-a58a-d85eb12f6e69","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a255cda9-1d6a-4ce6-b1bd-23730fa03b4d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:56092","PortSpecifier":{"PortValue":56092}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a255cda9-1d6a-4ce6-b1bd-23730fa03b4d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-035267.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a255cda9-1d6a-4ce6-b1bd-23730fa03b4d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:56092","PortSpecifier":{"PortValue":56092}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368280,"nanos":742262029},"http":{"id":"a255cda9-1d6a-4ce6-b1bd-23730fa03b4d","method":"POST","headers":{":authority":"e2e-shared-b-035267.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a255cda9-1d6a-4ce6-b1bd-23730fa03b4d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a255cda9-1d6a-4ce6-b1bd-23730fa03b4d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a5d356b1-3180-412a-8dea-76750349e251","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=57fd0aa1-6d66-4aee-9de0-7b7661d60c4b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60474a7ad191"]}}
{"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a255cda9-1d6a-4ce6-b1bd-23730fa03b4d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60474a7ad191"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=57fd0aa1-6d66-4aee-9de0-7b7661d60c4b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a5d356b1-3180-412a-8dea-76750349e251","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"40e3d5353e8d81831797688a39423707c6bf92a8999fa3557bb5c03dd7161fa0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-035267.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a255cda9-1d6a-4ce6-b1bd-23730fa03b4d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a255cda9-1d6a-4ce6-b1bd-23730fa03b4d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a255cda9-1d6a-4ce6-b1bd-23730fa03b4d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-035267/sub-test-model-035267\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a255cda9-1d6a-4ce6-b1bd-23730fa03b4d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a255cda9-1d6a-4ce6-b1bd-23730fa03b4d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a255cda9-1d6a-4ce6-b1bd-23730fa03b4d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a255cda9-1d6a-4ce6-b1bd-23730fa03b4d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a255cda9-1d6a-4ce6-b1bd-23730fa03b4d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6ed14a5d-eeb1-4787-89a2-98a220a2b475","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:33000","PortSpecifier":{"PortValue":33000}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6ed14a5d-eeb1-4787-89a2-98a220a2b475","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-e1f716.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6ed14a5d-eeb1-4787-89a2-98a220a2b475","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:33000","PortSpecifier":{"PortValue":33000}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368280,"nanos":779258850},"http":{"id":"6ed14a5d-eeb1-4787-89a2-98a220a2b475","method":"POST","headers":{":authority":"e2e-shared-a-e1f716.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6ed14a5d-eeb1-4787-89a2-98a220a2b475","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-27q1WkFbpQKYgKM6_GJJQfMhYqIo8HavKamDPFkwiy4fWBaEh0T5v3fvBFWE"}
{"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6ed14a5d-eeb1-4787-89a2-98a220a2b475","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e1f716.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-27q1WkFbpQKYgKM6_GJJQfMhYqIo8HavKamDPFkwiy4fWBaEh0T5v3fvBFWE\"}"}
{"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6ed14a5d-eeb1-4787-89a2-98a220a2b475","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e1f716.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3bcd180f-3f02-49f2-9504-d201d8e27d2d","keyName":"e2e-sub-iso-b9a926","subscription":"e2e-shared-sub-7bf829","tenant":"e2e-shared-a-e1f716","userId":"3bcd180f-3f02-49f2-9504-d201d8e27d2d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6ed14a5d-eeb1-4787-89a2-98a220a2b475","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ed14a5d-eeb1-4787-89a2-98a220a2b475","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ed14a5d-eeb1-4787-89a2-98a220a2b475","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ed14a5d-eeb1-4787-89a2-98a220a2b475","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e1f716/sub-test-model-e1f716\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ed14a5d-eeb1-4787-89a2-98a220a2b475","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ed14a5d-eeb1-4787-89a2-98a220a2b475","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-7bf829"}
{"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ed14a5d-eeb1-4787-89a2-98a220a2b475","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6ed14a5d-eeb1-4787-89a2-98a220a2b475","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6ed14a5d-eeb1-4787-89a2-98a220a2b475","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6ed14a5d-eeb1-4787-89a2-98a220a2b475","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"998c6782-9172-467c-9376-211e8a4e2ab8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:56096","PortSpecifier":{"PortValue":56096}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"998c6782-9172-467c-9376-211e8a4e2ab8","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-035267.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"998c6782-9172-467c-9376-211e8a4e2ab8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:56096","PortSpecifier":{"PortValue":56096}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368280,"nanos":809800558},"http":{"id":"998c6782-9172-467c-9376-211e8a4e2ab8","method":"POST","headers":{":authority":"e2e-shared-b-035267.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"998c6782-9172-467c-9376-211e8a4e2ab8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-dVxeL0ewckAyz54J_troLbtBkFbEwcQuIRHXrhgzLjtliT1TGnt6BLfHtsiE"}
{"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"998c6782-9172-467c-9376-211e8a4e2ab8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-035267.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-dVxeL0ewckAyz54J_troLbtBkFbEwcQuIRHXrhgzLjtliT1TGnt6BLfHtsiE\"}"}
{"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"998c6782-9172-467c-9376-211e8a4e2ab8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-035267.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"53ca74ba-029f-4286-9f03-83a3f0887733","keyName":"e2e-sub-iso-ee2920","subscription":"e2e-shared-sub-7bf829","tenant":"e2e-shared-b-035267","userId":"53ca74ba-029f-4286-9f03-83a3f0887733","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"998c6782-9172-467c-9376-211e8a4e2ab8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"998c6782-9172-467c-9376-211e8a4e2ab8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"998c6782-9172-467c-9376-211e8a4e2ab8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"998c6782-9172-467c-9376-211e8a4e2ab8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-035267/sub-test-model-035267\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"998c6782-9172-467c-9376-211e8a4e2ab8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"998c6782-9172-467c-9376-211e8a4e2ab8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"998c6782-9172-467c-9376-211e8a4e2ab8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-7bf829"}
{"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"998c6782-9172-467c-9376-211e8a4e2ab8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"998c6782-9172-467c-9376-211e8a4e2ab8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:04:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"998c6782-9172-467c-9376-211e8a4e2ab8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:04:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b3b4412331fd14df5e1ce110c2fa077877c535581d5178269a914e1a05b37c55"}
{"level":"info","ts":"2026-07-06T20:04:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/872d6c79b2125d01f658f1782f59aa62e8f2700c76f7dd8c1102f8e3e9631000"}
{"level":"info","ts":"2026-07-06T20:04:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5f3dcb001ca1403d3b99f09b881832176c6ddeca2506eac67e1366120416bbe5"}
{"level":"info","ts":"2026-07-06T20:04:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c1b5b8b8d64f721c804ae1a30c98fc0d2fb9732fadbe744451b7f8ed165199c8"}
{"level":"info","ts":"2026-07-06T20:04:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/df3a62cb7774afc461b48b0ab92135491c58da3e72d9b9f2c5a6a5906c65d847"}
{"level":"info","ts":"2026-07-06T20:04:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/669179458dfa21c2fd483aae8487fe274e4175fe64d4582d0d8cd8032cba66e6"}
{"level":"info","ts":"2026-07-06T20:04:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c901ccabfb5d0f2861f521813833ee741d9884d40db40279cd7bc18fb9ee3e05"}
{"level":"info","ts":"2026-07-06T20:04:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dd75f7e87f6b5b8245c31a4ef7d2ea19bed0dbb521dc8ee570c1793934d40b90"}
{"level":"info","ts":"2026-07-06T20:04:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/33920d92b9254c05d22ba00c95567464574dd1863392cbae239205cf6209f937"}
{"level":"info","ts":"2026-07-06T20:04:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/493f33b4684f80f9ac9cfb88272d45de09f24f01322d9cfb360764c6f37a6582"}
{"level":"info","ts":"2026-07-06T20:04:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6f41f34ba9534e6c7d8aab3b448d83d46d5f3479d35a789e76cc1362dd4de859"}
{"level":"info","ts":"2026-07-06T20:04:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/23887d458d12974eb16a81c1d58f9b00fabb401daabfb13da6b426f25d5bfafc"}
{"level":"info","ts":"2026-07-06T20:04:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e163a20d14a3d699d5396262817d2f024272ac784fca95c9b82c4405e7b9c134"}
{"level":"info","ts":"2026-07-06T20:04:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5af25ac388ea3e61a3598de10687a8d6ad7b449a741b2af7a2f673f1e60622b0"}
{"level":"info","ts":"2026-07-06T20:04:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/de8f59bfa8156d990446a656d8ee50c0cc4ecc88c6097044357143fd88c028a0"}
{"level":"info","ts":"2026-07-06T20:04:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6f74a890e5903a55326fc797ab3d42687105167292febde50a1e6cf1db7f41a5"}
{"level":"debug","ts":"2026-07-06T20:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3da8387e57c914b6d984a3f13179a926ed680f8655fdfa9eda72393f5810c10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3da8387e57c914b6d984a3f13179a926ed680f8655fdfa9eda72393f5810c10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e3da8387e57c914b6d984a3f13179a926ed680f8655fdfa9eda72393f5810c10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e3da8387e57c914b6d984a3f13179a926ed680f8655fdfa9eda72393f5810c10","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3da8387e57c914b6d984a3f13179a926ed680f8655fdfa9eda72393f5810c10"}
{"level":"debug","ts":"2026-07-06T20:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e3da8387e57c914b6d984a3f13179a926ed680f8655fdfa9eda72393f5810c10","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3da8387e57c914b6d984a3f13179a926ed680f8655fdfa9eda72393f5810c10"}
{"level":"debug","ts":"2026-07-06T20:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3da8387e57c914b6d984a3f13179a926ed680f8655fdfa9eda72393f5810c10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e3da8387e57c914b6d984a3f13179a926ed680f8655fdfa9eda72393f5810c10"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3da8387e57c914b6d984a3f13179a926ed680f8655fdfa9eda72393f5810c10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"202e86462b4a9055ac07849a602d5adc57fa7f0b716c8fafc9d7f4606f5f7610","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"202e86462b4a9055ac07849a602d5adc57fa7f0b716c8fafc9d7f4606f5f7610","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e3da8387e57c914b6d984a3f13179a926ed680f8655fdfa9eda72393f5810c10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"202e86462b4a9055ac07849a602d5adc57fa7f0b716c8fafc9d7f4606f5f7610","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/202e86462b4a9055ac07849a602d5adc57fa7f0b716c8fafc9d7f4606f5f7610"}
{"level":"debug","ts":"2026-07-06T20:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"202e86462b4a9055ac07849a602d5adc57fa7f0b716c8fafc9d7f4606f5f7610","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["202e86462b4a9055ac07849a602d5adc57fa7f0b716c8fafc9d7f4606f5f7610"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3da8387e57c914b6d984a3f13179a926ed680f8655fdfa9eda72393f5810c10"}
{"level":"info","ts":"2026-07-06T20:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"202e86462b4a9055ac07849a602d5adc57fa7f0b716c8fafc9d7f4606f5f7610","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"202e86462b4a9055ac07849a602d5adc57fa7f0b716c8fafc9d7f4606f5f7610","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/202e86462b4a9055ac07849a602d5adc57fa7f0b716c8fafc9d7f4606f5f7610"}
{"level":"info","ts":"2026-07-06T20:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"202e86462b4a9055ac07849a602d5adc57fa7f0b716c8fafc9d7f4606f5f7610","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"202e86462b4a9055ac07849a602d5adc57fa7f0b716c8fafc9d7f4606f5f7610","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"202e86462b4a9055ac07849a602d5adc57fa7f0b716c8fafc9d7f4606f5f7610","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/202e86462b4a9055ac07849a602d5adc57fa7f0b716c8fafc9d7f4606f5f7610"}
{"level":"debug","ts":"2026-07-06T20:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"10ab7997502692fb8bfa82ad74bbb1773ee0111d4792eb020da3fc74ec8fcce6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/202e86462b4a9055ac07849a602d5adc57fa7f0b716c8fafc9d7f4606f5f7610"}
{"level":"info","ts":"2026-07-06T20:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"10ab7997502692fb8bfa82ad74bbb1773ee0111d4792eb020da3fc74ec8fcce6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"202e86462b4a9055ac07849a602d5adc57fa7f0b716c8fafc9d7f4606f5f7610","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["202e86462b4a9055ac07849a602d5adc57fa7f0b716c8fafc9d7f4606f5f7610"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10ab7997502692fb8bfa82ad74bbb1773ee0111d4792eb020da3fc74ec8fcce6"}
{"level":"info","ts":"2026-07-06T20:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"202e86462b4a9055ac07849a602d5adc57fa7f0b716c8fafc9d7f4606f5f7610","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"10ab7997502692fb8bfa82ad74bbb1773ee0111d4792eb020da3fc74ec8fcce6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10ab7997502692fb8bfa82ad74bbb1773ee0111d4792eb020da3fc74ec8fcce6"}
{"level":"info","ts":"2026-07-06T20:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"10ab7997502692fb8bfa82ad74bbb1773ee0111d4792eb020da3fc74ec8fcce6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"202e86462b4a9055ac07849a602d5adc57fa7f0b716c8fafc9d7f4606f5f7610","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/202e86462b4a9055ac07849a602d5adc57fa7f0b716c8fafc9d7f4606f5f7610"}
{"level":"info","ts":"2026-07-06T20:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"202e86462b4a9055ac07849a602d5adc57fa7f0b716c8fafc9d7f4606f5f7610","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"10ab7997502692fb8bfa82ad74bbb1773ee0111d4792eb020da3fc74ec8fcce6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"202e86462b4a9055ac07849a602d5adc57fa7f0b716c8fafc9d7f4606f5f7610","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["202e86462b4a9055ac07849a602d5adc57fa7f0b716c8fafc9d7f4606f5f7610"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10ab7997502692fb8bfa82ad74bbb1773ee0111d4792eb020da3fc74ec8fcce6"}
{"level":"info","ts":"2026-07-06T20:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"202e86462b4a9055ac07849a602d5adc57fa7f0b716c8fafc9d7f4606f5f7610","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"10ab7997502692fb8bfa82ad74bbb1773ee0111d4792eb020da3fc74ec8fcce6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["10ab7997502692fb8bfa82ad74bbb1773ee0111d4792eb020da3fc74ec8fcce6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"10ab7997502692fb8bfa82ad74bbb1773ee0111d4792eb020da3fc74ec8fcce6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42974c8df0704b09e3878556fa0217110a9f2f94c1bf4eaa27ca80dbd2df4bfb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/202e86462b4a9055ac07849a602d5adc57fa7f0b716c8fafc9d7f4606f5f7610"}
{"level":"info","ts":"2026-07-06T20:04:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42974c8df0704b09e3878556fa0217110a9f2f94c1bf4eaa27ca80dbd2df4bfb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"202e86462b4a9055ac07849a602d5adc57fa7f0b716c8fafc9d7f4606f5f7610","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"10ab7997502692fb8bfa82ad74bbb1773ee0111d4792eb020da3fc74ec8fcce6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42974c8df0704b09e3878556fa0217110a9f2f94c1bf4eaa27ca80dbd2df4bfb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42974c8df0704b09e3878556fa0217110a9f2f94c1bf4eaa27ca80dbd2df4bfb"}
{"level":"info","ts":"2026-07-06T20:04:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42974c8df0704b09e3878556fa0217110a9f2f94c1bf4eaa27ca80dbd2df4bfb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42974c8df0704b09e3878556fa0217110a9f2f94c1bf4eaa27ca80dbd2df4bfb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42974c8df0704b09e3878556fa0217110a9f2f94c1bf4eaa27ca80dbd2df4bfb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T20:04:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"42974c8df0704b09e3878556fa0217110a9f2f94c1bf4eaa27ca80dbd2df4bfb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"42974c8df0704b09e3878556fa0217110a9f2f94c1bf4eaa27ca80dbd2df4bfb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:04:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42974c8df0704b09e3878556fa0217110a9f2f94c1bf4eaa27ca80dbd2df4bfb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42974c8df0704b09e3878556fa0217110a9f2f94c1bf4eaa27ca80dbd2df4bfb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/202e86462b4a9055ac07849a602d5adc57fa7f0b716c8fafc9d7f4606f5f7610"}
{"level":"info","ts":"2026-07-06T20:04:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42974c8df0704b09e3878556fa0217110a9f2f94c1bf4eaa27ca80dbd2df4bfb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42974c8df0704b09e3878556fa0217110a9f2f94c1bf4eaa27ca80dbd2df4bfb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42974c8df0704b09e3878556fa0217110a9f2f94c1bf4eaa27ca80dbd2df4bfb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10ab7997502692fb8bfa82ad74bbb1773ee0111d4792eb020da3fc74ec8fcce6"}
{"level":"error","ts":"2026-07-06T20:04:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"42974c8df0704b09e3878556fa0217110a9f2f94c1bf4eaa27ca80dbd2df4bfb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"42974c8df0704b09e3878556fa0217110a9f2f94c1bf4eaa27ca80dbd2df4bfb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:04:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42974c8df0704b09e3878556fa0217110a9f2f94c1bf4eaa27ca80dbd2df4bfb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42974c8df0704b09e3878556fa0217110a9f2f94c1bf4eaa27ca80dbd2df4bfb"}
{"level":"info","ts":"2026-07-06T20:04:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42974c8df0704b09e3878556fa0217110a9f2f94c1bf4eaa27ca80dbd2df4bfb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fff1d9d9ed10c87624eb7f0a63c02edef9402e389de41761d0f22d81ec4e3a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fff1d9d9ed10c87624eb7f0a63c02edef9402e389de41761d0f22d81ec4e3a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42974c8df0704b09e3878556fa0217110a9f2f94c1bf4eaa27ca80dbd2df4bfb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42974c8df0704b09e3878556fa0217110a9f2f94c1bf4eaa27ca80dbd2df4bfb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fff1d9d9ed10c87624eb7f0a63c02edef9402e389de41761d0f22d81ec4e3a4"}
{"level":"info","ts":"2026-07-06T20:04:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42974c8df0704b09e3878556fa0217110a9f2f94c1bf4eaa27ca80dbd2df4bfb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44d5a1f2ebde73e06d9573326543ff88130f25e85bf3495a520eabb14c34750a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42974c8df0704b09e3878556fa0217110a9f2f94c1bf4eaa27ca80dbd2df4bfb"}
{"level":"info","ts":"2026-07-06T20:04:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44d5a1f2ebde73e06d9573326543ff88130f25e85bf3495a520eabb14c34750a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fff1d9d9ed10c87624eb7f0a63c02edef9402e389de41761d0f22d81ec4e3a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6fff1d9d9ed10c87624eb7f0a63c02edef9402e389de41761d0f22d81ec4e3a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44d5a1f2ebde73e06d9573326543ff88130f25e85bf3495a520eabb14c34750a"}
{"level":"info","ts":"2026-07-06T20:04:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fff1d9d9ed10c87624eb7f0a63c02edef9402e389de41761d0f22d81ec4e3a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42974c8df0704b09e3878556fa0217110a9f2f94c1bf4eaa27ca80dbd2df4bfb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44d5a1f2ebde73e06d9573326543ff88130f25e85bf3495a520eabb14c34750a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["44d5a1f2ebde73e06d9573326543ff88130f25e85bf3495a520eabb14c34750a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44d5a1f2ebde73e06d9573326543ff88130f25e85bf3495a520eabb14c34750a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fff1d9d9ed10c87624eb7f0a63c02edef9402e389de41761d0f22d81ec4e3a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fff1d9d9ed10c87624eb7f0a63c02edef9402e389de41761d0f22d81ec4e3a4"}
{"level":"info","ts":"2026-07-06T20:04:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fff1d9d9ed10c87624eb7f0a63c02edef9402e389de41761d0f22d81ec4e3a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44d5a1f2ebde73e06d9573326543ff88130f25e85bf3495a520eabb14c34750a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4dd2f6ada48b63f6212a40fd8e7be79f33eeac2b4dc6b670c3c2d96a5eba0424","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42974c8df0704b09e3878556fa0217110a9f2f94c1bf4eaa27ca80dbd2df4bfb"}
{"level":"info","ts":"2026-07-06T20:04:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4dd2f6ada48b63f6212a40fd8e7be79f33eeac2b4dc6b670c3c2d96a5eba0424","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fff1d9d9ed10c87624eb7f0a63c02edef9402e389de41761d0f22d81ec4e3a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6fff1d9d9ed10c87624eb7f0a63c02edef9402e389de41761d0f22d81ec4e3a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44d5a1f2ebde73e06d9573326543ff88130f25e85bf3495a520eabb14c34750a"}
{"level":"info","ts":"2026-07-06T20:04:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fff1d9d9ed10c87624eb7f0a63c02edef9402e389de41761d0f22d81ec4e3a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4dd2f6ada48b63f6212a40fd8e7be79f33eeac2b4dc6b670c3c2d96a5eba0424","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fff1d9d9ed10c87624eb7f0a63c02edef9402e389de41761d0f22d81ec4e3a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fff1d9d9ed10c87624eb7f0a63c02edef9402e389de41761d0f22d81ec4e3a4"}
{"level":"info","ts":"2026-07-06T20:04:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fff1d9d9ed10c87624eb7f0a63c02edef9402e389de41761d0f22d81ec4e3a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4dd2f6ada48b63f6212a40fd8e7be79f33eeac2b4dc6b670c3c2d96a5eba0424","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4dd2f6ada48b63f6212a40fd8e7be79f33eeac2b4dc6b670c3c2d96a5eba0424","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fff1d9d9ed10c87624eb7f0a63c02edef9402e389de41761d0f22d81ec4e3a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6fff1d9d9ed10c87624eb7f0a63c02edef9402e389de41761d0f22d81ec4e3a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dd2f6ada48b63f6212a40fd8e7be79f33eeac2b4dc6b670c3c2d96a5eba0424"}
{"level":"info","ts":"2026-07-06T20:04:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fff1d9d9ed10c87624eb7f0a63c02edef9402e389de41761d0f22d81ec4e3a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4dd2f6ada48b63f6212a40fd8e7be79f33eeac2b4dc6b670c3c2d96a5eba0424","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4dd2f6ada48b63f6212a40fd8e7be79f33eeac2b4dc6b670c3c2d96a5eba0424"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fff1d9d9ed10c87624eb7f0a63c02edef9402e389de41761d0f22d81ec4e3a4"}
{"level":"info","ts":"2026-07-06T20:04:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4dd2f6ada48b63f6212a40fd8e7be79f33eeac2b4dc6b670c3c2d96a5eba0424","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fff1d9d9ed10c87624eb7f0a63c02edef9402e389de41761d0f22d81ec4e3a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"913da5197eeaedb037a0fccfed660b4abf390f6d82321ffebdcd045b5cddd00e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dd2f6ada48b63f6212a40fd8e7be79f33eeac2b4dc6b670c3c2d96a5eba0424"}
{"level":"info","ts":"2026-07-06T20:04:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"913da5197eeaedb037a0fccfed660b4abf390f6d82321ffebdcd045b5cddd00e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4dd2f6ada48b63f6212a40fd8e7be79f33eeac2b4dc6b670c3c2d96a5eba0424","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"913da5197eeaedb037a0fccfed660b4abf390f6d82321ffebdcd045b5cddd00e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"913da5197eeaedb037a0fccfed660b4abf390f6d82321ffebdcd045b5cddd00e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:04:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fff1d9d9ed10c87624eb7f0a63c02edef9402e389de41761d0f22d81ec4e3a4"}
{"level":"debug","ts":"2026-07-06T20:04:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"913da5197eeaedb037a0fccfed660b4abf390f6d82321ffebdcd045b5cddd00e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/913da5197eeaedb037a0fccfed660b4abf390f6d82321ffebdcd045b5cddd00e"}
{"level":"info","ts":"2026-07-06T20:04:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"913da5197eeaedb037a0fccfed660b4abf390f6d82321ffebdcd045b5cddd00e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"913da5197eeaedb037a0fccfed660b4abf390f6d82321ffebdcd045b5cddd00e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["913da5197eeaedb037a0fccfed660b4abf390f6d82321ffebdcd045b5cddd00e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dd2f6ada48b63f6212a40fd8e7be79f33eeac2b4dc6b670c3c2d96a5eba0424"}
{"level":"info","ts":"2026-07-06T20:04:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"913da5197eeaedb037a0fccfed660b4abf390f6d82321ffebdcd045b5cddd00e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"913da5197eeaedb037a0fccfed660b4abf390f6d82321ffebdcd045b5cddd00e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:04:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:04:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/913da5197eeaedb037a0fccfed660b4abf390f6d82321ffebdcd045b5cddd00e"}
{"level":"info","ts":"2026-07-06T20:04:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"913da5197eeaedb037a0fccfed660b4abf390f6d82321ffebdcd045b5cddd00e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"913da5197eeaedb037a0fccfed660b4abf390f6d82321ffebdcd045b5cddd00e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"913da5197eeaedb037a0fccfed660b4abf390f6d82321ffebdcd045b5cddd00e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:04:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/913da5197eeaedb037a0fccfed660b4abf390f6d82321ffebdcd045b5cddd00e"}
{"level":"debug","ts":"2026-07-06T20:04:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"913da5197eeaedb037a0fccfed660b4abf390f6d82321ffebdcd045b5cddd00e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:04:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/913da5197eeaedb037a0fccfed660b4abf390f6d82321ffebdcd045b5cddd00e"}
{"level":"debug","ts":"2026-07-06T20:04:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"913da5197eeaedb037a0fccfed660b4abf390f6d82321ffebdcd045b5cddd00e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:04:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:04:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["913da5197eeaedb037a0fccfed660b4abf390f6d82321ffebdcd045b5cddd00e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:04:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"913da5197eeaedb037a0fccfed660b4abf390f6d82321ffebdcd045b5cddd00e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:04:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"913da5197eeaedb037a0fccfed660b4abf390f6d82321ffebdcd045b5cddd00e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:04:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/913da5197eeaedb037a0fccfed660b4abf390f6d82321ffebdcd045b5cddd00e"}
{"level":"debug","ts":"2026-07-06T20:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e88012a6e19d0849a8e05ff6b538c3c5f2350430b3110fd6458061dbc61430cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e88012a6e19d0849a8e05ff6b538c3c5f2350430b3110fd6458061dbc61430cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e88012a6e19d0849a8e05ff6b538c3c5f2350430b3110fd6458061dbc61430cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e88012a6e19d0849a8e05ff6b538c3c5f2350430b3110fd6458061dbc61430cd"}
{"level":"info","ts":"2026-07-06T20:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e88012a6e19d0849a8e05ff6b538c3c5f2350430b3110fd6458061dbc61430cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e88012a6e19d0849a8e05ff6b538c3c5f2350430b3110fd6458061dbc61430cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e88012a6e19d0849a8e05ff6b538c3c5f2350430b3110fd6458061dbc61430cd"}
{"level":"error","ts":"2026-07-06T20:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e88012a6e19d0849a8e05ff6b538c3c5f2350430b3110fd6458061dbc61430cd","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e88012a6e19d0849a8e05ff6b538c3c5f2350430b3110fd6458061dbc61430cd\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e88012a6e19d0849a8e05ff6b538c3c5f2350430b3110fd6458061dbc61430cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e88012a6e19d0849a8e05ff6b538c3c5f2350430b3110fd6458061dbc61430cd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e88012a6e19d0849a8e05ff6b538c3c5f2350430b3110fd6458061dbc61430cd"}
{"level":"debug","ts":"2026-07-06T20:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e88012a6e19d0849a8e05ff6b538c3c5f2350430b3110fd6458061dbc61430cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e88012a6e19d0849a8e05ff6b538c3c5f2350430b3110fd6458061dbc61430cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e88012a6e19d0849a8e05ff6b538c3c5f2350430b3110fd6458061dbc61430cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e88012a6e19d0849a8e05ff6b538c3c5f2350430b3110fd6458061dbc61430cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e88012a6e19d0849a8e05ff6b538c3c5f2350430b3110fd6458061dbc61430cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e88012a6e19d0849a8e05ff6b538c3c5f2350430b3110fd6458061dbc61430cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e88012a6e19d0849a8e05ff6b538c3c5f2350430b3110fd6458061dbc61430cd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e88012a6e19d0849a8e05ff6b538c3c5f2350430b3110fd6458061dbc61430cd"}
{"level":"debug","ts":"2026-07-06T20:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e88012a6e19d0849a8e05ff6b538c3c5f2350430b3110fd6458061dbc61430cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c290fd37072c2652a738930d66454761d0ad2c881fd01b4555d88cd653b258bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e88012a6e19d0849a8e05ff6b538c3c5f2350430b3110fd6458061dbc61430cd"}
{"level":"info","ts":"2026-07-06T20:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c290fd37072c2652a738930d66454761d0ad2c881fd01b4555d88cd653b258bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c290fd37072c2652a738930d66454761d0ad2c881fd01b4555d88cd653b258bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c290fd37072c2652a738930d66454761d0ad2c881fd01b4555d88cd653b258bf"}
{"level":"info","ts":"2026-07-06T20:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c290fd37072c2652a738930d66454761d0ad2c881fd01b4555d88cd653b258bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e88012a6e19d0849a8e05ff6b538c3c5f2350430b3110fd6458061dbc61430cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e88012a6e19d0849a8e05ff6b538c3c5f2350430b3110fd6458061dbc61430cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c290fd37072c2652a738930d66454761d0ad2c881fd01b4555d88cd653b258bf"}
{"level":"info","ts":"2026-07-06T20:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c290fd37072c2652a738930d66454761d0ad2c881fd01b4555d88cd653b258bf"}
{"level":"info","ts":"2026-07-06T20:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e88012a6e19d0849a8e05ff6b538c3c5f2350430b3110fd6458061dbc61430cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c290fd37072c2652a738930d66454761d0ad2c881fd01b4555d88cd653b258bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c290fd37072c2652a738930d66454761d0ad2c881fd01b4555d88cd653b258bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c290fd37072c2652a738930d66454761d0ad2c881fd01b4555d88cd653b258bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e88012a6e19d0849a8e05ff6b538c3c5f2350430b3110fd6458061dbc61430cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e88012a6e19d0849a8e05ff6b538c3c5f2350430b3110fd6458061dbc61430cd"}
{"level":"info","ts":"2026-07-06T20:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e88012a6e19d0849a8e05ff6b538c3c5f2350430b3110fd6458061dbc61430cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c290fd37072c2652a738930d66454761d0ad2c881fd01b4555d88cd653b258bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c290fd37072c2652a738930d66454761d0ad2c881fd01b4555d88cd653b258bf"}
{"level":"info","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c290fd37072c2652a738930d66454761d0ad2c881fd01b4555d88cd653b258bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e88012a6e19d0849a8e05ff6b538c3c5f2350430b3110fd6458061dbc61430cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c290fd37072c2652a738930d66454761d0ad2c881fd01b4555d88cd653b258bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c290fd37072c2652a738930d66454761d0ad2c881fd01b4555d88cd653b258bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e88012a6e19d0849a8e05ff6b538c3c5f2350430b3110fd6458061dbc61430cd"}
{"level":"info","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c290fd37072c2652a738930d66454761d0ad2c881fd01b4555d88cd653b258bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e88012a6e19d0849a8e05ff6b538c3c5f2350430b3110fd6458061dbc61430cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e88012a6e19d0849a8e05ff6b538c3c5f2350430b3110fd6458061dbc61430cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c290fd37072c2652a738930d66454761d0ad2c881fd01b4555d88cd653b258bf"}
{"level":"info","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e88012a6e19d0849a8e05ff6b538c3c5f2350430b3110fd6458061dbc61430cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c290fd37072c2652a738930d66454761d0ad2c881fd01b4555d88cd653b258bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c290fd37072c2652a738930d66454761d0ad2c881fd01b4555d88cd653b258bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e88012a6e19d0849a8e05ff6b538c3c5f2350430b3110fd6458061dbc61430cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c290fd37072c2652a738930d66454761d0ad2c881fd01b4555d88cd653b258bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c290fd37072c2652a738930d66454761d0ad2c881fd01b4555d88cd653b258bf"}
{"level":"debug","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c290fd37072c2652a738930d66454761d0ad2c881fd01b4555d88cd653b258bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c290fd37072c2652a738930d66454761d0ad2c881fd01b4555d88cd653b258bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e88012a6e19d0849a8e05ff6b538c3c5f2350430b3110fd6458061dbc61430cd"}
{"level":"info","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c290fd37072c2652a738930d66454761d0ad2c881fd01b4555d88cd653b258bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c290fd37072c2652a738930d66454761d0ad2c881fd01b4555d88cd653b258bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c290fd37072c2652a738930d66454761d0ad2c881fd01b4555d88cd653b258bf"}
{"level":"info","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c290fd37072c2652a738930d66454761d0ad2c881fd01b4555d88cd653b258bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c290fd37072c2652a738930d66454761d0ad2c881fd01b4555d88cd653b258bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c290fd37072c2652a738930d66454761d0ad2c881fd01b4555d88cd653b258bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c290fd37072c2652a738930d66454761d0ad2c881fd01b4555d88cd653b258bf"}
{"level":"debug","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c290fd37072c2652a738930d66454761d0ad2c881fd01b4555d88cd653b258bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c290fd37072c2652a738930d66454761d0ad2c881fd01b4555d88cd653b258bf"}
{"level":"debug","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c290fd37072c2652a738930d66454761d0ad2c881fd01b4555d88cd653b258bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c290fd37072c2652a738930d66454761d0ad2c881fd01b4555d88cd653b258bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c290fd37072c2652a738930d66454761d0ad2c881fd01b4555d88cd653b258bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e38df8dbfc86f0cfd7668c8dbbba60997a349a939a17f932f441a384886871c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e38df8dbfc86f0cfd7668c8dbbba60997a349a939a17f932f441a384886871c"}
{"level":"info","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e38df8dbfc86f0cfd7668c8dbbba60997a349a939a17f932f441a384886871c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c290fd37072c2652a738930d66454761d0ad2c881fd01b4555d88cd653b258bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c290fd37072c2652a738930d66454761d0ad2c881fd01b4555d88cd653b258bf"}
{"level":"info","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c290fd37072c2652a738930d66454761d0ad2c881fd01b4555d88cd653b258bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e38df8dbfc86f0cfd7668c8dbbba60997a349a939a17f932f441a384886871c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c290fd37072c2652a738930d66454761d0ad2c881fd01b4555d88cd653b258bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c290fd37072c2652a738930d66454761d0ad2c881fd01b4555d88cd653b258bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e38df8dbfc86f0cfd7668c8dbbba60997a349a939a17f932f441a384886871c"}
{"level":"info","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c290fd37072c2652a738930d66454761d0ad2c881fd01b4555d88cd653b258bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e38df8dbfc86f0cfd7668c8dbbba60997a349a939a17f932f441a384886871c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e38df8dbfc86f0cfd7668c8dbbba60997a349a939a17f932f441a384886871c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c290fd37072c2652a738930d66454761d0ad2c881fd01b4555d88cd653b258bf"}
{"level":"info","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e38df8dbfc86f0cfd7668c8dbbba60997a349a939a17f932f441a384886871c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c290fd37072c2652a738930d66454761d0ad2c881fd01b4555d88cd653b258bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c290fd37072c2652a738930d66454761d0ad2c881fd01b4555d88cd653b258bf"}
{"level":"info","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c290fd37072c2652a738930d66454761d0ad2c881fd01b4555d88cd653b258bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e38df8dbfc86f0cfd7668c8dbbba60997a349a939a17f932f441a384886871c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e38df8dbfc86f0cfd7668c8dbbba60997a349a939a17f932f441a384886871c"}
{"level":"info","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e38df8dbfc86f0cfd7668c8dbbba60997a349a939a17f932f441a384886871c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c290fd37072c2652a738930d66454761d0ad2c881fd01b4555d88cd653b258bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e38df8dbfc86f0cfd7668c8dbbba60997a349a939a17f932f441a384886871c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e38df8dbfc86f0cfd7668c8dbbba60997a349a939a17f932f441a384886871c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e38df8dbfc86f0cfd7668c8dbbba60997a349a939a17f932f441a384886871c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c290fd37072c2652a738930d66454761d0ad2c881fd01b4555d88cd653b258bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e38df8dbfc86f0cfd7668c8dbbba60997a349a939a17f932f441a384886871c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e38df8dbfc86f0cfd7668c8dbbba60997a349a939a17f932f441a384886871c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c290fd37072c2652a738930d66454761d0ad2c881fd01b4555d88cd653b258bf"}
{"level":"error","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6e38df8dbfc86f0cfd7668c8dbbba60997a349a939a17f932f441a384886871c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6e38df8dbfc86f0cfd7668c8dbbba60997a349a939a17f932f441a384886871c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e38df8dbfc86f0cfd7668c8dbbba60997a349a939a17f932f441a384886871c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e38df8dbfc86f0cfd7668c8dbbba60997a349a939a17f932f441a384886871c"}
{"level":"info","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e38df8dbfc86f0cfd7668c8dbbba60997a349a939a17f932f441a384886871c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c290fd37072c2652a738930d66454761d0ad2c881fd01b4555d88cd653b258bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c290fd37072c2652a738930d66454761d0ad2c881fd01b4555d88cd653b258bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c290fd37072c2652a738930d66454761d0ad2c881fd01b4555d88cd653b258bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e38df8dbfc86f0cfd7668c8dbbba60997a349a939a17f932f441a384886871c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c290fd37072c2652a738930d66454761d0ad2c881fd01b4555d88cd653b258bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e38df8dbfc86f0cfd7668c8dbbba60997a349a939a17f932f441a384886871c"}
{"level":"debug","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e38df8dbfc86f0cfd7668c8dbbba60997a349a939a17f932f441a384886871c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e38df8dbfc86f0cfd7668c8dbbba60997a349a939a17f932f441a384886871c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c290fd37072c2652a738930d66454761d0ad2c881fd01b4555d88cd653b258bf"}
{"level":"info","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e38df8dbfc86f0cfd7668c8dbbba60997a349a939a17f932f441a384886871c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e38df8dbfc86f0cfd7668c8dbbba60997a349a939a17f932f441a384886871c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e38df8dbfc86f0cfd7668c8dbbba60997a349a939a17f932f441a384886871c"}
{"level":"info","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e38df8dbfc86f0cfd7668c8dbbba60997a349a939a17f932f441a384886871c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e38df8dbfc86f0cfd7668c8dbbba60997a349a939a17f932f441a384886871c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e38df8dbfc86f0cfd7668c8dbbba60997a349a939a17f932f441a384886871c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e38df8dbfc86f0cfd7668c8dbbba60997a349a939a17f932f441a384886871c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e38df8dbfc86f0cfd7668c8dbbba60997a349a939a17f932f441a384886871c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e38df8dbfc86f0cfd7668c8dbbba60997a349a939a17f932f441a384886871c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e38df8dbfc86f0cfd7668c8dbbba60997a349a939a17f932f441a384886871c"}
{"level":"info","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e38df8dbfc86f0cfd7668c8dbbba60997a349a939a17f932f441a384886871c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e38df8dbfc86f0cfd7668c8dbbba60997a349a939a17f932f441a384886871c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e38df8dbfc86f0cfd7668c8dbbba60997a349a939a17f932f441a384886871c"}
{"level":"error","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6e38df8dbfc86f0cfd7668c8dbbba60997a349a939a17f932f441a384886871c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6e38df8dbfc86f0cfd7668c8dbbba60997a349a939a17f932f441a384886871c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e38df8dbfc86f0cfd7668c8dbbba60997a349a939a17f932f441a384886871c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e38df8dbfc86f0cfd7668c8dbbba60997a349a939a17f932f441a384886871c"}
{"level":"debug","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e38df8dbfc86f0cfd7668c8dbbba60997a349a939a17f932f441a384886871c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e38df8dbfc86f0cfd7668c8dbbba60997a349a939a17f932f441a384886871c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e38df8dbfc86f0cfd7668c8dbbba60997a349a939a17f932f441a384886871c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e38df8dbfc86f0cfd7668c8dbbba60997a349a939a17f932f441a384886871c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e38df8dbfc86f0cfd7668c8dbbba60997a349a939a17f932f441a384886871c"}
{"level":"info","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e38df8dbfc86f0cfd7668c8dbbba60997a349a939a17f932f441a384886871c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e38df8dbfc86f0cfd7668c8dbbba60997a349a939a17f932f441a384886871c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e38df8dbfc86f0cfd7668c8dbbba60997a349a939a17f932f441a384886871c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e38df8dbfc86f0cfd7668c8dbbba60997a349a939a17f932f441a384886871c"}
{"level":"info","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e38df8dbfc86f0cfd7668c8dbbba60997a349a939a17f932f441a384886871c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e38df8dbfc86f0cfd7668c8dbbba60997a349a939a17f932f441a384886871c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e38df8dbfc86f0cfd7668c8dbbba60997a349a939a17f932f441a384886871c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6e38df8dbfc86f0cfd7668c8dbbba60997a349a939a17f932f441a384886871c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6e38df8dbfc86f0cfd7668c8dbbba60997a349a939a17f932f441a384886871c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81ab0c4c6095e5c311389af030cede5fc3b12956d6dc6ac00577314d30947009","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e38df8dbfc86f0cfd7668c8dbbba60997a349a939a17f932f441a384886871c"}
{"level":"info","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81ab0c4c6095e5c311389af030cede5fc3b12956d6dc6ac00577314d30947009","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e38df8dbfc86f0cfd7668c8dbbba60997a349a939a17f932f441a384886871c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81ab0c4c6095e5c311389af030cede5fc3b12956d6dc6ac00577314d30947009","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81ab0c4c6095e5c311389af030cede5fc3b12956d6dc6ac00577314d30947009"}
{"level":"info","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81ab0c4c6095e5c311389af030cede5fc3b12956d6dc6ac00577314d30947009"}
{"level":"info","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81ab0c4c6095e5c311389af030cede5fc3b12956d6dc6ac00577314d30947009","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81ab0c4c6095e5c311389af030cede5fc3b12956d6dc6ac00577314d30947009","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81ab0c4c6095e5c311389af030cede5fc3b12956d6dc6ac00577314d30947009"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"81ab0c4c6095e5c311389af030cede5fc3b12956d6dc6ac00577314d30947009","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"81ab0c4c6095e5c311389af030cede5fc3b12956d6dc6ac00577314d30947009\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81ab0c4c6095e5c311389af030cede5fc3b12956d6dc6ac00577314d30947009","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81ab0c4c6095e5c311389af030cede5fc3b12956d6dc6ac00577314d30947009","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81ab0c4c6095e5c311389af030cede5fc3b12956d6dc6ac00577314d30947009"}
{"level":"debug","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be10f31b29274d7fc7a2ff52919f84b0471fef38f86e2848b8f4968ec9e035c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be10f31b29274d7fc7a2ff52919f84b0471fef38f86e2848b8f4968ec9e035c8"}
{"level":"info","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be10f31b29274d7fc7a2ff52919f84b0471fef38f86e2848b8f4968ec9e035c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be10f31b29274d7fc7a2ff52919f84b0471fef38f86e2848b8f4968ec9e035c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be10f31b29274d7fc7a2ff52919f84b0471fef38f86e2848b8f4968ec9e035c8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be10f31b29274d7fc7a2ff52919f84b0471fef38f86e2848b8f4968ec9e035c8"}
{"level":"debug","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81ab0c4c6095e5c311389af030cede5fc3b12956d6dc6ac00577314d30947009","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81ab0c4c6095e5c311389af030cede5fc3b12956d6dc6ac00577314d30947009"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81ab0c4c6095e5c311389af030cede5fc3b12956d6dc6ac00577314d30947009","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be10f31b29274d7fc7a2ff52919f84b0471fef38f86e2848b8f4968ec9e035c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be10f31b29274d7fc7a2ff52919f84b0471fef38f86e2848b8f4968ec9e035c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be10f31b29274d7fc7a2ff52919f84b0471fef38f86e2848b8f4968ec9e035c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81ab0c4c6095e5c311389af030cede5fc3b12956d6dc6ac00577314d30947009","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81ab0c4c6095e5c311389af030cede5fc3b12956d6dc6ac00577314d30947009"}
{"level":"info","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81ab0c4c6095e5c311389af030cede5fc3b12956d6dc6ac00577314d30947009","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be10f31b29274d7fc7a2ff52919f84b0471fef38f86e2848b8f4968ec9e035c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be10f31b29274d7fc7a2ff52919f84b0471fef38f86e2848b8f4968ec9e035c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81ab0c4c6095e5c311389af030cede5fc3b12956d6dc6ac00577314d30947009","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81ab0c4c6095e5c311389af030cede5fc3b12956d6dc6ac00577314d30947009"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81ab0c4c6095e5c311389af030cede5fc3b12956d6dc6ac00577314d30947009","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be10f31b29274d7fc7a2ff52919f84b0471fef38f86e2848b8f4968ec9e035c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81ab0c4c6095e5c311389af030cede5fc3b12956d6dc6ac00577314d30947009","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be10f31b29274d7fc7a2ff52919f84b0471fef38f86e2848b8f4968ec9e035c8"}
{"level":"debug","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be10f31b29274d7fc7a2ff52919f84b0471fef38f86e2848b8f4968ec9e035c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be10f31b29274d7fc7a2ff52919f84b0471fef38f86e2848b8f4968ec9e035c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81ab0c4c6095e5c311389af030cede5fc3b12956d6dc6ac00577314d30947009"}
{"level":"info","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be10f31b29274d7fc7a2ff52919f84b0471fef38f86e2848b8f4968ec9e035c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be10f31b29274d7fc7a2ff52919f84b0471fef38f86e2848b8f4968ec9e035c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be10f31b29274d7fc7a2ff52919f84b0471fef38f86e2848b8f4968ec9e035c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f04bebfc01ac121bf2926f74fe62ccab94719519b552c0eda8b502d2fc40535e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be10f31b29274d7fc7a2ff52919f84b0471fef38f86e2848b8f4968ec9e035c8"}
{"level":"info","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f04bebfc01ac121bf2926f74fe62ccab94719519b552c0eda8b502d2fc40535e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be10f31b29274d7fc7a2ff52919f84b0471fef38f86e2848b8f4968ec9e035c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be10f31b29274d7fc7a2ff52919f84b0471fef38f86e2848b8f4968ec9e035c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f04bebfc01ac121bf2926f74fe62ccab94719519b552c0eda8b502d2fc40535e"}
{"level":"info","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be10f31b29274d7fc7a2ff52919f84b0471fef38f86e2848b8f4968ec9e035c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f04bebfc01ac121bf2926f74fe62ccab94719519b552c0eda8b502d2fc40535e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f04bebfc01ac121bf2926f74fe62ccab94719519b552c0eda8b502d2fc40535e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be10f31b29274d7fc7a2ff52919f84b0471fef38f86e2848b8f4968ec9e035c8"}
{"level":"info","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f04bebfc01ac121bf2926f74fe62ccab94719519b552c0eda8b502d2fc40535e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be10f31b29274d7fc7a2ff52919f84b0471fef38f86e2848b8f4968ec9e035c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f04bebfc01ac121bf2926f74fe62ccab94719519b552c0eda8b502d2fc40535e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f04bebfc01ac121bf2926f74fe62ccab94719519b552c0eda8b502d2fc40535e"}
{"level":"info","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be10f31b29274d7fc7a2ff52919f84b0471fef38f86e2848b8f4968ec9e035c8"}
{"level":"info","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f04bebfc01ac121bf2926f74fe62ccab94719519b552c0eda8b502d2fc40535e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f04bebfc01ac121bf2926f74fe62ccab94719519b552c0eda8b502d2fc40535e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f04bebfc01ac121bf2926f74fe62ccab94719519b552c0eda8b502d2fc40535e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff910f55c001b36430840202a6446a61222ea7ad2935566f91b7f61559ff425b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f04bebfc01ac121bf2926f74fe62ccab94719519b552c0eda8b502d2fc40535e"}
{"level":"info","ts":"2026-07-06T20:05:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff910f55c001b36430840202a6446a61222ea7ad2935566f91b7f61559ff425b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f04bebfc01ac121bf2926f74fe62ccab94719519b552c0eda8b502d2fc40535e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f04bebfc01ac121bf2926f74fe62ccab94719519b552c0eda8b502d2fc40535e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff910f55c001b36430840202a6446a61222ea7ad2935566f91b7f61559ff425b"}
{"level":"info","ts":"2026-07-06T20:05:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f04bebfc01ac121bf2926f74fe62ccab94719519b552c0eda8b502d2fc40535e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff910f55c001b36430840202a6446a61222ea7ad2935566f91b7f61559ff425b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff910f55c001b36430840202a6446a61222ea7ad2935566f91b7f61559ff425b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f04bebfc01ac121bf2926f74fe62ccab94719519b552c0eda8b502d2fc40535e"}
{"level":"info","ts":"2026-07-06T20:05:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff910f55c001b36430840202a6446a61222ea7ad2935566f91b7f61559ff425b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f04bebfc01ac121bf2926f74fe62ccab94719519b552c0eda8b502d2fc40535e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff910f55c001b36430840202a6446a61222ea7ad2935566f91b7f61559ff425b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff910f55c001b36430840202a6446a61222ea7ad2935566f91b7f61559ff425b"}
{"level":"info","ts":"2026-07-06T20:05:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff910f55c001b36430840202a6446a61222ea7ad2935566f91b7f61559ff425b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff910f55c001b36430840202a6446a61222ea7ad2935566f91b7f61559ff425b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff910f55c001b36430840202a6446a61222ea7ad2935566f91b7f61559ff425b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f04bebfc01ac121bf2926f74fe62ccab94719519b552c0eda8b502d2fc40535e"}
{"level":"info","ts":"2026-07-06T20:05:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff910f55c001b36430840202a6446a61222ea7ad2935566f91b7f61559ff425b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff910f55c001b36430840202a6446a61222ea7ad2935566f91b7f61559ff425b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff910f55c001b36430840202a6446a61222ea7ad2935566f91b7f61559ff425b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff910f55c001b36430840202a6446a61222ea7ad2935566f91b7f61559ff425b"}
{"level":"info","ts":"2026-07-06T20:05:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff910f55c001b36430840202a6446a61222ea7ad2935566f91b7f61559ff425b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff910f55c001b36430840202a6446a61222ea7ad2935566f91b7f61559ff425b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T20:05:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ff910f55c001b36430840202a6446a61222ea7ad2935566f91b7f61559ff425b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ff910f55c001b36430840202a6446a61222ea7ad2935566f91b7f61559ff425b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:05:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff910f55c001b36430840202a6446a61222ea7ad2935566f91b7f61559ff425b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff910f55c001b36430840202a6446a61222ea7ad2935566f91b7f61559ff425b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff910f55c001b36430840202a6446a61222ea7ad2935566f91b7f61559ff425b"}
{"level":"info","ts":"2026-07-06T20:05:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff910f55c001b36430840202a6446a61222ea7ad2935566f91b7f61559ff425b"}
{"level":"debug","ts":"2026-07-06T20:05:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"557c9fa39cba552556d385df2ec1284ac39644dcf1a966f781da1d98866bc2e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"557c9fa39cba552556d385df2ec1284ac39644dcf1a966f781da1d98866bc2e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"557c9fa39cba552556d385df2ec1284ac39644dcf1a966f781da1d98866bc2e1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/557c9fa39cba552556d385df2ec1284ac39644dcf1a966f781da1d98866bc2e1"}
{"level":"debug","ts":"2026-07-06T20:05:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"557c9fa39cba552556d385df2ec1284ac39644dcf1a966f781da1d98866bc2e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff910f55c001b36430840202a6446a61222ea7ad2935566f91b7f61559ff425b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff910f55c001b36430840202a6446a61222ea7ad2935566f91b7f61559ff425b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/557c9fa39cba552556d385df2ec1284ac39644dcf1a966f781da1d98866bc2e1"}
{"level":"info","ts":"2026-07-06T20:05:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff910f55c001b36430840202a6446a61222ea7ad2935566f91b7f61559ff425b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"557c9fa39cba552556d385df2ec1284ac39644dcf1a966f781da1d98866bc2e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["557c9fa39cba552556d385df2ec1284ac39644dcf1a966f781da1d98866bc2e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff910f55c001b36430840202a6446a61222ea7ad2935566f91b7f61559ff425b"}
{"level":"info","ts":"2026-07-06T20:05:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"557c9fa39cba552556d385df2ec1284ac39644dcf1a966f781da1d98866bc2e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff910f55c001b36430840202a6446a61222ea7ad2935566f91b7f61559ff425b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"557c9fa39cba552556d385df2ec1284ac39644dcf1a966f781da1d98866bc2e1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/557c9fa39cba552556d385df2ec1284ac39644dcf1a966f781da1d98866bc2e1"}
{"level":"debug","ts":"2026-07-06T20:05:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e38df8dbfc86f0cfd7668c8dbbba60997a349a939a17f932f441a384886871c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e38df8dbfc86f0cfd7668c8dbbba60997a349a939a17f932f441a384886871c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e38df8dbfc86f0cfd7668c8dbbba60997a349a939a17f932f441a384886871c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e38df8dbfc86f0cfd7668c8dbbba60997a349a939a17f932f441a384886871c"}
{"level":"debug","ts":"2026-07-06T20:05:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e38df8dbfc86f0cfd7668c8dbbba60997a349a939a17f932f441a384886871c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e38df8dbfc86f0cfd7668c8dbbba60997a349a939a17f932f441a384886871c"}
{"level":"debug","ts":"2026-07-06T20:05:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e38df8dbfc86f0cfd7668c8dbbba60997a349a939a17f932f441a384886871c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e38df8dbfc86f0cfd7668c8dbbba60997a349a939a17f932f441a384886871c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e38df8dbfc86f0cfd7668c8dbbba60997a349a939a17f932f441a384886871c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e38df8dbfc86f0cfd7668c8dbbba60997a349a939a17f932f441a384886871c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e38df8dbfc86f0cfd7668c8dbbba60997a349a939a17f932f441a384886871c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e38df8dbfc86f0cfd7668c8dbbba60997a349a939a17f932f441a384886871c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e38df8dbfc86f0cfd7668c8dbbba60997a349a939a17f932f441a384886871c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e38df8dbfc86f0cfd7668c8dbbba60997a349a939a17f932f441a384886871c"}
{"level":"debug","ts":"2026-07-06T20:05:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e38df8dbfc86f0cfd7668c8dbbba60997a349a939a17f932f441a384886871c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e38df8dbfc86f0cfd7668c8dbbba60997a349a939a17f932f441a384886871c"}
{"level":"debug","ts":"2026-07-06T20:05:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e38df8dbfc86f0cfd7668c8dbbba60997a349a939a17f932f441a384886871c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e38df8dbfc86f0cfd7668c8dbbba60997a349a939a17f932f441a384886871c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e38df8dbfc86f0cfd7668c8dbbba60997a349a939a17f932f441a384886871c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e38df8dbfc86f0cfd7668c8dbbba60997a349a939a17f932f441a384886871c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e38df8dbfc86f0cfd7668c8dbbba60997a349a939a17f932f441a384886871c"}
{"level":"debug","ts":"2026-07-06T20:05:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa8785305a08abe890ff7dda026ae9e6cebf659c57e7cbbd766e12c5e21bc37e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa8785305a08abe890ff7dda026ae9e6cebf659c57e7cbbd766e12c5e21bc37e"}
{"level":"info","ts":"2026-07-06T20:05:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa8785305a08abe890ff7dda026ae9e6cebf659c57e7cbbd766e12c5e21bc37e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa8785305a08abe890ff7dda026ae9e6cebf659c57e7cbbd766e12c5e21bc37e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa8785305a08abe890ff7dda026ae9e6cebf659c57e7cbbd766e12c5e21bc37e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa8785305a08abe890ff7dda026ae9e6cebf659c57e7cbbd766e12c5e21bc37e"}
{"level":"debug","ts":"2026-07-06T20:05:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa8785305a08abe890ff7dda026ae9e6cebf659c57e7cbbd766e12c5e21bc37e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa8785305a08abe890ff7dda026ae9e6cebf659c57e7cbbd766e12c5e21bc37e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa8785305a08abe890ff7dda026ae9e6cebf659c57e7cbbd766e12c5e21bc37e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa8785305a08abe890ff7dda026ae9e6cebf659c57e7cbbd766e12c5e21bc37e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa8785305a08abe890ff7dda026ae9e6cebf659c57e7cbbd766e12c5e21bc37e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa8785305a08abe890ff7dda026ae9e6cebf659c57e7cbbd766e12c5e21bc37e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa8785305a08abe890ff7dda026ae9e6cebf659c57e7cbbd766e12c5e21bc37e"}
{"level":"debug","ts":"2026-07-06T20:05:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa8785305a08abe890ff7dda026ae9e6cebf659c57e7cbbd766e12c5e21bc37e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa8785305a08abe890ff7dda026ae9e6cebf659c57e7cbbd766e12c5e21bc37e"}
{"level":"debug","ts":"2026-07-06T20:05:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa8785305a08abe890ff7dda026ae9e6cebf659c57e7cbbd766e12c5e21bc37e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa8785305a08abe890ff7dda026ae9e6cebf659c57e7cbbd766e12c5e21bc37e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa8785305a08abe890ff7dda026ae9e6cebf659c57e7cbbd766e12c5e21bc37e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa8785305a08abe890ff7dda026ae9e6cebf659c57e7cbbd766e12c5e21bc37e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa8785305a08abe890ff7dda026ae9e6cebf659c57e7cbbd766e12c5e21bc37e"}
{"level":"debug","ts":"2026-07-06T20:05:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"202e86462b4a9055ac07849a602d5adc57fa7f0b716c8fafc9d7f4606f5f7610","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/202e86462b4a9055ac07849a602d5adc57fa7f0b716c8fafc9d7f4606f5f7610"}
{"level":"debug","ts":"2026-07-06T20:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f04bebfc01ac121bf2926f74fe62ccab94719519b552c0eda8b502d2fc40535e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f04bebfc01ac121bf2926f74fe62ccab94719519b552c0eda8b502d2fc40535e"}
{"level":"info","ts":"2026-07-06T20:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f04bebfc01ac121bf2926f74fe62ccab94719519b552c0eda8b502d2fc40535e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f04bebfc01ac121bf2926f74fe62ccab94719519b552c0eda8b502d2fc40535e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f04bebfc01ac121bf2926f74fe62ccab94719519b552c0eda8b502d2fc40535e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f04bebfc01ac121bf2926f74fe62ccab94719519b552c0eda8b502d2fc40535e"}
{"level":"debug","ts":"2026-07-06T20:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f04bebfc01ac121bf2926f74fe62ccab94719519b552c0eda8b502d2fc40535e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f04bebfc01ac121bf2926f74fe62ccab94719519b552c0eda8b502d2fc40535e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f04bebfc01ac121bf2926f74fe62ccab94719519b552c0eda8b502d2fc40535e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f04bebfc01ac121bf2926f74fe62ccab94719519b552c0eda8b502d2fc40535e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f04bebfc01ac121bf2926f74fe62ccab94719519b552c0eda8b502d2fc40535e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f04bebfc01ac121bf2926f74fe62ccab94719519b552c0eda8b502d2fc40535e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f04bebfc01ac121bf2926f74fe62ccab94719519b552c0eda8b502d2fc40535e"}
{"level":"debug","ts":"2026-07-06T20:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f04bebfc01ac121bf2926f74fe62ccab94719519b552c0eda8b502d2fc40535e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40e3d5353e8d81831797688a39423707c6bf92a8999fa3557bb5c03dd7161fa0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f04bebfc01ac121bf2926f74fe62ccab94719519b552c0eda8b502d2fc40535e"}
{"level":"debug","ts":"2026-07-06T20:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f04bebfc01ac121bf2926f74fe62ccab94719519b552c0eda8b502d2fc40535e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f04bebfc01ac121bf2926f74fe62ccab94719519b552c0eda8b502d2fc40535e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40e3d5353e8d81831797688a39423707c6bf92a8999fa3557bb5c03dd7161fa0"}
{"level":"info","ts":"2026-07-06T20:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f04bebfc01ac121bf2926f74fe62ccab94719519b552c0eda8b502d2fc40535e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f04bebfc01ac121bf2926f74fe62ccab94719519b552c0eda8b502d2fc40535e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f04bebfc01ac121bf2926f74fe62ccab94719519b552c0eda8b502d2fc40535e"}
{"level":"debug","ts":"2026-07-06T20:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fff1d9d9ed10c87624eb7f0a63c02edef9402e389de41761d0f22d81ec4e3a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fff1d9d9ed10c87624eb7f0a63c02edef9402e389de41761d0f22d81ec4e3a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fff1d9d9ed10c87624eb7f0a63c02edef9402e389de41761d0f22d81ec4e3a4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fff1d9d9ed10c87624eb7f0a63c02edef9402e389de41761d0f22d81ec4e3a4"}
{"level":"debug","ts":"2026-07-06T20:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fff1d9d9ed10c87624eb7f0a63c02edef9402e389de41761d0f22d81ec4e3a4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fff1d9d9ed10c87624eb7f0a63c02edef9402e389de41761d0f22d81ec4e3a4"}
{"level":"debug","ts":"2026-07-06T20:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fff1d9d9ed10c87624eb7f0a63c02edef9402e389de41761d0f22d81ec4e3a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6fff1d9d9ed10c87624eb7f0a63c02edef9402e389de41761d0f22d81ec4e3a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fff1d9d9ed10c87624eb7f0a63c02edef9402e389de41761d0f22d81ec4e3a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fff1d9d9ed10c87624eb7f0a63c02edef9402e389de41761d0f22d81ec4e3a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"557c9fa39cba552556d385df2ec1284ac39644dcf1a966f781da1d98866bc2e1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fff1d9d9ed10c87624eb7f0a63c02edef9402e389de41761d0f22d81ec4e3a4"}
{"level":"debug","ts":"2026-07-06T20:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81ab0c4c6095e5c311389af030cede5fc3b12956d6dc6ac00577314d30947009","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/557c9fa39cba552556d385df2ec1284ac39644dcf1a966f781da1d98866bc2e1"}
{"level":"info","ts":"2026-07-06T20:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81ab0c4c6095e5c311389af030cede5fc3b12956d6dc6ac00577314d30947009"}
{"level":"debug","ts":"2026-07-06T20:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c290fd37072c2652a738930d66454761d0ad2c881fd01b4555d88cd653b258bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c290fd37072c2652a738930d66454761d0ad2c881fd01b4555d88cd653b258bf"}
{"level":"info","ts":"2026-07-06T20:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c290fd37072c2652a738930d66454761d0ad2c881fd01b4555d88cd653b258bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c290fd37072c2652a738930d66454761d0ad2c881fd01b4555d88cd653b258bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c290fd37072c2652a738930d66454761d0ad2c881fd01b4555d88cd653b258bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c290fd37072c2652a738930d66454761d0ad2c881fd01b4555d88cd653b258bf"}
{"level":"debug","ts":"2026-07-06T20:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c290fd37072c2652a738930d66454761d0ad2c881fd01b4555d88cd653b258bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c290fd37072c2652a738930d66454761d0ad2c881fd01b4555d88cd653b258bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c290fd37072c2652a738930d66454761d0ad2c881fd01b4555d88cd653b258bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c290fd37072c2652a738930d66454761d0ad2c881fd01b4555d88cd653b258bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c290fd37072c2652a738930d66454761d0ad2c881fd01b4555d88cd653b258bf"}
{"level":"debug","ts":"2026-07-06T20:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42974c8df0704b09e3878556fa0217110a9f2f94c1bf4eaa27ca80dbd2df4bfb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42974c8df0704b09e3878556fa0217110a9f2f94c1bf4eaa27ca80dbd2df4bfb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42974c8df0704b09e3878556fa0217110a9f2f94c1bf4eaa27ca80dbd2df4bfb"}
{"level":"debug","ts":"2026-07-06T20:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42974c8df0704b09e3878556fa0217110a9f2f94c1bf4eaa27ca80dbd2df4bfb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44d5a1f2ebde73e06d9573326543ff88130f25e85bf3495a520eabb14c34750a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42974c8df0704b09e3878556fa0217110a9f2f94c1bf4eaa27ca80dbd2df4bfb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42974c8df0704b09e3878556fa0217110a9f2f94c1bf4eaa27ca80dbd2df4bfb"}
{"level":"debug","ts":"2026-07-06T20:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42974c8df0704b09e3878556fa0217110a9f2f94c1bf4eaa27ca80dbd2df4bfb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42974c8df0704b09e3878556fa0217110a9f2f94c1bf4eaa27ca80dbd2df4bfb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42974c8df0704b09e3878556fa0217110a9f2f94c1bf4eaa27ca80dbd2df4bfb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42974c8df0704b09e3878556fa0217110a9f2f94c1bf4eaa27ca80dbd2df4bfb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44d5a1f2ebde73e06d9573326543ff88130f25e85bf3495a520eabb14c34750a"}
{"level":"info","ts":"2026-07-06T20:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42974c8df0704b09e3878556fa0217110a9f2f94c1bf4eaa27ca80dbd2df4bfb"}
{"level":"debug","ts":"2026-07-06T20:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"913da5197eeaedb037a0fccfed660b4abf390f6d82321ffebdcd045b5cddd00e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:05:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:05:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"913da5197eeaedb037a0fccfed660b4abf390f6d82321ffebdcd045b5cddd00e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"913da5197eeaedb037a0fccfed660b4abf390f6d82321ffebdcd045b5cddd00e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/913da5197eeaedb037a0fccfed660b4abf390f6d82321ffebdcd045b5cddd00e"}
{"level":"debug","ts":"2026-07-06T20:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"913da5197eeaedb037a0fccfed660b4abf390f6d82321ffebdcd045b5cddd00e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"10ab7997502692fb8bfa82ad74bbb1773ee0111d4792eb020da3fc74ec8fcce6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff910f55c001b36430840202a6446a61222ea7ad2935566f91b7f61559ff425b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/913da5197eeaedb037a0fccfed660b4abf390f6d82321ffebdcd045b5cddd00e"}
{"level":"debug","ts":"2026-07-06T20:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"913da5197eeaedb037a0fccfed660b4abf390f6d82321ffebdcd045b5cddd00e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:05:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:05:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["913da5197eeaedb037a0fccfed660b4abf390f6d82321ffebdcd045b5cddd00e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"913da5197eeaedb037a0fccfed660b4abf390f6d82321ffebdcd045b5cddd00e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"913da5197eeaedb037a0fccfed660b4abf390f6d82321ffebdcd045b5cddd00e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10ab7997502692fb8bfa82ad74bbb1773ee0111d4792eb020da3fc74ec8fcce6"}
{"level":"debug","ts":"2026-07-06T20:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"587b77012c9a8af1e9972a639b5c14b5be92391d71cd7aa625674d0b445047ae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff910f55c001b36430840202a6446a61222ea7ad2935566f91b7f61559ff425b"}
{"level":"debug","ts":"2026-07-06T20:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e3da8387e57c914b6d984a3f13179a926ed680f8655fdfa9eda72393f5810c10","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/913da5197eeaedb037a0fccfed660b4abf390f6d82321ffebdcd045b5cddd00e"}
{"level":"debug","ts":"2026-07-06T20:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a286657a61605a6c4db687cecdec77fb08d52d653428a8ecc52e94838d856af","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/587b77012c9a8af1e9972a639b5c14b5be92391d71cd7aa625674d0b445047ae"}
{"level":"debug","ts":"2026-07-06T20:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be10f31b29274d7fc7a2ff52919f84b0471fef38f86e2848b8f4968ec9e035c8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3da8387e57c914b6d984a3f13179a926ed680f8655fdfa9eda72393f5810c10"}
{"level":"debug","ts":"2026-07-06T20:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4dd2f6ada48b63f6212a40fd8e7be79f33eeac2b4dc6b670c3c2d96a5eba0424","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a286657a61605a6c4db687cecdec77fb08d52d653428a8ecc52e94838d856af"}
{"level":"debug","ts":"2026-07-06T20:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e88012a6e19d0849a8e05ff6b538c3c5f2350430b3110fd6458061dbc61430cd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be10f31b29274d7fc7a2ff52919f84b0471fef38f86e2848b8f4968ec9e035c8"}
{"level":"info","ts":"2026-07-06T20:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dd2f6ada48b63f6212a40fd8e7be79f33eeac2b4dc6b670c3c2d96a5eba0424"}
{"level":"info","ts":"2026-07-06T20:05:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e88012a6e19d0849a8e05ff6b538c3c5f2350430b3110fd6458061dbc61430cd"}
{"level":"info","ts":"2026-07-06T20:05:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4c8ea62f-794a-4b84-914e-83850d99c3d4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:33778","PortSpecifier":{"PortValue":33778}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4c8ea62f-794a-4b84-914e-83850d99c3d4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e1f716.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:05:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4c8ea62f-794a-4b84-914e-83850d99c3d4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:33778","PortSpecifier":{"PortValue":33778}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368351,"nanos":47040277},"http":{"id":"4c8ea62f-794a-4b84-914e-83850d99c3d4","method":"POST","headers":{":authority":"e2e-shared-a-e1f716.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:05:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4c8ea62f-794a-4b84-914e-83850d99c3d4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:05:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4c8ea62f-794a-4b84-914e-83850d99c3d4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a5d356b1-3180-412a-8dea-76750349e251","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=57fd0aa1-6d66-4aee-9de0-7b7661d60c4b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60474a7ad191"]}}
{"level":"debug","ts":"2026-07-06T20:05:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4c8ea62f-794a-4b84-914e-83850d99c3d4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60474a7ad191"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=57fd0aa1-6d66-4aee-9de0-7b7661d60c4b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a5d356b1-3180-412a-8dea-76750349e251","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"aa8785305a08abe890ff7dda026ae9e6cebf659c57e7cbbd766e12c5e21bc37e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e1f716.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:05:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c8ea62f-794a-4b84-914e-83850d99c3d4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:05:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c8ea62f-794a-4b84-914e-83850d99c3d4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:05:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c8ea62f-794a-4b84-914e-83850d99c3d4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e1f716/rate-test-model-e1f716\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:05:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4c8ea62f-794a-4b84-914e-83850d99c3d4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:05:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4c8ea62f-794a-4b84-914e-83850d99c3d4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:05:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4c8ea62f-794a-4b84-914e-83850d99c3d4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T20:05:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4c8ea62f-794a-4b84-914e-83850d99c3d4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:05:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4c8ea62f-794a-4b84-914e-83850d99c3d4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:05:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"28ed0804-54b4-4a06-960d-a67bb80b278e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:58922","PortSpecifier":{"PortValue":58922}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"28ed0804-54b4-4a06-960d-a67bb80b278e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-035267.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:05:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"28ed0804-54b4-4a06-960d-a67bb80b278e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:58922","PortSpecifier":{"PortValue":58922}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368351,"nanos":88311283},"http":{"id":"28ed0804-54b4-4a06-960d-a67bb80b278e","method":"POST","headers":{":authority":"e2e-shared-b-035267.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:05:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"28ed0804-54b4-4a06-960d-a67bb80b278e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:05:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"28ed0804-54b4-4a06-960d-a67bb80b278e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a5d356b1-3180-412a-8dea-76750349e251","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=57fd0aa1-6d66-4aee-9de0-7b7661d60c4b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60474a7ad191"]}}
{"level":"debug","ts":"2026-07-06T20:05:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"28ed0804-54b4-4a06-960d-a67bb80b278e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60474a7ad191"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=57fd0aa1-6d66-4aee-9de0-7b7661d60c4b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a5d356b1-3180-412a-8dea-76750349e251","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"40e3d5353e8d81831797688a39423707c6bf92a8999fa3557bb5c03dd7161fa0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-035267.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:05:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28ed0804-54b4-4a06-960d-a67bb80b278e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:05:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28ed0804-54b4-4a06-960d-a67bb80b278e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:05:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28ed0804-54b4-4a06-960d-a67bb80b278e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-035267/rate-test-model-035267\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:05:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"28ed0804-54b4-4a06-960d-a67bb80b278e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:05:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28ed0804-54b4-4a06-960d-a67bb80b278e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:05:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28ed0804-54b4-4a06-960d-a67bb80b278e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:05:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"28ed0804-54b4-4a06-960d-a67bb80b278e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:05:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"28ed0804-54b4-4a06-960d-a67bb80b278e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:05:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2215305e-d482-4f8f-9e08-310de7047b05","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:33784","PortSpecifier":{"PortValue":33784}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2215305e-d482-4f8f-9e08-310de7047b05","method":"POST","path":"/ai-tenant-e2e-shared-a-e1f716/rate-test-model-e1f716/v1/completions","host":"e2e-shared-a-e1f716.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:05:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2215305e-d482-4f8f-9e08-310de7047b05","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:33784","PortSpecifier":{"PortValue":33784}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368351,"nanos":130576408},"http":{"id":"2215305e-d482-4f8f-9e08-310de7047b05","method":"POST","headers":{":authority":"e2e-shared-a-e1f716.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e1f716/rate-test-model-e1f716/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:05:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2215305e-d482-4f8f-9e08-310de7047b05","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-j4YDVjjlYsDltxht_aixFyYnK7Tz9Gd2WpoDkjlVJWCIGnyjNb3uQjVgvwfN"}
{"level":"debug","ts":"2026-07-06T20:05:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2215305e-d482-4f8f-9e08-310de7047b05","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e1f716.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-j4YDVjjlYsDltxht_aixFyYnK7Tz9Gd2WpoDkjlVJWCIGnyjNb3uQjVgvwfN\"}"}
{"level":"debug","ts":"2026-07-06T20:05:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2215305e-d482-4f8f-9e08-310de7047b05","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e1f716.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"667a7e4b-874c-477c-8e64-5bbf6e97d3d6","keyName":"e2e-rate-a-6fe24f","subscription":"e2e-rate-iso-a-6fe24f","tenant":"e2e-shared-a-e1f716","userId":"667a7e4b-874c-477c-8e64-5bbf6e97d3d6","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:05:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2215305e-d482-4f8f-9e08-310de7047b05","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e1f716.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e1f716/rate-test-model-e1f716\",\"requestedSubscription\":\"e2e-rate-iso-a-6fe24f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T20:05:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2215305e-d482-4f8f-9e08-310de7047b05","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e1f716.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e1f716","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6fe24f","namespace":"ai-tenant-e2e-shared-a-e1f716","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T20:05:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2215305e-d482-4f8f-9e08-310de7047b05","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:05:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2215305e-d482-4f8f-9e08-310de7047b05","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:05:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2215305e-d482-4f8f-9e08-310de7047b05","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:05:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2215305e-d482-4f8f-9e08-310de7047b05","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:05:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2215305e-d482-4f8f-9e08-310de7047b05","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e1f716/rate-test-model-e1f716\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:05:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2215305e-d482-4f8f-9e08-310de7047b05","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:05:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2215305e-d482-4f8f-9e08-310de7047b05","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6fe24f"}
{"level":"debug","ts":"2026-07-06T20:05:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2215305e-d482-4f8f-9e08-310de7047b05","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:05:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2215305e-d482-4f8f-9e08-310de7047b05","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"667a7e4b-874c-477c-8e64-5bbf6e97d3d6","keyName":"e2e-rate-a-6fe24f","selected_subscription":"e2e-rate-iso-a-6fe24f","selected_subscription_key":"ai-tenant-e2e-shared-a-e1f716/e2e-rate-iso-a-6fe24f@ai-tenant-e2e-shared-a-e1f716/rate-test-model-e1f716","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e1f716","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6fe24f","namespace":"ai-tenant-e2e-shared-a-e1f716","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T20:05:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2215305e-d482-4f8f-9e08-310de7047b05","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:05:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2215305e-d482-4f8f-9e08-310de7047b05","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:05:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0f066f8b-88b3-9db2-93ca-71fd2f7bd461","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:33786","PortSpecifier":{"PortValue":33786}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0f066f8b-88b3-9db2-93ca-71fd2f7bd461","method":"POST","path":"/ai-tenant-e2e-shared-a-e1f716/rate-test-model-e1f716/v1/completions","host":"e2e-shared-a-e1f716.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:05:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0f066f8b-88b3-9db2-93ca-71fd2f7bd461","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:33786","PortSpecifier":{"PortValue":33786}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368352,"nanos":189901111},"http":{"id":"0f066f8b-88b3-9db2-93ca-71fd2f7bd461","method":"POST","headers":{":authority":"e2e-shared-a-e1f716.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e1f716/rate-test-model-e1f716/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:05:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0f066f8b-88b3-9db2-93ca-71fd2f7bd461","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-j4YDVjjlYsDltxht_aixFyYnK7Tz9Gd2WpoDkjlVJWCIGnyjNb3uQjVgvwfN"}
{"level":"debug","ts":"2026-07-06T20:05:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0f066f8b-88b3-9db2-93ca-71fd2f7bd461","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e1f716.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-j4YDVjjlYsDltxht_aixFyYnK7Tz9Gd2WpoDkjlVJWCIGnyjNb3uQjVgvwfN\"}"}
{"level":"debug","ts":"2026-07-06T20:05:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0f066f8b-88b3-9db2-93ca-71fd2f7bd461","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e1f716.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"667a7e4b-874c-477c-8e64-5bbf6e97d3d6","keyName":"e2e-rate-a-6fe24f","subscription":"e2e-rate-iso-a-6fe24f","tenant":"e2e-shared-a-e1f716","userId":"667a7e4b-874c-477c-8e64-5bbf6e97d3d6","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:05:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0f066f8b-88b3-9db2-93ca-71fd2f7bd461","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e1f716.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e1f716/rate-test-model-e1f716\",\"requestedSubscription\":\"e2e-rate-iso-a-6fe24f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T20:05:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0f066f8b-88b3-9db2-93ca-71fd2f7bd461","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e1f716.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e1f716","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6fe24f","namespace":"ai-tenant-e2e-shared-a-e1f716","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T20:05:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0f066f8b-88b3-9db2-93ca-71fd2f7bd461","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:05:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f066f8b-88b3-9db2-93ca-71fd2f7bd461","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:05:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f066f8b-88b3-9db2-93ca-71fd2f7bd461","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:05:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f066f8b-88b3-9db2-93ca-71fd2f7bd461","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e1f716/rate-test-model-e1f716\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:05:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f066f8b-88b3-9db2-93ca-71fd2f7bd461","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:05:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0f066f8b-88b3-9db2-93ca-71fd2f7bd461","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:05:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0f066f8b-88b3-9db2-93ca-71fd2f7bd461","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6fe24f"}
{"level":"debug","ts":"2026-07-06T20:05:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0f066f8b-88b3-9db2-93ca-71fd2f7bd461","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:05:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0f066f8b-88b3-9db2-93ca-71fd2f7bd461","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"667a7e4b-874c-477c-8e64-5bbf6e97d3d6","keyName":"e2e-rate-a-6fe24f","selected_subscription":"e2e-rate-iso-a-6fe24f","selected_subscription_key":"ai-tenant-e2e-shared-a-e1f716/e2e-rate-iso-a-6fe24f@ai-tenant-e2e-shared-a-e1f716/rate-test-model-e1f716","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e1f716","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6fe24f","namespace":"ai-tenant-e2e-shared-a-e1f716","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T20:05:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0f066f8b-88b3-9db2-93ca-71fd2f7bd461","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:05:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0f066f8b-88b3-9db2-93ca-71fd2f7bd461","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:05:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"83b271e5-39ed-4aa2-bf75-c092ad76c48d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:33798","PortSpecifier":{"PortValue":33798}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"83b271e5-39ed-4aa2-bf75-c092ad76c48d","method":"POST","path":"/ai-tenant-e2e-shared-a-e1f716/rate-test-model-e1f716/v1/completions","host":"e2e-shared-a-e1f716.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:05:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"83b271e5-39ed-4aa2-bf75-c092ad76c48d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:33798","PortSpecifier":{"PortValue":33798}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368353,"nanos":231069901},"http":{"id":"83b271e5-39ed-4aa2-bf75-c092ad76c48d","method":"POST","headers":{":authority":"e2e-shared-a-e1f716.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e1f716/rate-test-model-e1f716/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:05:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"83b271e5-39ed-4aa2-bf75-c092ad76c48d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-j4YDVjjlYsDltxht_aixFyYnK7Tz9Gd2WpoDkjlVJWCIGnyjNb3uQjVgvwfN"}
{"level":"debug","ts":"2026-07-06T20:05:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"83b271e5-39ed-4aa2-bf75-c092ad76c48d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e1f716.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-j4YDVjjlYsDltxht_aixFyYnK7Tz9Gd2WpoDkjlVJWCIGnyjNb3uQjVgvwfN\"}"}
{"level":"debug","ts":"2026-07-06T20:05:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"83b271e5-39ed-4aa2-bf75-c092ad76c48d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e1f716.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"667a7e4b-874c-477c-8e64-5bbf6e97d3d6","keyName":"e2e-rate-a-6fe24f","subscription":"e2e-rate-iso-a-6fe24f","tenant":"e2e-shared-a-e1f716","userId":"667a7e4b-874c-477c-8e64-5bbf6e97d3d6","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:05:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"83b271e5-39ed-4aa2-bf75-c092ad76c48d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e1f716.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e1f716/rate-test-model-e1f716\",\"requestedSubscription\":\"e2e-rate-iso-a-6fe24f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T20:05:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"83b271e5-39ed-4aa2-bf75-c092ad76c48d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e1f716.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e1f716","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6fe24f","namespace":"ai-tenant-e2e-shared-a-e1f716","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T20:05:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"83b271e5-39ed-4aa2-bf75-c092ad76c48d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:05:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83b271e5-39ed-4aa2-bf75-c092ad76c48d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:05:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83b271e5-39ed-4aa2-bf75-c092ad76c48d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:05:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83b271e5-39ed-4aa2-bf75-c092ad76c48d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e1f716/rate-test-model-e1f716\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:05:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83b271e5-39ed-4aa2-bf75-c092ad76c48d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:05:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"83b271e5-39ed-4aa2-bf75-c092ad76c48d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:05:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"83b271e5-39ed-4aa2-bf75-c092ad76c48d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:05:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"83b271e5-39ed-4aa2-bf75-c092ad76c48d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6fe24f"}
{"level":"debug","ts":"2026-07-06T20:05:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"83b271e5-39ed-4aa2-bf75-c092ad76c48d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"667a7e4b-874c-477c-8e64-5bbf6e97d3d6","keyName":"e2e-rate-a-6fe24f","selected_subscription":"e2e-rate-iso-a-6fe24f","selected_subscription_key":"ai-tenant-e2e-shared-a-e1f716/e2e-rate-iso-a-6fe24f@ai-tenant-e2e-shared-a-e1f716/rate-test-model-e1f716","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e1f716","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6fe24f","namespace":"ai-tenant-e2e-shared-a-e1f716","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T20:05:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"83b271e5-39ed-4aa2-bf75-c092ad76c48d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:05:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"83b271e5-39ed-4aa2-bf75-c092ad76c48d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:06:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b78c39fc-1d63-4b1d-9b9e-8478ddf89b77","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:52006","PortSpecifier":{"PortValue":52006}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b78c39fc-1d63-4b1d-9b9e-8478ddf89b77","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-e1f716.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:06:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b78c39fc-1d63-4b1d-9b9e-8478ddf89b77","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:52006","PortSpecifier":{"PortValue":52006}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368371,"nanos":323311238},"http":{"id":"b78c39fc-1d63-4b1d-9b9e-8478ddf89b77","method":"POST","headers":{":authority":"e2e-shared-a-e1f716.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:06:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b78c39fc-1d63-4b1d-9b9e-8478ddf89b77","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:06:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b78c39fc-1d63-4b1d-9b9e-8478ddf89b77","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a5d356b1-3180-412a-8dea-76750349e251","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=57fd0aa1-6d66-4aee-9de0-7b7661d60c4b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60474a7ad191"]}}
{"level":"debug","ts":"2026-07-06T20:06:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b78c39fc-1d63-4b1d-9b9e-8478ddf89b77","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60474a7ad191"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=57fd0aa1-6d66-4aee-9de0-7b7661d60c4b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a5d356b1-3180-412a-8dea-76750349e251","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"aa8785305a08abe890ff7dda026ae9e6cebf659c57e7cbbd766e12c5e21bc37e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-e1f716.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:06:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b78c39fc-1d63-4b1d-9b9e-8478ddf89b77","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:06:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b78c39fc-1d63-4b1d-9b9e-8478ddf89b77","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:06:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b78c39fc-1d63-4b1d-9b9e-8478ddf89b77","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e1f716/rate-test-model-e1f716\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:06:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b78c39fc-1d63-4b1d-9b9e-8478ddf89b77","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:06:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b78c39fc-1d63-4b1d-9b9e-8478ddf89b77","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:06:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b78c39fc-1d63-4b1d-9b9e-8478ddf89b77","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:06:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b78c39fc-1d63-4b1d-9b9e-8478ddf89b77","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:06:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b78c39fc-1d63-4b1d-9b9e-8478ddf89b77","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:06:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"56bbc0f8-7701-4072-af4d-f5ac6a359c38","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:55524","PortSpecifier":{"PortValue":55524}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"56bbc0f8-7701-4072-af4d-f5ac6a359c38","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-035267.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:06:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"56bbc0f8-7701-4072-af4d-f5ac6a359c38","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:55524","PortSpecifier":{"PortValue":55524}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368371,"nanos":359171902},"http":{"id":"56bbc0f8-7701-4072-af4d-f5ac6a359c38","method":"POST","headers":{":authority":"e2e-shared-b-035267.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:06:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"56bbc0f8-7701-4072-af4d-f5ac6a359c38","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:06:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"56bbc0f8-7701-4072-af4d-f5ac6a359c38","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"a5d356b1-3180-412a-8dea-76750349e251","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=57fd0aa1-6d66-4aee-9de0-7b7661d60c4b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60474a7ad191"]}}
{"level":"debug","ts":"2026-07-06T20:06:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"56bbc0f8-7701-4072-af4d-f5ac6a359c38","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60474a7ad191"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=57fd0aa1-6d66-4aee-9de0-7b7661d60c4b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"a5d356b1-3180-412a-8dea-76750349e251","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"40e3d5353e8d81831797688a39423707c6bf92a8999fa3557bb5c03dd7161fa0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-035267.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:06:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"56bbc0f8-7701-4072-af4d-f5ac6a359c38","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:06:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"56bbc0f8-7701-4072-af4d-f5ac6a359c38","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:06:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"56bbc0f8-7701-4072-af4d-f5ac6a359c38","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-035267/rate-test-model-035267\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:06:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"56bbc0f8-7701-4072-af4d-f5ac6a359c38","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:06:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"56bbc0f8-7701-4072-af4d-f5ac6a359c38","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:06:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"56bbc0f8-7701-4072-af4d-f5ac6a359c38","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:06:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"56bbc0f8-7701-4072-af4d-f5ac6a359c38","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:06:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"56bbc0f8-7701-4072-af4d-f5ac6a359c38","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:06:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"af8792ce-73d1-4df9-8c5e-630c58de40b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:52020","PortSpecifier":{"PortValue":52020}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"af8792ce-73d1-4df9-8c5e-630c58de40b9","method":"POST","path":"/ai-tenant-e2e-shared-a-e1f716/rate-test-model-e1f716/v1/completions","host":"e2e-shared-a-e1f716.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:06:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"af8792ce-73d1-4df9-8c5e-630c58de40b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:52020","PortSpecifier":{"PortValue":52020}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368371,"nanos":393112680},"http":{"id":"af8792ce-73d1-4df9-8c5e-630c58de40b9","method":"POST","headers":{":authority":"e2e-shared-a-e1f716.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e1f716/rate-test-model-e1f716/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:06:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"af8792ce-73d1-4df9-8c5e-630c58de40b9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1FY2tXa9xd2P5tI7g_HXo87fdCENbN8jyxFmwuiluo8gVWi4C41o7w6FAThU7"}
{"level":"debug","ts":"2026-07-06T20:06:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"af8792ce-73d1-4df9-8c5e-630c58de40b9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e1f716.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1FY2tXa9xd2P5tI7g_HXo87fdCENbN8jyxFmwuiluo8gVWi4C41o7w6FAThU7\"}"}
{"level":"debug","ts":"2026-07-06T20:06:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"af8792ce-73d1-4df9-8c5e-630c58de40b9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e1f716.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cd89af91-fc49-415a-844e-75a5362ddc30","keyName":"e2e-rate-a-d99f49","subscription":"e2e-rate-iso-a-d99f49","tenant":"e2e-shared-a-e1f716","userId":"cd89af91-fc49-415a-844e-75a5362ddc30","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:06:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"af8792ce-73d1-4df9-8c5e-630c58de40b9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e1f716.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e1f716/rate-test-model-e1f716\",\"requestedSubscription\":\"e2e-rate-iso-a-d99f49\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T20:06:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"af8792ce-73d1-4df9-8c5e-630c58de40b9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e1f716.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e1f716","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d99f49","namespace":"ai-tenant-e2e-shared-a-e1f716","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T20:06:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"af8792ce-73d1-4df9-8c5e-630c58de40b9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:06:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af8792ce-73d1-4df9-8c5e-630c58de40b9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:06:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af8792ce-73d1-4df9-8c5e-630c58de40b9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:06:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af8792ce-73d1-4df9-8c5e-630c58de40b9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:06:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af8792ce-73d1-4df9-8c5e-630c58de40b9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e1f716/rate-test-model-e1f716\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:06:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"af8792ce-73d1-4df9-8c5e-630c58de40b9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:06:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"af8792ce-73d1-4df9-8c5e-630c58de40b9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d99f49"}
{"level":"debug","ts":"2026-07-06T20:06:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"af8792ce-73d1-4df9-8c5e-630c58de40b9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:06:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"af8792ce-73d1-4df9-8c5e-630c58de40b9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"cd89af91-fc49-415a-844e-75a5362ddc30","keyName":"e2e-rate-a-d99f49","selected_subscription":"e2e-rate-iso-a-d99f49","selected_subscription_key":"ai-tenant-e2e-shared-a-e1f716/e2e-rate-iso-a-d99f49@ai-tenant-e2e-shared-a-e1f716/rate-test-model-e1f716","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e1f716","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d99f49","namespace":"ai-tenant-e2e-shared-a-e1f716","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T20:06:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"af8792ce-73d1-4df9-8c5e-630c58de40b9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:06:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"af8792ce-73d1-4df9-8c5e-630c58de40b9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:06:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f5daf7c6-68ce-43d4-8dc3-571c3915d1e3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:52034","PortSpecifier":{"PortValue":52034}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f5daf7c6-68ce-43d4-8dc3-571c3915d1e3","method":"POST","path":"/ai-tenant-e2e-shared-a-e1f716/rate-test-model-e1f716/v1/completions","host":"e2e-shared-a-e1f716.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:06:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f5daf7c6-68ce-43d4-8dc3-571c3915d1e3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:52034","PortSpecifier":{"PortValue":52034}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368372,"nanos":430569187},"http":{"id":"f5daf7c6-68ce-43d4-8dc3-571c3915d1e3","method":"POST","headers":{":authority":"e2e-shared-a-e1f716.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e1f716/rate-test-model-e1f716/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:06:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f5daf7c6-68ce-43d4-8dc3-571c3915d1e3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1FY2tXa9xd2P5tI7g_HXo87fdCENbN8jyxFmwuiluo8gVWi4C41o7w6FAThU7"}
{"level":"debug","ts":"2026-07-06T20:06:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f5daf7c6-68ce-43d4-8dc3-571c3915d1e3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e1f716.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1FY2tXa9xd2P5tI7g_HXo87fdCENbN8jyxFmwuiluo8gVWi4C41o7w6FAThU7\"}"}
{"level":"debug","ts":"2026-07-06T20:06:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f5daf7c6-68ce-43d4-8dc3-571c3915d1e3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e1f716.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cd89af91-fc49-415a-844e-75a5362ddc30","keyName":"e2e-rate-a-d99f49","subscription":"e2e-rate-iso-a-d99f49","tenant":"e2e-shared-a-e1f716","userId":"cd89af91-fc49-415a-844e-75a5362ddc30","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:06:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f5daf7c6-68ce-43d4-8dc3-571c3915d1e3","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e1f716.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e1f716/rate-test-model-e1f716\",\"requestedSubscription\":\"e2e-rate-iso-a-d99f49\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T20:06:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f5daf7c6-68ce-43d4-8dc3-571c3915d1e3","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e1f716.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e1f716","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d99f49","namespace":"ai-tenant-e2e-shared-a-e1f716","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T20:06:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f5daf7c6-68ce-43d4-8dc3-571c3915d1e3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:06:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f5daf7c6-68ce-43d4-8dc3-571c3915d1e3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:06:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f5daf7c6-68ce-43d4-8dc3-571c3915d1e3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:06:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f5daf7c6-68ce-43d4-8dc3-571c3915d1e3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e1f716/rate-test-model-e1f716\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:06:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f5daf7c6-68ce-43d4-8dc3-571c3915d1e3","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:06:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f5daf7c6-68ce-43d4-8dc3-571c3915d1e3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d99f49"}
{"level":"debug","ts":"2026-07-06T20:06:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f5daf7c6-68ce-43d4-8dc3-571c3915d1e3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:06:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f5daf7c6-68ce-43d4-8dc3-571c3915d1e3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:06:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f5daf7c6-68ce-43d4-8dc3-571c3915d1e3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"cd89af91-fc49-415a-844e-75a5362ddc30","keyName":"e2e-rate-a-d99f49","selected_subscription":"e2e-rate-iso-a-d99f49","selected_subscription_key":"ai-tenant-e2e-shared-a-e1f716/e2e-rate-iso-a-d99f49@ai-tenant-e2e-shared-a-e1f716/rate-test-model-e1f716","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e1f716","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d99f49","namespace":"ai-tenant-e2e-shared-a-e1f716","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T20:06:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f5daf7c6-68ce-43d4-8dc3-571c3915d1e3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:06:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f5daf7c6-68ce-43d4-8dc3-571c3915d1e3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:06:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"25bed615-56b2-4711-9354-5d6b3d390b7c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:52046","PortSpecifier":{"PortValue":52046}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"25bed615-56b2-4711-9354-5d6b3d390b7c","method":"POST","path":"/ai-tenant-e2e-shared-a-e1f716/rate-test-model-e1f716/v1/completions","host":"e2e-shared-a-e1f716.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:06:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"25bed615-56b2-4711-9354-5d6b3d390b7c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:52046","PortSpecifier":{"PortValue":52046}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368373,"nanos":465692529},"http":{"id":"25bed615-56b2-4711-9354-5d6b3d390b7c","method":"POST","headers":{":authority":"e2e-shared-a-e1f716.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e1f716/rate-test-model-e1f716/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:06:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"25bed615-56b2-4711-9354-5d6b3d390b7c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1FY2tXa9xd2P5tI7g_HXo87fdCENbN8jyxFmwuiluo8gVWi4C41o7w6FAThU7"}
{"level":"debug","ts":"2026-07-06T20:06:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"25bed615-56b2-4711-9354-5d6b3d390b7c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e1f716.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1FY2tXa9xd2P5tI7g_HXo87fdCENbN8jyxFmwuiluo8gVWi4C41o7w6FAThU7\"}"}
{"level":"debug","ts":"2026-07-06T20:06:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"25bed615-56b2-4711-9354-5d6b3d390b7c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e1f716.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cd89af91-fc49-415a-844e-75a5362ddc30","keyName":"e2e-rate-a-d99f49","subscription":"e2e-rate-iso-a-d99f49","tenant":"e2e-shared-a-e1f716","userId":"cd89af91-fc49-415a-844e-75a5362ddc30","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:06:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"25bed615-56b2-4711-9354-5d6b3d390b7c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e1f716.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e1f716/rate-test-model-e1f716\",\"requestedSubscription\":\"e2e-rate-iso-a-d99f49\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T20:06:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"25bed615-56b2-4711-9354-5d6b3d390b7c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e1f716.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e1f716","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d99f49","namespace":"ai-tenant-e2e-shared-a-e1f716","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T20:06:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"25bed615-56b2-4711-9354-5d6b3d390b7c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:06:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"25bed615-56b2-4711-9354-5d6b3d390b7c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:06:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"25bed615-56b2-4711-9354-5d6b3d390b7c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:06:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"25bed615-56b2-4711-9354-5d6b3d390b7c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e1f716/rate-test-model-e1f716\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:06:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"25bed615-56b2-4711-9354-5d6b3d390b7c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:06:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"25bed615-56b2-4711-9354-5d6b3d390b7c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:06:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"25bed615-56b2-4711-9354-5d6b3d390b7c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d99f49"}
{"level":"debug","ts":"2026-07-06T20:06:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"25bed615-56b2-4711-9354-5d6b3d390b7c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:06:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"25bed615-56b2-4711-9354-5d6b3d390b7c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"cd89af91-fc49-415a-844e-75a5362ddc30","keyName":"e2e-rate-a-d99f49","selected_subscription":"e2e-rate-iso-a-d99f49","selected_subscription_key":"ai-tenant-e2e-shared-a-e1f716/e2e-rate-iso-a-d99f49@ai-tenant-e2e-shared-a-e1f716/rate-test-model-e1f716","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e1f716","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d99f49","namespace":"ai-tenant-e2e-shared-a-e1f716","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T20:06:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"25bed615-56b2-4711-9354-5d6b3d390b7c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:06:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"25bed615-56b2-4711-9354-5d6b3d390b7c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:06:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f8a00ac7-dfc4-4cc4-9e57-d0f1767e8c32","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:52062","PortSpecifier":{"PortValue":52062}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f8a00ac7-dfc4-4cc4-9e57-d0f1767e8c32","method":"POST","path":"/ai-tenant-e2e-shared-a-e1f716/rate-test-model-e1f716/v1/completions","host":"e2e-shared-a-e1f716.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:06:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f8a00ac7-dfc4-4cc4-9e57-d0f1767e8c32","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:52062","PortSpecifier":{"PortValue":52062}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368374,"nanos":504704199},"http":{"id":"f8a00ac7-dfc4-4cc4-9e57-d0f1767e8c32","method":"POST","headers":{":authority":"e2e-shared-a-e1f716.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e1f716/rate-test-model-e1f716/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:06:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f8a00ac7-dfc4-4cc4-9e57-d0f1767e8c32","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1FY2tXa9xd2P5tI7g_HXo87fdCENbN8jyxFmwuiluo8gVWi4C41o7w6FAThU7"}
{"level":"debug","ts":"2026-07-06T20:06:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f8a00ac7-dfc4-4cc4-9e57-d0f1767e8c32","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e1f716.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1FY2tXa9xd2P5tI7g_HXo87fdCENbN8jyxFmwuiluo8gVWi4C41o7w6FAThU7\"}"}
{"level":"debug","ts":"2026-07-06T20:06:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f8a00ac7-dfc4-4cc4-9e57-d0f1767e8c32","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e1f716.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cd89af91-fc49-415a-844e-75a5362ddc30","keyName":"e2e-rate-a-d99f49","subscription":"e2e-rate-iso-a-d99f49","tenant":"e2e-shared-a-e1f716","userId":"cd89af91-fc49-415a-844e-75a5362ddc30","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:06:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f8a00ac7-dfc4-4cc4-9e57-d0f1767e8c32","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e1f716.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e1f716/rate-test-model-e1f716\",\"requestedSubscription\":\"e2e-rate-iso-a-d99f49\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T20:06:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f8a00ac7-dfc4-4cc4-9e57-d0f1767e8c32","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e1f716.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e1f716","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d99f49","namespace":"ai-tenant-e2e-shared-a-e1f716","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T20:06:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f8a00ac7-dfc4-4cc4-9e57-d0f1767e8c32","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:06:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f8a00ac7-dfc4-4cc4-9e57-d0f1767e8c32","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:06:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f8a00ac7-dfc4-4cc4-9e57-d0f1767e8c32","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:06:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f8a00ac7-dfc4-4cc4-9e57-d0f1767e8c32","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:06:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f8a00ac7-dfc4-4cc4-9e57-d0f1767e8c32","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e1f716/rate-test-model-e1f716\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:06:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f8a00ac7-dfc4-4cc4-9e57-d0f1767e8c32","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:06:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f8a00ac7-dfc4-4cc4-9e57-d0f1767e8c32","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:06:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f8a00ac7-dfc4-4cc4-9e57-d0f1767e8c32","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d99f49"}
{"level":"debug","ts":"2026-07-06T20:06:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f8a00ac7-dfc4-4cc4-9e57-d0f1767e8c32","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"cd89af91-fc49-415a-844e-75a5362ddc30","keyName":"e2e-rate-a-d99f49","selected_subscription":"e2e-rate-iso-a-d99f49","selected_subscription_key":"ai-tenant-e2e-shared-a-e1f716/e2e-rate-iso-a-d99f49@ai-tenant-e2e-shared-a-e1f716/rate-test-model-e1f716","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e1f716","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d99f49","namespace":"ai-tenant-e2e-shared-a-e1f716","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T20:06:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f8a00ac7-dfc4-4cc4-9e57-d0f1767e8c32","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:06:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f8a00ac7-dfc4-4cc4-9e57-d0f1767e8c32","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:06:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1994aa60-4c53-4d7c-9e48-e97aeae841e6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:41304","PortSpecifier":{"PortValue":41304}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1994aa60-4c53-4d7c-9e48-e97aeae841e6","method":"POST","path":"/ai-tenant-e2e-shared-a-e1f716/rate-test-model-e1f716/v1/completions","host":"e2e-shared-a-e1f716.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:06:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1994aa60-4c53-4d7c-9e48-e97aeae841e6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:41304","PortSpecifier":{"PortValue":41304}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368375,"nanos":541138794},"http":{"id":"1994aa60-4c53-4d7c-9e48-e97aeae841e6","method":"POST","headers":{":authority":"e2e-shared-a-e1f716.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e1f716/rate-test-model-e1f716/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:06:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1994aa60-4c53-4d7c-9e48-e97aeae841e6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1FY2tXa9xd2P5tI7g_HXo87fdCENbN8jyxFmwuiluo8gVWi4C41o7w6FAThU7"}
{"level":"debug","ts":"2026-07-06T20:06:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1994aa60-4c53-4d7c-9e48-e97aeae841e6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e1f716.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1FY2tXa9xd2P5tI7g_HXo87fdCENbN8jyxFmwuiluo8gVWi4C41o7w6FAThU7\"}"}
{"level":"debug","ts":"2026-07-06T20:06:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1994aa60-4c53-4d7c-9e48-e97aeae841e6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e1f716.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cd89af91-fc49-415a-844e-75a5362ddc30","keyName":"e2e-rate-a-d99f49","subscription":"e2e-rate-iso-a-d99f49","tenant":"e2e-shared-a-e1f716","userId":"cd89af91-fc49-415a-844e-75a5362ddc30","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:06:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1994aa60-4c53-4d7c-9e48-e97aeae841e6","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e1f716.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e1f716/rate-test-model-e1f716\",\"requestedSubscription\":\"e2e-rate-iso-a-d99f49\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T20:06:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1994aa60-4c53-4d7c-9e48-e97aeae841e6","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e1f716.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e1f716","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d99f49","namespace":"ai-tenant-e2e-shared-a-e1f716","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T20:06:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1994aa60-4c53-4d7c-9e48-e97aeae841e6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:06:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1994aa60-4c53-4d7c-9e48-e97aeae841e6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:06:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1994aa60-4c53-4d7c-9e48-e97aeae841e6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:06:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1994aa60-4c53-4d7c-9e48-e97aeae841e6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e1f716/rate-test-model-e1f716\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:06:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1994aa60-4c53-4d7c-9e48-e97aeae841e6","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:06:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1994aa60-4c53-4d7c-9e48-e97aeae841e6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d99f49"}
{"level":"debug","ts":"2026-07-06T20:06:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1994aa60-4c53-4d7c-9e48-e97aeae841e6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:06:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1994aa60-4c53-4d7c-9e48-e97aeae841e6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:06:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1994aa60-4c53-4d7c-9e48-e97aeae841e6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"cd89af91-fc49-415a-844e-75a5362ddc30","keyName":"e2e-rate-a-d99f49","selected_subscription":"e2e-rate-iso-a-d99f49","selected_subscription_key":"ai-tenant-e2e-shared-a-e1f716/e2e-rate-iso-a-d99f49@ai-tenant-e2e-shared-a-e1f716/rate-test-model-e1f716","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e1f716","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d99f49","namespace":"ai-tenant-e2e-shared-a-e1f716","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T20:06:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1994aa60-4c53-4d7c-9e48-e97aeae841e6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:06:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1994aa60-4c53-4d7c-9e48-e97aeae841e6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:06:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c916831b-e164-4c0f-96a9-89b8a116de3c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:41308","PortSpecifier":{"PortValue":41308}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c916831b-e164-4c0f-96a9-89b8a116de3c","method":"POST","path":"/ai-tenant-e2e-shared-a-e1f716/rate-test-model-e1f716/v1/completions","host":"e2e-shared-a-e1f716.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:06:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c916831b-e164-4c0f-96a9-89b8a116de3c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:41308","PortSpecifier":{"PortValue":41308}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368376,"nanos":577941863},"http":{"id":"c916831b-e164-4c0f-96a9-89b8a116de3c","method":"POST","headers":{":authority":"e2e-shared-a-e1f716.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-e1f716/rate-test-model-e1f716/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:06:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c916831b-e164-4c0f-96a9-89b8a116de3c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1FY2tXa9xd2P5tI7g_HXo87fdCENbN8jyxFmwuiluo8gVWi4C41o7w6FAThU7"}
{"level":"debug","ts":"2026-07-06T20:06:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c916831b-e164-4c0f-96a9-89b8a116de3c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-e1f716.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1FY2tXa9xd2P5tI7g_HXo87fdCENbN8jyxFmwuiluo8gVWi4C41o7w6FAThU7\"}"}
{"level":"debug","ts":"2026-07-06T20:06:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c916831b-e164-4c0f-96a9-89b8a116de3c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e1f716.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cd89af91-fc49-415a-844e-75a5362ddc30","keyName":"e2e-rate-a-d99f49","subscription":"e2e-rate-iso-a-d99f49","tenant":"e2e-shared-a-e1f716","userId":"cd89af91-fc49-415a-844e-75a5362ddc30","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:06:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c916831b-e164-4c0f-96a9-89b8a116de3c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-e1f716.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-e1f716/rate-test-model-e1f716\",\"requestedSubscription\":\"e2e-rate-iso-a-d99f49\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T20:06:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c916831b-e164-4c0f-96a9-89b8a116de3c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-e1f716.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e1f716","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d99f49","namespace":"ai-tenant-e2e-shared-a-e1f716","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T20:06:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c916831b-e164-4c0f-96a9-89b8a116de3c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:06:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c916831b-e164-4c0f-96a9-89b8a116de3c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:06:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c916831b-e164-4c0f-96a9-89b8a116de3c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:06:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c916831b-e164-4c0f-96a9-89b8a116de3c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-e1f716/rate-test-model-e1f716\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:06:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c916831b-e164-4c0f-96a9-89b8a116de3c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:06:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c916831b-e164-4c0f-96a9-89b8a116de3c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:06:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c916831b-e164-4c0f-96a9-89b8a116de3c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d99f49"}
{"level":"debug","ts":"2026-07-06T20:06:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c916831b-e164-4c0f-96a9-89b8a116de3c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:06:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c916831b-e164-4c0f-96a9-89b8a116de3c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"cd89af91-fc49-415a-844e-75a5362ddc30","keyName":"e2e-rate-a-d99f49","selected_subscription":"e2e-rate-iso-a-d99f49","selected_subscription_key":"ai-tenant-e2e-shared-a-e1f716/e2e-rate-iso-a-d99f49@ai-tenant-e2e-shared-a-e1f716/rate-test-model-e1f716","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e1f716","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d99f49","namespace":"ai-tenant-e2e-shared-a-e1f716","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T20:06:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c916831b-e164-4c0f-96a9-89b8a116de3c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:06:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c916831b-e164-4c0f-96a9-89b8a116de3c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:06:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f25ec8a7-0951-474d-9304-013ff2c293b0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:48502","PortSpecifier":{"PortValue":48502}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f25ec8a7-0951-474d-9304-013ff2c293b0","method":"POST","path":"/ai-tenant-e2e-shared-b-035267/rate-test-model-035267/v1/completions","host":"e2e-shared-b-035267.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:06:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f25ec8a7-0951-474d-9304-013ff2c293b0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.9:48502","PortSpecifier":{"PortValue":48502}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368376,"nanos":615068833},"http":{"id":"f25ec8a7-0951-474d-9304-013ff2c293b0","method":"POST","headers":{":authority":"e2e-shared-b-035267.apps.0ddafa3d-b0a0-4bcd-9d42-60474a7ad191.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-035267/rate-test-model-035267/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:06:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f25ec8a7-0951-474d-9304-013ff2c293b0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-zFQQtukOip4DvaIh_j0xNtYqvBvhdqK6Y9JzHToNqR8ALc4l7ZC3cq5EcuvQ"}
{"level":"debug","ts":"2026-07-06T20:06:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f25ec8a7-0951-474d-9304-013ff2c293b0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-035267.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-zFQQtukOip4DvaIh_j0xNtYqvBvhdqK6Y9JzHToNqR8ALc4l7ZC3cq5EcuvQ\"}"}
{"level":"debug","ts":"2026-07-06T20:06:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f25ec8a7-0951-474d-9304-013ff2c293b0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-035267.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"aeb15a2b-70b4-43c8-9c5f-8d28c021edf4","keyName":"e2e-rate-b-d99f49","subscription":"e2e-rate-iso-b-d99f49","tenant":"e2e-shared-b-035267","userId":"aeb15a2b-70b4-43c8-9c5f-8d28c021edf4","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:06:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f25ec8a7-0951-474d-9304-013ff2c293b0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-035267.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-035267/rate-test-model-035267\",\"requestedSubscription\":\"e2e-rate-iso-b-d99f49\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T20:06:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f25ec8a7-0951-474d-9304-013ff2c293b0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-035267.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-035267","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-d99f49","namespace":"ai-tenant-e2e-shared-b-035267","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T20:06:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f25ec8a7-0951-474d-9304-013ff2c293b0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:06:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f25ec8a7-0951-474d-9304-013ff2c293b0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:06:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f25ec8a7-0951-474d-9304-013ff2c293b0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:06:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f25ec8a7-0951-474d-9304-013ff2c293b0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:06:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f25ec8a7-0951-474d-9304-013ff2c293b0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-035267/rate-test-model-035267\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:06:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f25ec8a7-0951-474d-9304-013ff2c293b0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:06:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f25ec8a7-0951-474d-9304-013ff2c293b0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-d99f49"}
{"level":"debug","ts":"2026-07-06T20:06:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f25ec8a7-0951-474d-9304-013ff2c293b0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:06:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f25ec8a7-0951-474d-9304-013ff2c293b0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"aeb15a2b-70b4-43c8-9c5f-8d28c021edf4","keyName":"e2e-rate-b-d99f49","selected_subscription":"e2e-rate-iso-b-d99f49","selected_subscription_key":"ai-tenant-e2e-shared-b-035267/e2e-rate-iso-b-d99f49@ai-tenant-e2e-shared-b-035267/rate-test-model-035267","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-035267","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-d99f49","namespace":"ai-tenant-e2e-shared-b-035267","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T20:06:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f25ec8a7-0951-474d-9304-013ff2c293b0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:06:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f25ec8a7-0951-474d-9304-013ff2c293b0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f04bebfc01ac121bf2926f74fe62ccab94719519b552c0eda8b502d2fc40535e"}
{"level":"info","ts":"2026-07-06T20:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/913da5197eeaedb037a0fccfed660b4abf390f6d82321ffebdcd045b5cddd00e"}
{"level":"info","ts":"2026-07-06T20:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/202e86462b4a9055ac07849a602d5adc57fa7f0b716c8fafc9d7f4606f5f7610"}
{"level":"info","ts":"2026-07-06T20:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/be10f31b29274d7fc7a2ff52919f84b0471fef38f86e2848b8f4968ec9e035c8"}
{"level":"info","ts":"2026-07-06T20:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/42974c8df0704b09e3878556fa0217110a9f2f94c1bf4eaa27ca80dbd2df4bfb"}
{"level":"info","ts":"2026-07-06T20:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/44d5a1f2ebde73e06d9573326543ff88130f25e85bf3495a520eabb14c34750a"}
{"level":"info","ts":"2026-07-06T20:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4dd2f6ada48b63f6212a40fd8e7be79f33eeac2b4dc6b670c3c2d96a5eba0424"}
{"level":"info","ts":"2026-07-06T20:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6fff1d9d9ed10c87624eb7f0a63c02edef9402e389de41761d0f22d81ec4e3a4"}
{"level":"info","ts":"2026-07-06T20:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ff910f55c001b36430840202a6446a61222ea7ad2935566f91b7f61559ff425b"}
{"level":"info","ts":"2026-07-06T20:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6e38df8dbfc86f0cfd7668c8dbbba60997a349a939a17f932f441a384886871c"}
{"level":"info","ts":"2026-07-06T20:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e88012a6e19d0849a8e05ff6b538c3c5f2350430b3110fd6458061dbc61430cd"}
{"level":"info","ts":"2026-07-06T20:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/557c9fa39cba552556d385df2ec1284ac39644dcf1a966f781da1d98866bc2e1"}
{"level":"info","ts":"2026-07-06T20:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c290fd37072c2652a738930d66454761d0ad2c881fd01b4555d88cd653b258bf"}
{"level":"info","ts":"2026-07-06T20:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e3da8387e57c914b6d984a3f13179a926ed680f8655fdfa9eda72393f5810c10"}
{"level":"info","ts":"2026-07-06T20:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/10ab7997502692fb8bfa82ad74bbb1773ee0111d4792eb020da3fc74ec8fcce6"}
{"level":"info","ts":"2026-07-06T20:06:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/81ab0c4c6095e5c311389af030cede5fc3b12956d6dc6ac00577314d30947009"}
{"level":"info","ts":"2026-07-06T20:06:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aa8785305a08abe890ff7dda026ae9e6cebf659c57e7cbbd766e12c5e21bc37e"}
{"level":"info","ts":"2026-07-06T20:06:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/587b77012c9a8af1e9972a639b5c14b5be92391d71cd7aa625674d0b445047ae"}
{"level":"info","ts":"2026-07-06T20:07:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/40e3d5353e8d81831797688a39423707c6bf92a8999fa3557bb5c03dd7161fa0"}
{"level":"info","ts":"2026-07-06T20:07:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9a286657a61605a6c4db687cecdec77fb08d52d653428a8ecc52e94838d856af"}