--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"info","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dea2861ef54167e348ffd6e1431c785dabbd7bd75c96449a2a83432e1c5752a0"}
{"level":"debug","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dea2861ef54167e348ffd6e1431c785dabbd7bd75c96449a2a83432e1c5752a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:45:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:45:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dea2861ef54167e348ffd6e1431c785dabbd7bd75c96449a2a83432e1c5752a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d49f4f38df055d3b82b7ba4ce0be95538050ca5ea3fde25abe9a477e80f3b6c1"}
{"level":"info","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dea2861ef54167e348ffd6e1431c785dabbd7bd75c96449a2a83432e1c5752a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dea2861ef54167e348ffd6e1431c785dabbd7bd75c96449a2a83432e1c5752a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:45:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:45:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dea2861ef54167e348ffd6e1431c785dabbd7bd75c96449a2a83432e1c5752a0"}
{"level":"info","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dea2861ef54167e348ffd6e1431c785dabbd7bd75c96449a2a83432e1c5752a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dea2861ef54167e348ffd6e1431c785dabbd7bd75c96449a2a83432e1c5752a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dea2861ef54167e348ffd6e1431c785dabbd7bd75c96449a2a83432e1c5752a0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dea2861ef54167e348ffd6e1431c785dabbd7bd75c96449a2a83432e1c5752a0"}
{"level":"debug","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dea2861ef54167e348ffd6e1431c785dabbd7bd75c96449a2a83432e1c5752a0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dea2861ef54167e348ffd6e1431c785dabbd7bd75c96449a2a83432e1c5752a0"}
{"level":"debug","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dea2861ef54167e348ffd6e1431c785dabbd7bd75c96449a2a83432e1c5752a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:45:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:45:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dea2861ef54167e348ffd6e1431c785dabbd7bd75c96449a2a83432e1c5752a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dea2861ef54167e348ffd6e1431c785dabbd7bd75c96449a2a83432e1c5752a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ce5823e3d90082d937b3fb4723770ef7784e4c2be746d4df3cf984707a2c9eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:45:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:45:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ce5823e3d90082d937b3fb4723770ef7784e4c2be746d4df3cf984707a2c9eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dea2861ef54167e348ffd6e1431c785dabbd7bd75c96449a2a83432e1c5752a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ce5823e3d90082d937b3fb4723770ef7784e4c2be746d4df3cf984707a2c9eb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ce5823e3d90082d937b3fb4723770ef7784e4c2be746d4df3cf984707a2c9eb"}
{"level":"debug","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ce5823e3d90082d937b3fb4723770ef7784e4c2be746d4df3cf984707a2c9eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:45:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:45:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ce5823e3d90082d937b3fb4723770ef7784e4c2be746d4df3cf984707a2c9eb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ce5823e3d90082d937b3fb4723770ef7784e4c2be746d4df3cf984707a2c9eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ce5823e3d90082d937b3fb4723770ef7784e4c2be746d4df3cf984707a2c9eb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dea2861ef54167e348ffd6e1431c785dabbd7bd75c96449a2a83432e1c5752a0"}
{"level":"info","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ce5823e3d90082d937b3fb4723770ef7784e4c2be746d4df3cf984707a2c9eb"}
{"level":"debug","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9f2d80f895818b4e3c05d264ebb1ec77610ca7f9c1c5914058caff707b7d959","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:45:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:45:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9f2d80f895818b4e3c05d264ebb1ec77610ca7f9c1c5914058caff707b7d959","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9f2d80f895818b4e3c05d264ebb1ec77610ca7f9c1c5914058caff707b7d959","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:45:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:45:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9f2d80f895818b4e3c05d264ebb1ec77610ca7f9c1c5914058caff707b7d959"}
{"level":"info","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9f2d80f895818b4e3c05d264ebb1ec77610ca7f9c1c5914058caff707b7d959","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9f2d80f895818b4e3c05d264ebb1ec77610ca7f9c1c5914058caff707b7d959","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:45:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:45:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f9f2d80f895818b4e3c05d264ebb1ec77610ca7f9c1c5914058caff707b7d959","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f9f2d80f895818b4e3c05d264ebb1ec77610ca7f9c1c5914058caff707b7d959\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9f2d80f895818b4e3c05d264ebb1ec77610ca7f9c1c5914058caff707b7d959","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9f2d80f895818b4e3c05d264ebb1ec77610ca7f9c1c5914058caff707b7d959","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9f2d80f895818b4e3c05d264ebb1ec77610ca7f9c1c5914058caff707b7d959"}
{"level":"info","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9f2d80f895818b4e3c05d264ebb1ec77610ca7f9c1c5914058caff707b7d959"}
{"level":"debug","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9f2d80f895818b4e3c05d264ebb1ec77610ca7f9c1c5914058caff707b7d959","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:45:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:45:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f9f2d80f895818b4e3c05d264ebb1ec77610ca7f9c1c5914058caff707b7d959"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9f2d80f895818b4e3c05d264ebb1ec77610ca7f9c1c5914058caff707b7d959","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9f2d80f895818b4e3c05d264ebb1ec77610ca7f9c1c5914058caff707b7d959","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9f2d80f895818b4e3c05d264ebb1ec77610ca7f9c1c5914058caff707b7d959"}
{"level":"debug","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e4870a77bdf8cfa889bf5498321544d52c04bb74eee9ec3dc51bbbd49e9ed14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:45:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:45:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e4870a77bdf8cfa889bf5498321544d52c04bb74eee9ec3dc51bbbd49e9ed14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e4870a77bdf8cfa889bf5498321544d52c04bb74eee9ec3dc51bbbd49e9ed14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e4870a77bdf8cfa889bf5498321544d52c04bb74eee9ec3dc51bbbd49e9ed14","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e4870a77bdf8cfa889bf5498321544d52c04bb74eee9ec3dc51bbbd49e9ed14"}
{"level":"debug","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e4870a77bdf8cfa889bf5498321544d52c04bb74eee9ec3dc51bbbd49e9ed14","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e4870a77bdf8cfa889bf5498321544d52c04bb74eee9ec3dc51bbbd49e9ed14"}
{"level":"debug","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e4870a77bdf8cfa889bf5498321544d52c04bb74eee9ec3dc51bbbd49e9ed14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:45:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:45:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e4870a77bdf8cfa889bf5498321544d52c04bb74eee9ec3dc51bbbd49e9ed14"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e4870a77bdf8cfa889bf5498321544d52c04bb74eee9ec3dc51bbbd49e9ed14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c67f2cd13dc5eb17ae9e988b451cfea084c8534585fddcb3f91899b659f486ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:45:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:45:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c67f2cd13dc5eb17ae9e988b451cfea084c8534585fddcb3f91899b659f486ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e4870a77bdf8cfa889bf5498321544d52c04bb74eee9ec3dc51bbbd49e9ed14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c67f2cd13dc5eb17ae9e988b451cfea084c8534585fddcb3f91899b659f486ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c67f2cd13dc5eb17ae9e988b451cfea084c8534585fddcb3f91899b659f486ff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c67f2cd13dc5eb17ae9e988b451cfea084c8534585fddcb3f91899b659f486ff"}
{"level":"debug","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c67f2cd13dc5eb17ae9e988b451cfea084c8534585fddcb3f91899b659f486ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:45:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:45:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c67f2cd13dc5eb17ae9e988b451cfea084c8534585fddcb3f91899b659f486ff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e4870a77bdf8cfa889bf5498321544d52c04bb74eee9ec3dc51bbbd49e9ed14"}
{"level":"info","ts":"2026-07-03T14:45:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c67f2cd13dc5eb17ae9e988b451cfea084c8534585fddcb3f91899b659f486ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c67f2cd13dc5eb17ae9e988b451cfea084c8534585fddcb3f91899b659f486ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:45:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:45:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c67f2cd13dc5eb17ae9e988b451cfea084c8534585fddcb3f91899b659f486ff"}
{"level":"info","ts":"2026-07-03T14:45:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c67f2cd13dc5eb17ae9e988b451cfea084c8534585fddcb3f91899b659f486ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c67f2cd13dc5eb17ae9e988b451cfea084c8534585fddcb3f91899b659f486ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c67f2cd13dc5eb17ae9e988b451cfea084c8534585fddcb3f91899b659f486ff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:45:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c67f2cd13dc5eb17ae9e988b451cfea084c8534585fddcb3f91899b659f486ff"}
{"level":"debug","ts":"2026-07-03T14:45:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c794823c094938d3eb532f7ad559325fc62b868413912e8f6172380e4c7a5a04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:45:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:45:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c67f2cd13dc5eb17ae9e988b451cfea084c8534585fddcb3f91899b659f486ff"}
{"level":"info","ts":"2026-07-03T14:45:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c794823c094938d3eb532f7ad559325fc62b868413912e8f6172380e4c7a5a04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c67f2cd13dc5eb17ae9e988b451cfea084c8534585fddcb3f91899b659f486ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:45:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:45:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c67f2cd13dc5eb17ae9e988b451cfea084c8534585fddcb3f91899b659f486ff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c67f2cd13dc5eb17ae9e988b451cfea084c8534585fddcb3f91899b659f486ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c45c9d9bc4acab840273afdeda5b296313db0d92143dc8f91ef8a7e129bbe127","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:45:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:45:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c794823c094938d3eb532f7ad559325fc62b868413912e8f6172380e4c7a5a04"}
{"level":"info","ts":"2026-07-03T14:45:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c45c9d9bc4acab840273afdeda5b296313db0d92143dc8f91ef8a7e129bbe127","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c794823c094938d3eb532f7ad559325fc62b868413912e8f6172380e4c7a5a04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:45:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:45:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c794823c094938d3eb532f7ad559325fc62b868413912e8f6172380e4c7a5a04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c45c9d9bc4acab840273afdeda5b296313db0d92143dc8f91ef8a7e129bbe127"}
{"level":"info","ts":"2026-07-03T14:45:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c794823c094938d3eb532f7ad559325fc62b868413912e8f6172380e4c7a5a04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c67f2cd13dc5eb17ae9e988b451cfea084c8534585fddcb3f91899b659f486ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c45c9d9bc4acab840273afdeda5b296313db0d92143dc8f91ef8a7e129bbe127","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:45:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:45:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c45c9d9bc4acab840273afdeda5b296313db0d92143dc8f91ef8a7e129bbe127"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c794823c094938d3eb532f7ad559325fc62b868413912e8f6172380e4c7a5a04"}
{"level":"info","ts":"2026-07-03T14:45:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c45c9d9bc4acab840273afdeda5b296313db0d92143dc8f91ef8a7e129bbe127","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c794823c094938d3eb532f7ad559325fc62b868413912e8f6172380e4c7a5a04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c45c9d9bc4acab840273afdeda5b296313db0d92143dc8f91ef8a7e129bbe127","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:45:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c67f2cd13dc5eb17ae9e988b451cfea084c8534585fddcb3f91899b659f486ff"}
{"level":"info","ts":"2026-07-03T14:45:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c45c9d9bc4acab840273afdeda5b296313db0d92143dc8f91ef8a7e129bbe127"}
{"level":"info","ts":"2026-07-03T14:45:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c794823c094938d3eb532f7ad559325fc62b868413912e8f6172380e4c7a5a04"}
{"level":"info","ts":"2026-07-03T14:45:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"07b804bd-31c8-48a7-9709-ad4d4a0c27be","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:42328","PortSpecifier":{"PortValue":42328}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"07b804bd-31c8-48a7-9709-ad4d4a0c27be","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-inf-a-c1cb72.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T14:45:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"07b804bd-31c8-48a7-9709-ad4d4a0c27be","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:42328","PortSpecifier":{"PortValue":42328}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783089935,"nanos":126108747},"http":{"id":"07b804bd-31c8-48a7-9709-ad4d4a0c27be","method":"POST","headers":{":authority":"e2e-inf-a-c1cb72.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:45:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"07b804bd-31c8-48a7-9709-ad4d4a0c27be","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T14:45:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"07b804bd-31c8-48a7-9709-ad4d4a0c27be","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1855d0c8-d07c-417e-9b3f-a12b5b00145c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=27a9bfa3-ed3c-4129-8f90-1c3d2b27fe8d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/af9f436983f9"]}}
{"level":"debug","ts":"2026-07-03T14:45:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"07b804bd-31c8-48a7-9709-ad4d4a0c27be","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/af9f436983f9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=27a9bfa3-ed3c-4129-8f90-1c3d2b27fe8d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1855d0c8-d07c-417e-9b3f-a12b5b00145c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a35f8a9500b21cb660bc013ba39749f2e25cb8dbee582033e43ebf75dcb3b4d9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-inf-a-c1cb72.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:45:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07b804bd-31c8-48a7-9709-ad4d4a0c27be","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:45:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07b804bd-31c8-48a7-9709-ad4d4a0c27be","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:45:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07b804bd-31c8-48a7-9709-ad4d4a0c27be","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-inf-a-c1cb72/test-model-c1cb72\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:45:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"07b804bd-31c8-48a7-9709-ad4d4a0c27be","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T14:45:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"07b804bd-31c8-48a7-9709-ad4d4a0c27be","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T14:45:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"07b804bd-31c8-48a7-9709-ad4d4a0c27be","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-03T14:45:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"07b804bd-31c8-48a7-9709-ad4d4a0c27be","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T14:45:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"07b804bd-31c8-48a7-9709-ad4d4a0c27be","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T14:45:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c79c4a4c-3b67-4bea-a0ac-38b1afa069c6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:56796","PortSpecifier":{"PortValue":56796}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c79c4a4c-3b67-4bea-a0ac-38b1afa069c6","method":"POST","path":"/ai-tenant-e2e-inf-a-c1cb72/test-model-c1cb72/v1/chat/completions","host":"e2e-inf-a-c1cb72.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T14:45:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c79c4a4c-3b67-4bea-a0ac-38b1afa069c6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:56796","PortSpecifier":{"PortValue":56796}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783089939,"nanos":182560798},"http":{"id":"c79c4a4c-3b67-4bea-a0ac-38b1afa069c6","method":"POST","headers":{":authority":"e2e-inf-a-c1cb72.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-inf-a-c1cb72/test-model-c1cb72/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:45:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c79c4a4c-3b67-4bea-a0ac-38b1afa069c6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1XsviJneypZX2UIga_dK4g0vPKWkpXvEqnKq9c7aUmEooG7QQtgBBWamNwwKZ"}
{"level":"debug","ts":"2026-07-03T14:45:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c79c4a4c-3b67-4bea-a0ac-38b1afa069c6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-inf-a-c1cb72.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1XsviJneypZX2UIga_dK4g0vPKWkpXvEqnKq9c7aUmEooG7QQtgBBWamNwwKZ\"}"}
{"level":"debug","ts":"2026-07-03T14:45:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c79c4a4c-3b67-4bea-a0ac-38b1afa069c6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-a-c1cb72.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"06109433-f1d8-4b0f-ac41-083b94290973","keyName":"e2e-tenant-inference-c1cb72","subscription":"test-model-c1cb72-sub","tenant":"e2e-inf-a-c1cb72","userId":"06109433-f1d8-4b0f-ac41-083b94290973","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-03T14:45:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c79c4a4c-3b67-4bea-a0ac-38b1afa069c6","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-inf-a-c1cb72.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-inf-a-c1cb72/test-model-c1cb72\",\"requestedSubscription\":\"test-model-c1cb72-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-03T14:45:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c79c4a4c-3b67-4bea-a0ac-38b1afa069c6","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-a-c1cb72.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"test-model-c1cb72","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"test-model-c1cb72-sub","namespace":"ai-tenant-e2e-inf-a-c1cb72","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-03T14:45:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c79c4a4c-3b67-4bea-a0ac-38b1afa069c6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:45:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c79c4a4c-3b67-4bea-a0ac-38b1afa069c6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:45:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c79c4a4c-3b67-4bea-a0ac-38b1afa069c6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:45:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c79c4a4c-3b67-4bea-a0ac-38b1afa069c6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-inf-a-c1cb72/test-model-c1cb72\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:45:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c79c4a4c-3b67-4bea-a0ac-38b1afa069c6","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:45:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c79c4a4c-3b67-4bea-a0ac-38b1afa069c6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"test-model-c1cb72-sub"}
{"level":"debug","ts":"2026-07-03T14:45:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c79c4a4c-3b67-4bea-a0ac-38b1afa069c6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T14:45:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c79c4a4c-3b67-4bea-a0ac-38b1afa069c6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T14:45:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c79c4a4c-3b67-4bea-a0ac-38b1afa069c6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"06109433-f1d8-4b0f-ac41-083b94290973","keyName":"e2e-tenant-inference-c1cb72","selected_subscription":"test-model-c1cb72-sub","selected_subscription_key":"ai-tenant-e2e-inf-a-c1cb72/test-model-c1cb72-sub@ai-tenant-e2e-inf-a-c1cb72/test-model-c1cb72","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"test-model-c1cb72","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"test-model-c1cb72-sub","namespace":"ai-tenant-e2e-inf-a-c1cb72","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-03T14:45:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c79c4a4c-3b67-4bea-a0ac-38b1afa069c6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T14:45:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c79c4a4c-3b67-4bea-a0ac-38b1afa069c6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T14:45:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8e6f0b57-6b23-45f9-ba26-6ab0d69560bd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:56806","PortSpecifier":{"PortValue":56806}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8e6f0b57-6b23-45f9-ba26-6ab0d69560bd","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-inf-a-c1cb72.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T14:45:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8e6f0b57-6b23-45f9-ba26-6ab0d69560bd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:56806","PortSpecifier":{"PortValue":56806}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783089939,"nanos":495627508},"http":{"id":"8e6f0b57-6b23-45f9-ba26-6ab0d69560bd","method":"POST","headers":{":authority":"e2e-inf-a-c1cb72.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:45:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8e6f0b57-6b23-45f9-ba26-6ab0d69560bd","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T14:45:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8e6f0b57-6b23-45f9-ba26-6ab0d69560bd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1855d0c8-d07c-417e-9b3f-a12b5b00145c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=27a9bfa3-ed3c-4129-8f90-1c3d2b27fe8d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/af9f436983f9"]}}
{"level":"debug","ts":"2026-07-03T14:45:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8e6f0b57-6b23-45f9-ba26-6ab0d69560bd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/af9f436983f9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=27a9bfa3-ed3c-4129-8f90-1c3d2b27fe8d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1855d0c8-d07c-417e-9b3f-a12b5b00145c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a35f8a9500b21cb660bc013ba39749f2e25cb8dbee582033e43ebf75dcb3b4d9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-inf-a-c1cb72.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:45:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e6f0b57-6b23-45f9-ba26-6ab0d69560bd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:45:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e6f0b57-6b23-45f9-ba26-6ab0d69560bd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:45:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e6f0b57-6b23-45f9-ba26-6ab0d69560bd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-inf-a-c1cb72/test-model-c1cb72\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:45:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8e6f0b57-6b23-45f9-ba26-6ab0d69560bd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T14:45:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e6f0b57-6b23-45f9-ba26-6ab0d69560bd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T14:45:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e6f0b57-6b23-45f9-ba26-6ab0d69560bd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T14:45:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8e6f0b57-6b23-45f9-ba26-6ab0d69560bd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T14:45:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8e6f0b57-6b23-45f9-ba26-6ab0d69560bd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T14:45:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a5632107-f3e9-4bd0-824a-bd9a8741185f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:56342","PortSpecifier":{"PortValue":56342}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a5632107-f3e9-4bd0-824a-bd9a8741185f","method":"POST","path":"/ai-tenant-e2e-inf-b-e58844/test-model-e58844/v1/chat/completions","host":"e2e-inf-b-e58844.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T14:45:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a5632107-f3e9-4bd0-824a-bd9a8741185f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:56342","PortSpecifier":{"PortValue":56342}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783089939,"nanos":531057924},"http":{"id":"a5632107-f3e9-4bd0-824a-bd9a8741185f","method":"POST","headers":{":authority":"e2e-inf-b-e58844.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-inf-b-e58844/test-model-e58844/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:45:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a5632107-f3e9-4bd0-824a-bd9a8741185f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-BToUx1rtIlKjmJJA_S2M8t05MUEQ5L62IjKnagWxD9sOpV4W7E5c6dQaMTwU"}
{"level":"debug","ts":"2026-07-03T14:45:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a5632107-f3e9-4bd0-824a-bd9a8741185f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-inf-b-e58844.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-BToUx1rtIlKjmJJA_S2M8t05MUEQ5L62IjKnagWxD9sOpV4W7E5c6dQaMTwU\"}"}
{"level":"debug","ts":"2026-07-03T14:45:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a5632107-f3e9-4bd0-824a-bd9a8741185f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-b-e58844.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-03T14:45:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"cannot fetch metadata","request id":"a5632107-f3e9-4bd0-824a-bd9a8741185f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-b-e58844.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"reason":"no such key: groups"}
{"level":"debug","ts":"2026-07-03T14:45:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a5632107-f3e9-4bd0-824a-bd9a8741185f","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"1449e53c380f6b77535f0c10fa6359b2909dc456c1cbfe65a8479ca690a2185d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-inf-b-e58844.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-inf-b-e58844/test-model-e58844/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:45:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a5632107-f3e9-4bd0-824a-bd9a8741185f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:45:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"a5632107-f3e9-4bd0-824a-bd9a8741185f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-03T14:45:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a5632107-f3e9-4bd0-824a-bd9a8741185f","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-03T14:45:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a5632107-f3e9-4bd0-824a-bd9a8741185f","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-03T14:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5d60ec04d49d770105f94d2804ca4fad1a1919ce74e020ec6143632af67e0919"}
{"level":"info","ts":"2026-07-03T14:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4957df9cc75ec28bcff8ca26ee9662f15b6159bd4dea73fa1d53cd11e5983965"}
{"level":"info","ts":"2026-07-03T14:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1449e53c380f6b77535f0c10fa6359b2909dc456c1cbfe65a8479ca690a2185d"}
{"level":"info","ts":"2026-07-03T14:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a35f8a9500b21cb660bc013ba39749f2e25cb8dbee582033e43ebf75dcb3b4d9"}
{"level":"info","ts":"2026-07-03T14:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aded502bf1968a570dd86086fbebcea774a8508ed149c926a8dbe1856d7c492d"}
{"level":"info","ts":"2026-07-03T14:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4e4870a77bdf8cfa889bf5498321544d52c04bb74eee9ec3dc51bbbd49e9ed14"}
{"level":"info","ts":"2026-07-03T14:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fd5bab57e2fa1fcbbdd9cb8246c45af9989689b421fa3c5e6229f5f6bfeb3544"}
{"level":"info","ts":"2026-07-03T14:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c86bce2d80cc239db8f18f8d588c1bd4ae75188073833e0b5a74c00b8e3f0133"}
{"level":"info","ts":"2026-07-03T14:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1ce5823e3d90082d937b3fb4723770ef7784e4c2be746d4df3cf984707a2c9eb"}
{"level":"info","ts":"2026-07-03T14:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f9f2d80f895818b4e3c05d264ebb1ec77610ca7f9c1c5914058caff707b7d959"}
{"level":"info","ts":"2026-07-03T14:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6afb6752df55cf75b20cd1fd671ef78441129cdec16bccffa44c9eb4b842a8b4"}
{"level":"info","ts":"2026-07-03T14:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dd1e092264302582c43f2d9d4bce58ec3cee8df68183fb86a319d108866e3a9e"}
{"level":"info","ts":"2026-07-03T14:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/db5e967ebf8265c61ce92347da0b07b22534383d616c3a97c70bed1ed6f230a2"}
{"level":"info","ts":"2026-07-03T14:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c67f2cd13dc5eb17ae9e988b451cfea084c8534585fddcb3f91899b659f486ff"}
{"level":"info","ts":"2026-07-03T14:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/109401b8bf3750fa506ecb8eefa1d7375239be2350b57cfe32aed10d12f07d12"}
{"level":"info","ts":"2026-07-03T14:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c45c9d9bc4acab840273afdeda5b296313db0d92143dc8f91ef8a7e129bbe127"}
{"level":"info","ts":"2026-07-03T14:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dea2861ef54167e348ffd6e1431c785dabbd7bd75c96449a2a83432e1c5752a0"}
{"level":"info","ts":"2026-07-03T14:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0b872068d149478b7f9da429af18b70afdc89498eadfdd9846a3f147a1e37890"}
{"level":"info","ts":"2026-07-03T14:46:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d49f4f38df055d3b82b7ba4ce0be95538050ca5ea3fde25abe9a477e80f3b6c1"}
{"level":"info","ts":"2026-07-03T14:46:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c794823c094938d3eb532f7ad559325fc62b868413912e8f6172380e4c7a5a04"}
{"level":"debug","ts":"2026-07-03T14:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7723df765d2aa0a0351a7a6ac5e21f88c293c243f6d52d82ccc05cd180b9fa71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:46:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:46:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7723df765d2aa0a0351a7a6ac5e21f88c293c243f6d52d82ccc05cd180b9fa71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7723df765d2aa0a0351a7a6ac5e21f88c293c243f6d52d82ccc05cd180b9fa71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:46:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:46:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7723df765d2aa0a0351a7a6ac5e21f88c293c243f6d52d82ccc05cd180b9fa71"}
{"level":"info","ts":"2026-07-03T14:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7723df765d2aa0a0351a7a6ac5e21f88c293c243f6d52d82ccc05cd180b9fa71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7723df765d2aa0a0351a7a6ac5e21f88c293c243f6d52d82ccc05cd180b9fa71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:46:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:46:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-03T14:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7723df765d2aa0a0351a7a6ac5e21f88c293c243f6d52d82ccc05cd180b9fa71","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7723df765d2aa0a0351a7a6ac5e21f88c293c243f6d52d82ccc05cd180b9fa71\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-03T14:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7723df765d2aa0a0351a7a6ac5e21f88c293c243f6d52d82ccc05cd180b9fa71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7723df765d2aa0a0351a7a6ac5e21f88c293c243f6d52d82ccc05cd180b9fa71","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7723df765d2aa0a0351a7a6ac5e21f88c293c243f6d52d82ccc05cd180b9fa71"}
{"level":"info","ts":"2026-07-03T14:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7723df765d2aa0a0351a7a6ac5e21f88c293c243f6d52d82ccc05cd180b9fa71"}
{"level":"debug","ts":"2026-07-03T14:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7723df765d2aa0a0351a7a6ac5e21f88c293c243f6d52d82ccc05cd180b9fa71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:46:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:46:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7723df765d2aa0a0351a7a6ac5e21f88c293c243f6d52d82ccc05cd180b9fa71"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7723df765d2aa0a0351a7a6ac5e21f88c293c243f6d52d82ccc05cd180b9fa71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7723df765d2aa0a0351a7a6ac5e21f88c293c243f6d52d82ccc05cd180b9fa71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:46:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:46:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7723df765d2aa0a0351a7a6ac5e21f88c293c243f6d52d82ccc05cd180b9fa71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7723df765d2aa0a0351a7a6ac5e21f88c293c243f6d52d82ccc05cd180b9fa71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7723df765d2aa0a0351a7a6ac5e21f88c293c243f6d52d82ccc05cd180b9fa71","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7723df765d2aa0a0351a7a6ac5e21f88c293c243f6d52d82ccc05cd180b9fa71"}
{"level":"debug","ts":"2026-07-03T14:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7723df765d2aa0a0351a7a6ac5e21f88c293c243f6d52d82ccc05cd180b9fa71","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7723df765d2aa0a0351a7a6ac5e21f88c293c243f6d52d82ccc05cd180b9fa71"}
{"level":"debug","ts":"2026-07-03T14:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"986899ce40db42427e30b0e756d8b049ffd3f1603aca1575c838910e5c0bbd1b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:46:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:46:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"986899ce40db42427e30b0e756d8b049ffd3f1603aca1575c838910e5c0bbd1b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"986899ce40db42427e30b0e756d8b049ffd3f1603aca1575c838910e5c0bbd1b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7723df765d2aa0a0351a7a6ac5e21f88c293c243f6d52d82ccc05cd180b9fa71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:46:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:46:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7723df765d2aa0a0351a7a6ac5e21f88c293c243f6d52d82ccc05cd180b9fa71"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/986899ce40db42427e30b0e756d8b049ffd3f1603aca1575c838910e5c0bbd1b"}
{"level":"info","ts":"2026-07-03T14:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7723df765d2aa0a0351a7a6ac5e21f88c293c243f6d52d82ccc05cd180b9fa71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"986899ce40db42427e30b0e756d8b049ffd3f1603aca1575c838910e5c0bbd1b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7723df765d2aa0a0351a7a6ac5e21f88c293c243f6d52d82ccc05cd180b9fa71","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/986899ce40db42427e30b0e756d8b049ffd3f1603aca1575c838910e5c0bbd1b"}
{"level":"debug","ts":"2026-07-03T14:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"986899ce40db42427e30b0e756d8b049ffd3f1603aca1575c838910e5c0bbd1b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:46:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:46:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["986899ce40db42427e30b0e756d8b049ffd3f1603aca1575c838910e5c0bbd1b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"986899ce40db42427e30b0e756d8b049ffd3f1603aca1575c838910e5c0bbd1b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"986899ce40db42427e30b0e756d8b049ffd3f1603aca1575c838910e5c0bbd1b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7723df765d2aa0a0351a7a6ac5e21f88c293c243f6d52d82ccc05cd180b9fa71"}
{"level":"info","ts":"2026-07-03T14:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/986899ce40db42427e30b0e756d8b049ffd3f1603aca1575c838910e5c0bbd1b"}
{"level":"debug","ts":"2026-07-03T14:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5093fab65583037887a63a6f429d1dd1e14369cfb7fd1701c351350ef907ec2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:47:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:47:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5093fab65583037887a63a6f429d1dd1e14369cfb7fd1701c351350ef907ec2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5093fab65583037887a63a6f429d1dd1e14369cfb7fd1701c351350ef907ec2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5093fab65583037887a63a6f429d1dd1e14369cfb7fd1701c351350ef907ec2"}
{"level":"debug","ts":"2026-07-03T14:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5093fab65583037887a63a6f429d1dd1e14369cfb7fd1701c351350ef907ec2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5093fab65583037887a63a6f429d1dd1e14369cfb7fd1701c351350ef907ec2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5093fab65583037887a63a6f429d1dd1e14369cfb7fd1701c351350ef907ec2"}
{"level":"debug","ts":"2026-07-03T14:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5093fab65583037887a63a6f429d1dd1e14369cfb7fd1701c351350ef907ec2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:47:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:47:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5093fab65583037887a63a6f429d1dd1e14369cfb7fd1701c351350ef907ec2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5093fab65583037887a63a6f429d1dd1e14369cfb7fd1701c351350ef907ec2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5093fab65583037887a63a6f429d1dd1e14369cfb7fd1701c351350ef907ec2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:47:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:47:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5093fab65583037887a63a6f429d1dd1e14369cfb7fd1701c351350ef907ec2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5093fab65583037887a63a6f429d1dd1e14369cfb7fd1701c351350ef907ec2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5093fab65583037887a63a6f429d1dd1e14369cfb7fd1701c351350ef907ec2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5093fab65583037887a63a6f429d1dd1e14369cfb7fd1701c351350ef907ec2"}
{"level":"debug","ts":"2026-07-03T14:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5093fab65583037887a63a6f429d1dd1e14369cfb7fd1701c351350ef907ec2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5093fab65583037887a63a6f429d1dd1e14369cfb7fd1701c351350ef907ec2"}
{"level":"debug","ts":"2026-07-03T14:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5093fab65583037887a63a6f429d1dd1e14369cfb7fd1701c351350ef907ec2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:47:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:47:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5093fab65583037887a63a6f429d1dd1e14369cfb7fd1701c351350ef907ec2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5093fab65583037887a63a6f429d1dd1e14369cfb7fd1701c351350ef907ec2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5093fab65583037887a63a6f429d1dd1e14369cfb7fd1701c351350ef907ec2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:47:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:47:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5093fab65583037887a63a6f429d1dd1e14369cfb7fd1701c351350ef907ec2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5093fab65583037887a63a6f429d1dd1e14369cfb7fd1701c351350ef907ec2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5093fab65583037887a63a6f429d1dd1e14369cfb7fd1701c351350ef907ec2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5093fab65583037887a63a6f429d1dd1e14369cfb7fd1701c351350ef907ec2"}
{"level":"debug","ts":"2026-07-03T14:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5093fab65583037887a63a6f429d1dd1e14369cfb7fd1701c351350ef907ec2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5093fab65583037887a63a6f429d1dd1e14369cfb7fd1701c351350ef907ec2"}
{"level":"debug","ts":"2026-07-03T14:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5093fab65583037887a63a6f429d1dd1e14369cfb7fd1701c351350ef907ec2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:47:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:47:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5093fab65583037887a63a6f429d1dd1e14369cfb7fd1701c351350ef907ec2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5093fab65583037887a63a6f429d1dd1e14369cfb7fd1701c351350ef907ec2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5093fab65583037887a63a6f429d1dd1e14369cfb7fd1701c351350ef907ec2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:47:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:47:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5093fab65583037887a63a6f429d1dd1e14369cfb7fd1701c351350ef907ec2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5093fab65583037887a63a6f429d1dd1e14369cfb7fd1701c351350ef907ec2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5093fab65583037887a63a6f429d1dd1e14369cfb7fd1701c351350ef907ec2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5093fab65583037887a63a6f429d1dd1e14369cfb7fd1701c351350ef907ec2"}
{"level":"debug","ts":"2026-07-03T14:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5093fab65583037887a63a6f429d1dd1e14369cfb7fd1701c351350ef907ec2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5093fab65583037887a63a6f429d1dd1e14369cfb7fd1701c351350ef907ec2"}
{"level":"debug","ts":"2026-07-03T14:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5093fab65583037887a63a6f429d1dd1e14369cfb7fd1701c351350ef907ec2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:47:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:47:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5093fab65583037887a63a6f429d1dd1e14369cfb7fd1701c351350ef907ec2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5093fab65583037887a63a6f429d1dd1e14369cfb7fd1701c351350ef907ec2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5093fab65583037887a63a6f429d1dd1e14369cfb7fd1701c351350ef907ec2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:47:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:47:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5093fab65583037887a63a6f429d1dd1e14369cfb7fd1701c351350ef907ec2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5093fab65583037887a63a6f429d1dd1e14369cfb7fd1701c351350ef907ec2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5093fab65583037887a63a6f429d1dd1e14369cfb7fd1701c351350ef907ec2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5093fab65583037887a63a6f429d1dd1e14369cfb7fd1701c351350ef907ec2"}
{"level":"debug","ts":"2026-07-03T14:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5093fab65583037887a63a6f429d1dd1e14369cfb7fd1701c351350ef907ec2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5093fab65583037887a63a6f429d1dd1e14369cfb7fd1701c351350ef907ec2"}
{"level":"debug","ts":"2026-07-03T14:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5093fab65583037887a63a6f429d1dd1e14369cfb7fd1701c351350ef907ec2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:47:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:47:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5093fab65583037887a63a6f429d1dd1e14369cfb7fd1701c351350ef907ec2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5093fab65583037887a63a6f429d1dd1e14369cfb7fd1701c351350ef907ec2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5093fab65583037887a63a6f429d1dd1e14369cfb7fd1701c351350ef907ec2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5093fab65583037887a63a6f429d1dd1e14369cfb7fd1701c351350ef907ec2"}
{"level":"debug","ts":"2026-07-03T14:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"219a4d55c24345d74dd544194b1abd94f6e58da7ba1872a0a99e90978a58b39d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:47:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:47:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"219a4d55c24345d74dd544194b1abd94f6e58da7ba1872a0a99e90978a58b39d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"219a4d55c24345d74dd544194b1abd94f6e58da7ba1872a0a99e90978a58b39d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"219a4d55c24345d74dd544194b1abd94f6e58da7ba1872a0a99e90978a58b39d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/219a4d55c24345d74dd544194b1abd94f6e58da7ba1872a0a99e90978a58b39d"}
{"level":"debug","ts":"2026-07-03T14:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"219a4d55c24345d74dd544194b1abd94f6e58da7ba1872a0a99e90978a58b39d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/219a4d55c24345d74dd544194b1abd94f6e58da7ba1872a0a99e90978a58b39d"}
{"level":"debug","ts":"2026-07-03T14:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"219a4d55c24345d74dd544194b1abd94f6e58da7ba1872a0a99e90978a58b39d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:47:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:47:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["219a4d55c24345d74dd544194b1abd94f6e58da7ba1872a0a99e90978a58b39d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"219a4d55c24345d74dd544194b1abd94f6e58da7ba1872a0a99e90978a58b39d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"219a4d55c24345d74dd544194b1abd94f6e58da7ba1872a0a99e90978a58b39d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:47:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:47:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"219a4d55c24345d74dd544194b1abd94f6e58da7ba1872a0a99e90978a58b39d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"219a4d55c24345d74dd544194b1abd94f6e58da7ba1872a0a99e90978a58b39d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/219a4d55c24345d74dd544194b1abd94f6e58da7ba1872a0a99e90978a58b39d"}
{"level":"debug","ts":"2026-07-03T14:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"219a4d55c24345d74dd544194b1abd94f6e58da7ba1872a0a99e90978a58b39d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/219a4d55c24345d74dd544194b1abd94f6e58da7ba1872a0a99e90978a58b39d"}
{"level":"debug","ts":"2026-07-03T14:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"219a4d55c24345d74dd544194b1abd94f6e58da7ba1872a0a99e90978a58b39d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:47:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:47:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["219a4d55c24345d74dd544194b1abd94f6e58da7ba1872a0a99e90978a58b39d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"219a4d55c24345d74dd544194b1abd94f6e58da7ba1872a0a99e90978a58b39d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"219a4d55c24345d74dd544194b1abd94f6e58da7ba1872a0a99e90978a58b39d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:47:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:47:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"219a4d55c24345d74dd544194b1abd94f6e58da7ba1872a0a99e90978a58b39d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"219a4d55c24345d74dd544194b1abd94f6e58da7ba1872a0a99e90978a58b39d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/219a4d55c24345d74dd544194b1abd94f6e58da7ba1872a0a99e90978a58b39d"}
{"level":"debug","ts":"2026-07-03T14:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"219a4d55c24345d74dd544194b1abd94f6e58da7ba1872a0a99e90978a58b39d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/219a4d55c24345d74dd544194b1abd94f6e58da7ba1872a0a99e90978a58b39d"}
{"level":"debug","ts":"2026-07-03T14:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"219a4d55c24345d74dd544194b1abd94f6e58da7ba1872a0a99e90978a58b39d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:47:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:47:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["219a4d55c24345d74dd544194b1abd94f6e58da7ba1872a0a99e90978a58b39d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"219a4d55c24345d74dd544194b1abd94f6e58da7ba1872a0a99e90978a58b39d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"219a4d55c24345d74dd544194b1abd94f6e58da7ba1872a0a99e90978a58b39d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:47:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:47:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"219a4d55c24345d74dd544194b1abd94f6e58da7ba1872a0a99e90978a58b39d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"219a4d55c24345d74dd544194b1abd94f6e58da7ba1872a0a99e90978a58b39d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/219a4d55c24345d74dd544194b1abd94f6e58da7ba1872a0a99e90978a58b39d"}
{"level":"debug","ts":"2026-07-03T14:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"219a4d55c24345d74dd544194b1abd94f6e58da7ba1872a0a99e90978a58b39d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"219a4d55c24345d74dd544194b1abd94f6e58da7ba1872a0a99e90978a58b39d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/219a4d55c24345d74dd544194b1abd94f6e58da7ba1872a0a99e90978a58b39d"}
{"level":"debug","ts":"2026-07-03T14:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"219a4d55c24345d74dd544194b1abd94f6e58da7ba1872a0a99e90978a58b39d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:47:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:47:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["219a4d55c24345d74dd544194b1abd94f6e58da7ba1872a0a99e90978a58b39d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"219a4d55c24345d74dd544194b1abd94f6e58da7ba1872a0a99e90978a58b39d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"219a4d55c24345d74dd544194b1abd94f6e58da7ba1872a0a99e90978a58b39d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:47:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/219a4d55c24345d74dd544194b1abd94f6e58da7ba1872a0a99e90978a58b39d"}
{"level":"info","ts":"2026-07-03T14:47:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/986899ce40db42427e30b0e756d8b049ffd3f1603aca1575c838910e5c0bbd1b"}
{"level":"info","ts":"2026-07-03T14:47:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7723df765d2aa0a0351a7a6ac5e21f88c293c243f6d52d82ccc05cd180b9fa71"}
{"level":"info","ts":"2026-07-03T14:47:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a5093fab65583037887a63a6f429d1dd1e14369cfb7fd1701c351350ef907ec2"}
{"level":"info","ts":"2026-07-03T14:47:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/219a4d55c24345d74dd544194b1abd94f6e58da7ba1872a0a99e90978a58b39d"}
{"level":"debug","ts":"2026-07-03T14:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46d58e2d92e7a8de3e6b687a4f6836f6508bd2b32ce20dc71caf294c4c8c85ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:48:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:48:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46d58e2d92e7a8de3e6b687a4f6836f6508bd2b32ce20dc71caf294c4c8c85ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46d58e2d92e7a8de3e6b687a4f6836f6508bd2b32ce20dc71caf294c4c8c85ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:48:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:48:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46d58e2d92e7a8de3e6b687a4f6836f6508bd2b32ce20dc71caf294c4c8c85ae"}
{"level":"info","ts":"2026-07-03T14:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46d58e2d92e7a8de3e6b687a4f6836f6508bd2b32ce20dc71caf294c4c8c85ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46d58e2d92e7a8de3e6b687a4f6836f6508bd2b32ce20dc71caf294c4c8c85ae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46d58e2d92e7a8de3e6b687a4f6836f6508bd2b32ce20dc71caf294c4c8c85ae"}
{"level":"debug","ts":"2026-07-03T14:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46d58e2d92e7a8de3e6b687a4f6836f6508bd2b32ce20dc71caf294c4c8c85ae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46d58e2d92e7a8de3e6b687a4f6836f6508bd2b32ce20dc71caf294c4c8c85ae"}
{"level":"debug","ts":"2026-07-03T14:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46d58e2d92e7a8de3e6b687a4f6836f6508bd2b32ce20dc71caf294c4c8c85ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:48:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:48:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["46d58e2d92e7a8de3e6b687a4f6836f6508bd2b32ce20dc71caf294c4c8c85ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46d58e2d92e7a8de3e6b687a4f6836f6508bd2b32ce20dc71caf294c4c8c85ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46d58e2d92e7a8de3e6b687a4f6836f6508bd2b32ce20dc71caf294c4c8c85ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:48:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:48:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46d58e2d92e7a8de3e6b687a4f6836f6508bd2b32ce20dc71caf294c4c8c85ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a35e7814e3bbd8cc3823c2c69c65208e74d2bca143d088112ad2050ca2c2f6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:48:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:48:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46d58e2d92e7a8de3e6b687a4f6836f6508bd2b32ce20dc71caf294c4c8c85ae"}
{"level":"info","ts":"2026-07-03T14:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a35e7814e3bbd8cc3823c2c69c65208e74d2bca143d088112ad2050ca2c2f6a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46d58e2d92e7a8de3e6b687a4f6836f6508bd2b32ce20dc71caf294c4c8c85ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:48:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:48:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["46d58e2d92e7a8de3e6b687a4f6836f6508bd2b32ce20dc71caf294c4c8c85ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a35e7814e3bbd8cc3823c2c69c65208e74d2bca143d088112ad2050ca2c2f6a"}
{"level":"info","ts":"2026-07-03T14:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46d58e2d92e7a8de3e6b687a4f6836f6508bd2b32ce20dc71caf294c4c8c85ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a35e7814e3bbd8cc3823c2c69c65208e74d2bca143d088112ad2050ca2c2f6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:48:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:48:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a35e7814e3bbd8cc3823c2c69c65208e74d2bca143d088112ad2050ca2c2f6a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a35e7814e3bbd8cc3823c2c69c65208e74d2bca143d088112ad2050ca2c2f6a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46d58e2d92e7a8de3e6b687a4f6836f6508bd2b32ce20dc71caf294c4c8c85ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:48:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:48:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46d58e2d92e7a8de3e6b687a4f6836f6508bd2b32ce20dc71caf294c4c8c85ae"}
{"level":"info","ts":"2026-07-03T14:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46d58e2d92e7a8de3e6b687a4f6836f6508bd2b32ce20dc71caf294c4c8c85ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a35e7814e3bbd8cc3823c2c69c65208e74d2bca143d088112ad2050ca2c2f6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:48:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:48:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a35e7814e3bbd8cc3823c2c69c65208e74d2bca143d088112ad2050ca2c2f6a"}
{"level":"info","ts":"2026-07-03T14:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a35e7814e3bbd8cc3823c2c69c65208e74d2bca143d088112ad2050ca2c2f6a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46d58e2d92e7a8de3e6b687a4f6836f6508bd2b32ce20dc71caf294c4c8c85ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1111181e5388815f5618ccc1bbb67ae9343ad40ff34d1fe98d081a03101265c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:48:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:48:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46d58e2d92e7a8de3e6b687a4f6836f6508bd2b32ce20dc71caf294c4c8c85ae"}
{"level":"info","ts":"2026-07-03T14:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1111181e5388815f5618ccc1bbb67ae9343ad40ff34d1fe98d081a03101265c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a35e7814e3bbd8cc3823c2c69c65208e74d2bca143d088112ad2050ca2c2f6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:48:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:48:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a35e7814e3bbd8cc3823c2c69c65208e74d2bca143d088112ad2050ca2c2f6a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1111181e5388815f5618ccc1bbb67ae9343ad40ff34d1fe98d081a03101265c9"}
{"level":"info","ts":"2026-07-03T14:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a35e7814e3bbd8cc3823c2c69c65208e74d2bca143d088112ad2050ca2c2f6a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46d58e2d92e7a8de3e6b687a4f6836f6508bd2b32ce20dc71caf294c4c8c85ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:48:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:48:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["46d58e2d92e7a8de3e6b687a4f6836f6508bd2b32ce20dc71caf294c4c8c85ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46d58e2d92e7a8de3e6b687a4f6836f6508bd2b32ce20dc71caf294c4c8c85ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1111181e5388815f5618ccc1bbb67ae9343ad40ff34d1fe98d081a03101265c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:48:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:48:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1111181e5388815f5618ccc1bbb67ae9343ad40ff34d1fe98d081a03101265c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a35e7814e3bbd8cc3823c2c69c65208e74d2bca143d088112ad2050ca2c2f6a"}
{"level":"info","ts":"2026-07-03T14:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1111181e5388815f5618ccc1bbb67ae9343ad40ff34d1fe98d081a03101265c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a35e7814e3bbd8cc3823c2c69c65208e74d2bca143d088112ad2050ca2c2f6a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46d58e2d92e7a8de3e6b687a4f6836f6508bd2b32ce20dc71caf294c4c8c85ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1111181e5388815f5618ccc1bbb67ae9343ad40ff34d1fe98d081a03101265c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:48:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:48:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1111181e5388815f5618ccc1bbb67ae9343ad40ff34d1fe98d081a03101265c9"}
{"level":"info","ts":"2026-07-03T14:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1111181e5388815f5618ccc1bbb67ae9343ad40ff34d1fe98d081a03101265c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1111181e5388815f5618ccc1bbb67ae9343ad40ff34d1fe98d081a03101265c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:48:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:48:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1111181e5388815f5618ccc1bbb67ae9343ad40ff34d1fe98d081a03101265c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1111181e5388815f5618ccc1bbb67ae9343ad40ff34d1fe98d081a03101265c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1111181e5388815f5618ccc1bbb67ae9343ad40ff34d1fe98d081a03101265c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:48:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:48:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1111181e5388815f5618ccc1bbb67ae9343ad40ff34d1fe98d081a03101265c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46d58e2d92e7a8de3e6b687a4f6836f6508bd2b32ce20dc71caf294c4c8c85ae"}
{"level":"error","ts":"2026-07-03T14:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1111181e5388815f5618ccc1bbb67ae9343ad40ff34d1fe98d081a03101265c9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1111181e5388815f5618ccc1bbb67ae9343ad40ff34d1fe98d081a03101265c9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-03T14:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1111181e5388815f5618ccc1bbb67ae9343ad40ff34d1fe98d081a03101265c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1111181e5388815f5618ccc1bbb67ae9343ad40ff34d1fe98d081a03101265c9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:48:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a35e7814e3bbd8cc3823c2c69c65208e74d2bca143d088112ad2050ca2c2f6a"}
{"level":"info","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1111181e5388815f5618ccc1bbb67ae9343ad40ff34d1fe98d081a03101265c9"}
{"level":"debug","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a246011d92f7c83cfd3f3900b1142e10903dcfdeae9cc879b4bbe674b5660b83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:49:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:49:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a246011d92f7c83cfd3f3900b1142e10903dcfdeae9cc879b4bbe674b5660b83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a246011d92f7c83cfd3f3900b1142e10903dcfdeae9cc879b4bbe674b5660b83","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a246011d92f7c83cfd3f3900b1142e10903dcfdeae9cc879b4bbe674b5660b83"}
{"level":"debug","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a246011d92f7c83cfd3f3900b1142e10903dcfdeae9cc879b4bbe674b5660b83","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a246011d92f7c83cfd3f3900b1142e10903dcfdeae9cc879b4bbe674b5660b83"}
{"level":"debug","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a246011d92f7c83cfd3f3900b1142e10903dcfdeae9cc879b4bbe674b5660b83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:49:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:49:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a246011d92f7c83cfd3f3900b1142e10903dcfdeae9cc879b4bbe674b5660b83"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a246011d92f7c83cfd3f3900b1142e10903dcfdeae9cc879b4bbe674b5660b83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a246011d92f7c83cfd3f3900b1142e10903dcfdeae9cc879b4bbe674b5660b83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:49:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:49:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a246011d92f7c83cfd3f3900b1142e10903dcfdeae9cc879b4bbe674b5660b83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a246011d92f7c83cfd3f3900b1142e10903dcfdeae9cc879b4bbe674b5660b83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a246011d92f7c83cfd3f3900b1142e10903dcfdeae9cc879b4bbe674b5660b83","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a246011d92f7c83cfd3f3900b1142e10903dcfdeae9cc879b4bbe674b5660b83"}
{"level":"debug","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a246011d92f7c83cfd3f3900b1142e10903dcfdeae9cc879b4bbe674b5660b83","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a246011d92f7c83cfd3f3900b1142e10903dcfdeae9cc879b4bbe674b5660b83"}
{"level":"debug","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a246011d92f7c83cfd3f3900b1142e10903dcfdeae9cc879b4bbe674b5660b83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:49:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:49:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a246011d92f7c83cfd3f3900b1142e10903dcfdeae9cc879b4bbe674b5660b83"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a246011d92f7c83cfd3f3900b1142e10903dcfdeae9cc879b4bbe674b5660b83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a246011d92f7c83cfd3f3900b1142e10903dcfdeae9cc879b4bbe674b5660b83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:49:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:49:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a246011d92f7c83cfd3f3900b1142e10903dcfdeae9cc879b4bbe674b5660b83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a246011d92f7c83cfd3f3900b1142e10903dcfdeae9cc879b4bbe674b5660b83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a246011d92f7c83cfd3f3900b1142e10903dcfdeae9cc879b4bbe674b5660b83","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a246011d92f7c83cfd3f3900b1142e10903dcfdeae9cc879b4bbe674b5660b83"}
{"level":"debug","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a246011d92f7c83cfd3f3900b1142e10903dcfdeae9cc879b4bbe674b5660b83","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a246011d92f7c83cfd3f3900b1142e10903dcfdeae9cc879b4bbe674b5660b83"}
{"level":"debug","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b03be7a618bc64dae30f2129f0d4d16f1134e93f656109c79295e4c940be6590","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:49:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:49:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b03be7a618bc64dae30f2129f0d4d16f1134e93f656109c79295e4c940be6590","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a246011d92f7c83cfd3f3900b1142e10903dcfdeae9cc879b4bbe674b5660b83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:49:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:49:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a246011d92f7c83cfd3f3900b1142e10903dcfdeae9cc879b4bbe674b5660b83"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b03be7a618bc64dae30f2129f0d4d16f1134e93f656109c79295e4c940be6590"}
{"level":"info","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a246011d92f7c83cfd3f3900b1142e10903dcfdeae9cc879b4bbe674b5660b83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b03be7a618bc64dae30f2129f0d4d16f1134e93f656109c79295e4c940be6590","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a246011d92f7c83cfd3f3900b1142e10903dcfdeae9cc879b4bbe674b5660b83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b03be7a618bc64dae30f2129f0d4d16f1134e93f656109c79295e4c940be6590","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b03be7a618bc64dae30f2129f0d4d16f1134e93f656109c79295e4c940be6590","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b03be7a618bc64dae30f2129f0d4d16f1134e93f656109c79295e4c940be6590"}
{"level":"debug","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56a411adca314ae1ee5fa1a50c9c86386b36280ad24f2f86f0710514ca116f45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:49:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:49:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a246011d92f7c83cfd3f3900b1142e10903dcfdeae9cc879b4bbe674b5660b83"}
{"level":"info","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56a411adca314ae1ee5fa1a50c9c86386b36280ad24f2f86f0710514ca116f45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56a411adca314ae1ee5fa1a50c9c86386b36280ad24f2f86f0710514ca116f45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:49:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:49:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56a411adca314ae1ee5fa1a50c9c86386b36280ad24f2f86f0710514ca116f45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b03be7a618bc64dae30f2129f0d4d16f1134e93f656109c79295e4c940be6590","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:49:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:49:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b03be7a618bc64dae30f2129f0d4d16f1134e93f656109c79295e4c940be6590"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56a411adca314ae1ee5fa1a50c9c86386b36280ad24f2f86f0710514ca116f45"}
{"level":"info","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b03be7a618bc64dae30f2129f0d4d16f1134e93f656109c79295e4c940be6590","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56a411adca314ae1ee5fa1a50c9c86386b36280ad24f2f86f0710514ca116f45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b03be7a618bc64dae30f2129f0d4d16f1134e93f656109c79295e4c940be6590","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56a411adca314ae1ee5fa1a50c9c86386b36280ad24f2f86f0710514ca116f45"}
{"level":"debug","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56a411adca314ae1ee5fa1a50c9c86386b36280ad24f2f86f0710514ca116f45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:49:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:49:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56a411adca314ae1ee5fa1a50c9c86386b36280ad24f2f86f0710514ca116f45"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b03be7a618bc64dae30f2129f0d4d16f1134e93f656109c79295e4c940be6590"}
{"level":"info","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56a411adca314ae1ee5fa1a50c9c86386b36280ad24f2f86f0710514ca116f45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56a411adca314ae1ee5fa1a50c9c86386b36280ad24f2f86f0710514ca116f45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:49:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:49:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56a411adca314ae1ee5fa1a50c9c86386b36280ad24f2f86f0710514ca116f45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db3117aee279cccb240654f85361d28ebad5e930ac4bdb2bef62cbd8399b57e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:49:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:49:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56a411adca314ae1ee5fa1a50c9c86386b36280ad24f2f86f0710514ca116f45"}
{"level":"info","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db3117aee279cccb240654f85361d28ebad5e930ac4bdb2bef62cbd8399b57e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56a411adca314ae1ee5fa1a50c9c86386b36280ad24f2f86f0710514ca116f45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:49:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:49:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56a411adca314ae1ee5fa1a50c9c86386b36280ad24f2f86f0710514ca116f45"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db3117aee279cccb240654f85361d28ebad5e930ac4bdb2bef62cbd8399b57e8"}
{"level":"info","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56a411adca314ae1ee5fa1a50c9c86386b36280ad24f2f86f0710514ca116f45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db3117aee279cccb240654f85361d28ebad5e930ac4bdb2bef62cbd8399b57e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:49:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:49:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db3117aee279cccb240654f85361d28ebad5e930ac4bdb2bef62cbd8399b57e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56a411adca314ae1ee5fa1a50c9c86386b36280ad24f2f86f0710514ca116f45"}
{"level":"info","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db3117aee279cccb240654f85361d28ebad5e930ac4bdb2bef62cbd8399b57e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56a411adca314ae1ee5fa1a50c9c86386b36280ad24f2f86f0710514ca116f45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db3117aee279cccb240654f85361d28ebad5e930ac4bdb2bef62cbd8399b57e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:49:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:49:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db3117aee279cccb240654f85361d28ebad5e930ac4bdb2bef62cbd8399b57e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db3117aee279cccb240654f85361d28ebad5e930ac4bdb2bef62cbd8399b57e8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db3117aee279cccb240654f85361d28ebad5e930ac4bdb2bef62cbd8399b57e8"}
{"level":"debug","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db3117aee279cccb240654f85361d28ebad5e930ac4bdb2bef62cbd8399b57e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:49:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:49:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db3117aee279cccb240654f85361d28ebad5e930ac4bdb2bef62cbd8399b57e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db3117aee279cccb240654f85361d28ebad5e930ac4bdb2bef62cbd8399b57e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db3117aee279cccb240654f85361d28ebad5e930ac4bdb2bef62cbd8399b57e8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56a411adca314ae1ee5fa1a50c9c86386b36280ad24f2f86f0710514ca116f45"}
{"level":"debug","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69d3e1a62d78680e6cf487984b7644a70c8a1c4c2199f2aae383fdd4c779d9fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:49:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:49:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69d3e1a62d78680e6cf487984b7644a70c8a1c4c2199f2aae383fdd4c779d9fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69d3e1a62d78680e6cf487984b7644a70c8a1c4c2199f2aae383fdd4c779d9fe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db3117aee279cccb240654f85361d28ebad5e930ac4bdb2bef62cbd8399b57e8"}
{"level":"debug","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69d3e1a62d78680e6cf487984b7644a70c8a1c4c2199f2aae383fdd4c779d9fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:49:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:49:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69d3e1a62d78680e6cf487984b7644a70c8a1c4c2199f2aae383fdd4c779d9fe"}
{"level":"info","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69d3e1a62d78680e6cf487984b7644a70c8a1c4c2199f2aae383fdd4c779d9fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69d3e1a62d78680e6cf487984b7644a70c8a1c4c2199f2aae383fdd4c779d9fe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69d3e1a62d78680e6cf487984b7644a70c8a1c4c2199f2aae383fdd4c779d9fe"}
{"level":"debug","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69d3e1a62d78680e6cf487984b7644a70c8a1c4c2199f2aae383fdd4c779d9fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:49:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:49:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69d3e1a62d78680e6cf487984b7644a70c8a1c4c2199f2aae383fdd4c779d9fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69d3e1a62d78680e6cf487984b7644a70c8a1c4c2199f2aae383fdd4c779d9fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69d3e1a62d78680e6cf487984b7644a70c8a1c4c2199f2aae383fdd4c779d9fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:49:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:49:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69d3e1a62d78680e6cf487984b7644a70c8a1c4c2199f2aae383fdd4c779d9fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69d3e1a62d78680e6cf487984b7644a70c8a1c4c2199f2aae383fdd4c779d9fe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69d3e1a62d78680e6cf487984b7644a70c8a1c4c2199f2aae383fdd4c779d9fe"}
{"level":"debug","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69d3e1a62d78680e6cf487984b7644a70c8a1c4c2199f2aae383fdd4c779d9fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69d3e1a62d78680e6cf487984b7644a70c8a1c4c2199f2aae383fdd4c779d9fe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69d3e1a62d78680e6cf487984b7644a70c8a1c4c2199f2aae383fdd4c779d9fe"}
{"level":"debug","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69d3e1a62d78680e6cf487984b7644a70c8a1c4c2199f2aae383fdd4c779d9fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:49:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:49:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69d3e1a62d78680e6cf487984b7644a70c8a1c4c2199f2aae383fdd4c779d9fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69d3e1a62d78680e6cf487984b7644a70c8a1c4c2199f2aae383fdd4c779d9fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"956d4334eaa6b917064da9eda0bfb2aae4f24c1d955278132b3256757ab9d2a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:49:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:49:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"956d4334eaa6b917064da9eda0bfb2aae4f24c1d955278132b3256757ab9d2a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69d3e1a62d78680e6cf487984b7644a70c8a1c4c2199f2aae383fdd4c779d9fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f68b0fbee0ad84af37b7d82282ffd88b6ff26d89fe7d9d223edc0bf5ac1ed958","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:49:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:49:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/956d4334eaa6b917064da9eda0bfb2aae4f24c1d955278132b3256757ab9d2a3"}
{"level":"info","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f68b0fbee0ad84af37b7d82282ffd88b6ff26d89fe7d9d223edc0bf5ac1ed958","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"956d4334eaa6b917064da9eda0bfb2aae4f24c1d955278132b3256757ab9d2a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:49:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:49:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["956d4334eaa6b917064da9eda0bfb2aae4f24c1d955278132b3256757ab9d2a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69d3e1a62d78680e6cf487984b7644a70c8a1c4c2199f2aae383fdd4c779d9fe"}
{"level":"info","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"956d4334eaa6b917064da9eda0bfb2aae4f24c1d955278132b3256757ab9d2a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f68b0fbee0ad84af37b7d82282ffd88b6ff26d89fe7d9d223edc0bf5ac1ed958","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:49:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:49:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f68b0fbee0ad84af37b7d82282ffd88b6ff26d89fe7d9d223edc0bf5ac1ed958","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"956d4334eaa6b917064da9eda0bfb2aae4f24c1d955278132b3256757ab9d2a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f68b0fbee0ad84af37b7d82282ffd88b6ff26d89fe7d9d223edc0bf5ac1ed958","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f68b0fbee0ad84af37b7d82282ffd88b6ff26d89fe7d9d223edc0bf5ac1ed958"}
{"level":"debug","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f68b0fbee0ad84af37b7d82282ffd88b6ff26d89fe7d9d223edc0bf5ac1ed958","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:49:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:49:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f68b0fbee0ad84af37b7d82282ffd88b6ff26d89fe7d9d223edc0bf5ac1ed958"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f68b0fbee0ad84af37b7d82282ffd88b6ff26d89fe7d9d223edc0bf5ac1ed958","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f68b0fbee0ad84af37b7d82282ffd88b6ff26d89fe7d9d223edc0bf5ac1ed958","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/956d4334eaa6b917064da9eda0bfb2aae4f24c1d955278132b3256757ab9d2a3"}
{"level":"info","ts":"2026-07-03T14:49:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f68b0fbee0ad84af37b7d82282ffd88b6ff26d89fe7d9d223edc0bf5ac1ed958"}
{"level":"debug","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7980f3abe88c183a253aac0ef9efacb4ef430883e54d453c53799ada0481b91b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:49:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:49:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7980f3abe88c183a253aac0ef9efacb4ef430883e54d453c53799ada0481b91b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7980f3abe88c183a253aac0ef9efacb4ef430883e54d453c53799ada0481b91b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7980f3abe88c183a253aac0ef9efacb4ef430883e54d453c53799ada0481b91b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7980f3abe88c183a253aac0ef9efacb4ef430883e54d453c53799ada0481b91b"}
{"level":"debug","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7980f3abe88c183a253aac0ef9efacb4ef430883e54d453c53799ada0481b91b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7980f3abe88c183a253aac0ef9efacb4ef430883e54d453c53799ada0481b91b"}
{"level":"debug","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7980f3abe88c183a253aac0ef9efacb4ef430883e54d453c53799ada0481b91b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:49:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:49:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7980f3abe88c183a253aac0ef9efacb4ef430883e54d453c53799ada0481b91b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7980f3abe88c183a253aac0ef9efacb4ef430883e54d453c53799ada0481b91b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7980f3abe88c183a253aac0ef9efacb4ef430883e54d453c53799ada0481b91b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:49:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:49:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7980f3abe88c183a253aac0ef9efacb4ef430883e54d453c53799ada0481b91b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7980f3abe88c183a253aac0ef9efacb4ef430883e54d453c53799ada0481b91b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7980f3abe88c183a253aac0ef9efacb4ef430883e54d453c53799ada0481b91b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7980f3abe88c183a253aac0ef9efacb4ef430883e54d453c53799ada0481b91b"}
{"level":"debug","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7980f3abe88c183a253aac0ef9efacb4ef430883e54d453c53799ada0481b91b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7980f3abe88c183a253aac0ef9efacb4ef430883e54d453c53799ada0481b91b"}
{"level":"debug","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7980f3abe88c183a253aac0ef9efacb4ef430883e54d453c53799ada0481b91b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:49:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:49:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7980f3abe88c183a253aac0ef9efacb4ef430883e54d453c53799ada0481b91b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7980f3abe88c183a253aac0ef9efacb4ef430883e54d453c53799ada0481b91b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7980f3abe88c183a253aac0ef9efacb4ef430883e54d453c53799ada0481b91b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:49:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:49:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7980f3abe88c183a253aac0ef9efacb4ef430883e54d453c53799ada0481b91b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb4c92912e32ca00170ad6a53a37a6c3bc6d2969a9827626d895080e41d285bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:49:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:49:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7980f3abe88c183a253aac0ef9efacb4ef430883e54d453c53799ada0481b91b"}
{"level":"info","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb4c92912e32ca00170ad6a53a37a6c3bc6d2969a9827626d895080e41d285bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7980f3abe88c183a253aac0ef9efacb4ef430883e54d453c53799ada0481b91b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:49:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:49:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7980f3abe88c183a253aac0ef9efacb4ef430883e54d453c53799ada0481b91b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb4c92912e32ca00170ad6a53a37a6c3bc6d2969a9827626d895080e41d285bc"}
{"level":"info","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7980f3abe88c183a253aac0ef9efacb4ef430883e54d453c53799ada0481b91b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb4c92912e32ca00170ad6a53a37a6c3bc6d2969a9827626d895080e41d285bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:49:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:49:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb4c92912e32ca00170ad6a53a37a6c3bc6d2969a9827626d895080e41d285bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb4c92912e32ca00170ad6a53a37a6c3bc6d2969a9827626d895080e41d285bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7980f3abe88c183a253aac0ef9efacb4ef430883e54d453c53799ada0481b91b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:49:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:49:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7980f3abe88c183a253aac0ef9efacb4ef430883e54d453c53799ada0481b91b"}
{"level":"info","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7980f3abe88c183a253aac0ef9efacb4ef430883e54d453c53799ada0481b91b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb4c92912e32ca00170ad6a53a37a6c3bc6d2969a9827626d895080e41d285bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:49:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:49:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb4c92912e32ca00170ad6a53a37a6c3bc6d2969a9827626d895080e41d285bc"}
{"level":"info","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb4c92912e32ca00170ad6a53a37a6c3bc6d2969a9827626d895080e41d285bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7980f3abe88c183a253aac0ef9efacb4ef430883e54d453c53799ada0481b91b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb4c92912e32ca00170ad6a53a37a6c3bc6d2969a9827626d895080e41d285bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:49:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:49:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb4c92912e32ca00170ad6a53a37a6c3bc6d2969a9827626d895080e41d285bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb4c92912e32ca00170ad6a53a37a6c3bc6d2969a9827626d895080e41d285bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7980f3abe88c183a253aac0ef9efacb4ef430883e54d453c53799ada0481b91b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb4c92912e32ca00170ad6a53a37a6c3bc6d2969a9827626d895080e41d285bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:49:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:49:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb4c92912e32ca00170ad6a53a37a6c3bc6d2969a9827626d895080e41d285bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7980f3abe88c183a253aac0ef9efacb4ef430883e54d453c53799ada0481b91b"}
{"level":"error","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"eb4c92912e32ca00170ad6a53a37a6c3bc6d2969a9827626d895080e41d285bc","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"eb4c92912e32ca00170ad6a53a37a6c3bc6d2969a9827626d895080e41d285bc\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb4c92912e32ca00170ad6a53a37a6c3bc6d2969a9827626d895080e41d285bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:49:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:49:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb4c92912e32ca00170ad6a53a37a6c3bc6d2969a9827626d895080e41d285bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7980f3abe88c183a253aac0ef9efacb4ef430883e54d453c53799ada0481b91b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:49:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:49:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7980f3abe88c183a253aac0ef9efacb4ef430883e54d453c53799ada0481b91b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb4c92912e32ca00170ad6a53a37a6c3bc6d2969a9827626d895080e41d285bc"}
{"level":"info","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7980f3abe88c183a253aac0ef9efacb4ef430883e54d453c53799ada0481b91b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb4c92912e32ca00170ad6a53a37a6c3bc6d2969a9827626d895080e41d285bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7980f3abe88c183a253aac0ef9efacb4ef430883e54d453c53799ada0481b91b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb4c92912e32ca00170ad6a53a37a6c3bc6d2969a9827626d895080e41d285bc"}
{"level":"debug","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb4c92912e32ca00170ad6a53a37a6c3bc6d2969a9827626d895080e41d285bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:49:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:49:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb4c92912e32ca00170ad6a53a37a6c3bc6d2969a9827626d895080e41d285bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb4c92912e32ca00170ad6a53a37a6c3bc6d2969a9827626d895080e41d285bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb4c92912e32ca00170ad6a53a37a6c3bc6d2969a9827626d895080e41d285bc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7980f3abe88c183a253aac0ef9efacb4ef430883e54d453c53799ada0481b91b"}
{"level":"info","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb4c92912e32ca00170ad6a53a37a6c3bc6d2969a9827626d895080e41d285bc"}
{"level":"debug","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72fa94488914449a91242ee66b39aefb8fc61ec53ad224fa7af511146678f878","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:49:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:49:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72fa94488914449a91242ee66b39aefb8fc61ec53ad224fa7af511146678f878","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72fa94488914449a91242ee66b39aefb8fc61ec53ad224fa7af511146678f878","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72fa94488914449a91242ee66b39aefb8fc61ec53ad224fa7af511146678f878"}
{"level":"debug","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72fa94488914449a91242ee66b39aefb8fc61ec53ad224fa7af511146678f878","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72fa94488914449a91242ee66b39aefb8fc61ec53ad224fa7af511146678f878","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72fa94488914449a91242ee66b39aefb8fc61ec53ad224fa7af511146678f878"}
{"level":"debug","ts":"2026-07-03T14:49:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72fa94488914449a91242ee66b39aefb8fc61ec53ad224fa7af511146678f878","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:49:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:49:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["72fa94488914449a91242ee66b39aefb8fc61ec53ad224fa7af511146678f878"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72fa94488914449a91242ee66b39aefb8fc61ec53ad224fa7af511146678f878","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72fa94488914449a91242ee66b39aefb8fc61ec53ad224fa7af511146678f878","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a34fae2dd030ea4beacd0ae2c556db6b8e14ff418903d5a34169875b83f5bd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:49:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:49:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72fa94488914449a91242ee66b39aefb8fc61ec53ad224fa7af511146678f878"}
{"level":"info","ts":"2026-07-03T14:49:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a34fae2dd030ea4beacd0ae2c556db6b8e14ff418903d5a34169875b83f5bd8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a34fae2dd030ea4beacd0ae2c556db6b8e14ff418903d5a34169875b83f5bd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:49:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:49:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a34fae2dd030ea4beacd0ae2c556db6b8e14ff418903d5a34169875b83f5bd8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a34fae2dd030ea4beacd0ae2c556db6b8e14ff418903d5a34169875b83f5bd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:49:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:49:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a34fae2dd030ea4beacd0ae2c556db6b8e14ff418903d5a34169875b83f5bd8"}
{"level":"error","ts":"2026-07-03T14:49:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6a34fae2dd030ea4beacd0ae2c556db6b8e14ff418903d5a34169875b83f5bd8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6a34fae2dd030ea4beacd0ae2c556db6b8e14ff418903d5a34169875b83f5bd8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-03T14:49:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a34fae2dd030ea4beacd0ae2c556db6b8e14ff418903d5a34169875b83f5bd8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a34fae2dd030ea4beacd0ae2c556db6b8e14ff418903d5a34169875b83f5bd8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:49:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a34fae2dd030ea4beacd0ae2c556db6b8e14ff418903d5a34169875b83f5bd8"}
{"level":"debug","ts":"2026-07-03T14:49:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0363825afe9721f648d97e4bd68eb8782b2fec9ac3422895e46439435a559c5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:49:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:49:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0363825afe9721f648d97e4bd68eb8782b2fec9ac3422895e46439435a559c5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0363825afe9721f648d97e4bd68eb8782b2fec9ac3422895e46439435a559c5f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:49:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0363825afe9721f648d97e4bd68eb8782b2fec9ac3422895e46439435a559c5f"}
{"level":"debug","ts":"2026-07-03T14:49:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0363825afe9721f648d97e4bd68eb8782b2fec9ac3422895e46439435a559c5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a34fae2dd030ea4beacd0ae2c556db6b8e14ff418903d5a34169875b83f5bd8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:49:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:49:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a34fae2dd030ea4beacd0ae2c556db6b8e14ff418903d5a34169875b83f5bd8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a34fae2dd030ea4beacd0ae2c556db6b8e14ff418903d5a34169875b83f5bd8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a34fae2dd030ea4beacd0ae2c556db6b8e14ff418903d5a34169875b83f5bd8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0363825afe9721f648d97e4bd68eb8782b2fec9ac3422895e46439435a559c5f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:49:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0363825afe9721f648d97e4bd68eb8782b2fec9ac3422895e46439435a559c5f"}
{"level":"info","ts":"2026-07-03T14:49:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a34fae2dd030ea4beacd0ae2c556db6b8e14ff418903d5a34169875b83f5bd8"}
{"level":"debug","ts":"2026-07-03T14:49:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0363825afe9721f648d97e4bd68eb8782b2fec9ac3422895e46439435a559c5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:49:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:49:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0363825afe9721f648d97e4bd68eb8782b2fec9ac3422895e46439435a559c5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0363825afe9721f648d97e4bd68eb8782b2fec9ac3422895e46439435a559c5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5c22a4a3ff94a3c8c665c7ef5a62ea96193e4c3558022c849ff5a2061395525","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:49:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:49:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5c22a4a3ff94a3c8c665c7ef5a62ea96193e4c3558022c849ff5a2061395525","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0363825afe9721f648d97e4bd68eb8782b2fec9ac3422895e46439435a559c5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5c22a4a3ff94a3c8c665c7ef5a62ea96193e4c3558022c849ff5a2061395525","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:49:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:49:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5c22a4a3ff94a3c8c665c7ef5a62ea96193e4c3558022c849ff5a2061395525"}
{"level":"info","ts":"2026-07-03T14:49:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5c22a4a3ff94a3c8c665c7ef5a62ea96193e4c3558022c849ff5a2061395525","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5c22a4a3ff94a3c8c665c7ef5a62ea96193e4c3558022c849ff5a2061395525","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:49:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:49:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5c22a4a3ff94a3c8c665c7ef5a62ea96193e4c3558022c849ff5a2061395525"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0363825afe9721f648d97e4bd68eb8782b2fec9ac3422895e46439435a559c5f"}
{"level":"error","ts":"2026-07-03T14:49:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f5c22a4a3ff94a3c8c665c7ef5a62ea96193e4c3558022c849ff5a2061395525","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f5c22a4a3ff94a3c8c665c7ef5a62ea96193e4c3558022c849ff5a2061395525\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-03T14:49:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5c22a4a3ff94a3c8c665c7ef5a62ea96193e4c3558022c849ff5a2061395525","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:49:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5c22a4a3ff94a3c8c665c7ef5a62ea96193e4c3558022c849ff5a2061395525"}
{"level":"debug","ts":"2026-07-03T14:49:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5c22a4a3ff94a3c8c665c7ef5a62ea96193e4c3558022c849ff5a2061395525","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:49:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:49:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5c22a4a3ff94a3c8c665c7ef5a62ea96193e4c3558022c849ff5a2061395525"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5c22a4a3ff94a3c8c665c7ef5a62ea96193e4c3558022c849ff5a2061395525","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5c22a4a3ff94a3c8c665c7ef5a62ea96193e4c3558022c849ff5a2061395525","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:49:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:49:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5c22a4a3ff94a3c8c665c7ef5a62ea96193e4c3558022c849ff5a2061395525","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c081c27dc685dd75fe3f8352c9def11cb0ca562c389fef10c042164db52c8f6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:49:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:49:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5c22a4a3ff94a3c8c665c7ef5a62ea96193e4c3558022c849ff5a2061395525"}
{"level":"info","ts":"2026-07-03T14:49:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c081c27dc685dd75fe3f8352c9def11cb0ca562c389fef10c042164db52c8f6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ff71a70dae6e420d5847521ce0518191a9827e8dd2554caff5566d8c0c0b8bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:49:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:49:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c081c27dc685dd75fe3f8352c9def11cb0ca562c389fef10c042164db52c8f6b"}
{"level":"info","ts":"2026-07-03T14:49:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ff71a70dae6e420d5847521ce0518191a9827e8dd2554caff5566d8c0c0b8bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5c22a4a3ff94a3c8c665c7ef5a62ea96193e4c3558022c849ff5a2061395525","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:49:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:49:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5c22a4a3ff94a3c8c665c7ef5a62ea96193e4c3558022c849ff5a2061395525"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ff71a70dae6e420d5847521ce0518191a9827e8dd2554caff5566d8c0c0b8bd"}
{"level":"info","ts":"2026-07-03T14:49:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5c22a4a3ff94a3c8c665c7ef5a62ea96193e4c3558022c849ff5a2061395525","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a70448bd0fa81aa0da6a07d8b3100a53c752fb8ffd6b5771d66f79ad90fc52b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:49:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:49:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5c22a4a3ff94a3c8c665c7ef5a62ea96193e4c3558022c849ff5a2061395525"}
{"level":"info","ts":"2026-07-03T14:49:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a70448bd0fa81aa0da6a07d8b3100a53c752fb8ffd6b5771d66f79ad90fc52b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c081c27dc685dd75fe3f8352c9def11cb0ca562c389fef10c042164db52c8f6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:49:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:49:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c081c27dc685dd75fe3f8352c9def11cb0ca562c389fef10c042164db52c8f6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a70448bd0fa81aa0da6a07d8b3100a53c752fb8ffd6b5771d66f79ad90fc52b"}
{"level":"info","ts":"2026-07-03T14:49:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c081c27dc685dd75fe3f8352c9def11cb0ca562c389fef10c042164db52c8f6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d24a06319f537ff4812944bfacdc072115109e6ee8d60caef3903fdadc504c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:49:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:49:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d24a06319f537ff4812944bfacdc072115109e6ee8d60caef3903fdadc504c6"}
{"level":"info","ts":"2026-07-03T14:49:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d24a06319f537ff4812944bfacdc072115109e6ee8d60caef3903fdadc504c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ff71a70dae6e420d5847521ce0518191a9827e8dd2554caff5566d8c0c0b8bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:49:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:49:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ff71a70dae6e420d5847521ce0518191a9827e8dd2554caff5566d8c0c0b8bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ff71a70dae6e420d5847521ce0518191a9827e8dd2554caff5566d8c0c0b8bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5c22a4a3ff94a3c8c665c7ef5a62ea96193e4c3558022c849ff5a2061395525","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a70448bd0fa81aa0da6a07d8b3100a53c752fb8ffd6b5771d66f79ad90fc52b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:49:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:49:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a70448bd0fa81aa0da6a07d8b3100a53c752fb8ffd6b5771d66f79ad90fc52b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c081c27dc685dd75fe3f8352c9def11cb0ca562c389fef10c042164db52c8f6b"}
{"level":"info","ts":"2026-07-03T14:49:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a70448bd0fa81aa0da6a07d8b3100a53c752fb8ffd6b5771d66f79ad90fc52b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c081c27dc685dd75fe3f8352c9def11cb0ca562c389fef10c042164db52c8f6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d24a06319f537ff4812944bfacdc072115109e6ee8d60caef3903fdadc504c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:49:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:49:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d24a06319f537ff4812944bfacdc072115109e6ee8d60caef3903fdadc504c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ff71a70dae6e420d5847521ce0518191a9827e8dd2554caff5566d8c0c0b8bd"}
{"level":"info","ts":"2026-07-03T14:49:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d24a06319f537ff4812944bfacdc072115109e6ee8d60caef3903fdadc504c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ff71a70dae6e420d5847521ce0518191a9827e8dd2554caff5566d8c0c0b8bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a70448bd0fa81aa0da6a07d8b3100a53c752fb8ffd6b5771d66f79ad90fc52b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d24a06319f537ff4812944bfacdc072115109e6ee8d60caef3903fdadc504c6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:49:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5c22a4a3ff94a3c8c665c7ef5a62ea96193e4c3558022c849ff5a2061395525"}
{"level":"info","ts":"2026-07-03T14:49:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a70448bd0fa81aa0da6a07d8b3100a53c752fb8ffd6b5771d66f79ad90fc52b"}
{"level":"info","ts":"2026-07-03T14:49:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d24a06319f537ff4812944bfacdc072115109e6ee8d60caef3903fdadc504c6"}
{"level":"info","ts":"2026-07-03T14:49:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ff71a70dae6e420d5847521ce0518191a9827e8dd2554caff5566d8c0c0b8bd"}
{"level":"info","ts":"2026-07-03T14:49:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9bcedf3e-706c-4146-85bb-bf09b12374cd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:40626","PortSpecifier":{"PortValue":40626}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9bcedf3e-706c-4146-85bb-bf09b12374cd","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6ebb6a.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T14:49:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9bcedf3e-706c-4146-85bb-bf09b12374cd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:40626","PortSpecifier":{"PortValue":40626}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783090151,"nanos":224715507},"http":{"id":"9bcedf3e-706c-4146-85bb-bf09b12374cd","method":"POST","headers":{":authority":"e2e-shared-a-6ebb6a.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:49:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9bcedf3e-706c-4146-85bb-bf09b12374cd","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T14:49:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9bcedf3e-706c-4146-85bb-bf09b12374cd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1855d0c8-d07c-417e-9b3f-a12b5b00145c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=27a9bfa3-ed3c-4129-8f90-1c3d2b27fe8d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/af9f436983f9"]}}
{"level":"debug","ts":"2026-07-03T14:49:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9bcedf3e-706c-4146-85bb-bf09b12374cd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/af9f436983f9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=27a9bfa3-ed3c-4129-8f90-1c3d2b27fe8d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1855d0c8-d07c-417e-9b3f-a12b5b00145c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1111181e5388815f5618ccc1bbb67ae9343ad40ff34d1fe98d081a03101265c9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6ebb6a.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:49:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9bcedf3e-706c-4146-85bb-bf09b12374cd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:49:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9bcedf3e-706c-4146-85bb-bf09b12374cd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:49:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9bcedf3e-706c-4146-85bb-bf09b12374cd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6ebb6a/auth-test-model-6ebb6a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:49:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9bcedf3e-706c-4146-85bb-bf09b12374cd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T14:49:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9bcedf3e-706c-4146-85bb-bf09b12374cd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T14:49:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9bcedf3e-706c-4146-85bb-bf09b12374cd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T14:49:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9bcedf3e-706c-4146-85bb-bf09b12374cd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T14:49:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9bcedf3e-706c-4146-85bb-bf09b12374cd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T14:49:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"499a285a-efca-4fd7-a051-c308a8df8667","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:57884","PortSpecifier":{"PortValue":57884}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"499a285a-efca-4fd7-a051-c308a8df8667","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1dd877.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T14:49:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"499a285a-efca-4fd7-a051-c308a8df8667","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:57884","PortSpecifier":{"PortValue":57884}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783090151,"nanos":287310296},"http":{"id":"499a285a-efca-4fd7-a051-c308a8df8667","method":"POST","headers":{":authority":"e2e-shared-b-1dd877.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:49:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"499a285a-efca-4fd7-a051-c308a8df8667","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T14:49:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"499a285a-efca-4fd7-a051-c308a8df8667","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1855d0c8-d07c-417e-9b3f-a12b5b00145c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=27a9bfa3-ed3c-4129-8f90-1c3d2b27fe8d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/af9f436983f9"]}}
{"level":"debug","ts":"2026-07-03T14:49:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"499a285a-efca-4fd7-a051-c308a8df8667","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/af9f436983f9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=27a9bfa3-ed3c-4129-8f90-1c3d2b27fe8d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1855d0c8-d07c-417e-9b3f-a12b5b00145c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"72fa94488914449a91242ee66b39aefb8fc61ec53ad224fa7af511146678f878"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1dd877.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:49:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"499a285a-efca-4fd7-a051-c308a8df8667","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:49:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"499a285a-efca-4fd7-a051-c308a8df8667","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:49:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"499a285a-efca-4fd7-a051-c308a8df8667","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1dd877/auth-test-model-1dd877\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:49:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"499a285a-efca-4fd7-a051-c308a8df8667","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T14:49:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"499a285a-efca-4fd7-a051-c308a8df8667","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T14:49:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"499a285a-efca-4fd7-a051-c308a8df8667","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T14:49:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"499a285a-efca-4fd7-a051-c308a8df8667","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T14:49:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"499a285a-efca-4fd7-a051-c308a8df8667","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T14:49:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8c203b35-f4ef-42ea-b351-e2242aea19dd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:40640","PortSpecifier":{"PortValue":40640}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8c203b35-f4ef-42ea-b351-e2242aea19dd","method":"GET","path":"/maas-api/v1/api-keys/f8908e46-300c-41b7-a1e3-6682b0ab6e71","host":"e2e-shared-a-6ebb6a.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T14:49:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8c203b35-f4ef-42ea-b351-e2242aea19dd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:40640","PortSpecifier":{"PortValue":40640}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783090151,"nanos":359777835},"http":{"id":"8c203b35-f4ef-42ea-b351-e2242aea19dd","method":"GET","headers":{":authority":"e2e-shared-a-6ebb6a.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/f8908e46-300c-41b7-a1e3-6682b0ab6e71",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:49:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8c203b35-f4ef-42ea-b351-e2242aea19dd","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T14:49:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8c203b35-f4ef-42ea-b351-e2242aea19dd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1855d0c8-d07c-417e-9b3f-a12b5b00145c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=27a9bfa3-ed3c-4129-8f90-1c3d2b27fe8d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/af9f436983f9"]}}
{"level":"debug","ts":"2026-07-03T14:49:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8c203b35-f4ef-42ea-b351-e2242aea19dd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/af9f436983f9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=27a9bfa3-ed3c-4129-8f90-1c3d2b27fe8d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1855d0c8-d07c-417e-9b3f-a12b5b00145c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1111181e5388815f5618ccc1bbb67ae9343ad40ff34d1fe98d081a03101265c9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6ebb6a.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/f8908e46-300c-41b7-a1e3-6682b0ab6e71",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:49:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c203b35-f4ef-42ea-b351-e2242aea19dd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:49:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c203b35-f4ef-42ea-b351-e2242aea19dd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:49:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c203b35-f4ef-42ea-b351-e2242aea19dd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6ebb6a/auth-test-model-6ebb6a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:49:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8c203b35-f4ef-42ea-b351-e2242aea19dd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T14:49:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c203b35-f4ef-42ea-b351-e2242aea19dd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T14:49:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c203b35-f4ef-42ea-b351-e2242aea19dd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T14:49:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8c203b35-f4ef-42ea-b351-e2242aea19dd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T14:49:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8c203b35-f4ef-42ea-b351-e2242aea19dd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T14:49:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"51d4e513-8954-4290-8409-9ac59404f0b6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:57890","PortSpecifier":{"PortValue":57890}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"51d4e513-8954-4290-8409-9ac59404f0b6","method":"GET","path":"/maas-api/v1/api-keys/e46d9977-5854-484e-aea9-ea71d5115293","host":"e2e-shared-b-1dd877.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T14:49:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"51d4e513-8954-4290-8409-9ac59404f0b6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:57890","PortSpecifier":{"PortValue":57890}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783090151,"nanos":403691264},"http":{"id":"51d4e513-8954-4290-8409-9ac59404f0b6","method":"GET","headers":{":authority":"e2e-shared-b-1dd877.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/e46d9977-5854-484e-aea9-ea71d5115293",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:49:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"51d4e513-8954-4290-8409-9ac59404f0b6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T14:49:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"51d4e513-8954-4290-8409-9ac59404f0b6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1855d0c8-d07c-417e-9b3f-a12b5b00145c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=27a9bfa3-ed3c-4129-8f90-1c3d2b27fe8d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/af9f436983f9"]}}
{"level":"debug","ts":"2026-07-03T14:49:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"51d4e513-8954-4290-8409-9ac59404f0b6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/af9f436983f9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=27a9bfa3-ed3c-4129-8f90-1c3d2b27fe8d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1855d0c8-d07c-417e-9b3f-a12b5b00145c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"72fa94488914449a91242ee66b39aefb8fc61ec53ad224fa7af511146678f878"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1dd877.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/e46d9977-5854-484e-aea9-ea71d5115293",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:49:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"51d4e513-8954-4290-8409-9ac59404f0b6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:49:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"51d4e513-8954-4290-8409-9ac59404f0b6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:49:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"51d4e513-8954-4290-8409-9ac59404f0b6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1dd877/auth-test-model-1dd877\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:49:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"51d4e513-8954-4290-8409-9ac59404f0b6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T14:49:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"51d4e513-8954-4290-8409-9ac59404f0b6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T14:49:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"51d4e513-8954-4290-8409-9ac59404f0b6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-03T14:49:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"51d4e513-8954-4290-8409-9ac59404f0b6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T14:49:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"51d4e513-8954-4290-8409-9ac59404f0b6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T14:49:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"25c30bf7-5209-4231-8ded-e8068065bf14","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:36386","PortSpecifier":{"PortValue":36386}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"25c30bf7-5209-4231-8ded-e8068065bf14","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6ebb6a.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T14:49:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"25c30bf7-5209-4231-8ded-e8068065bf14","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:36386","PortSpecifier":{"PortValue":36386}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783090166,"nanos":435524954},"http":{"id":"25c30bf7-5209-4231-8ded-e8068065bf14","method":"POST","headers":{":authority":"e2e-shared-a-6ebb6a.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:49:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"25c30bf7-5209-4231-8ded-e8068065bf14","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T14:49:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"25c30bf7-5209-4231-8ded-e8068065bf14","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1855d0c8-d07c-417e-9b3f-a12b5b00145c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=27a9bfa3-ed3c-4129-8f90-1c3d2b27fe8d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/af9f436983f9"]}}
{"level":"debug","ts":"2026-07-03T14:49:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"25c30bf7-5209-4231-8ded-e8068065bf14","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/af9f436983f9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=27a9bfa3-ed3c-4129-8f90-1c3d2b27fe8d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1855d0c8-d07c-417e-9b3f-a12b5b00145c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1111181e5388815f5618ccc1bbb67ae9343ad40ff34d1fe98d081a03101265c9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6ebb6a.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:49:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"25c30bf7-5209-4231-8ded-e8068065bf14","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:49:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"25c30bf7-5209-4231-8ded-e8068065bf14","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:49:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"25c30bf7-5209-4231-8ded-e8068065bf14","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6ebb6a/auth-test-model-6ebb6a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:49:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"25c30bf7-5209-4231-8ded-e8068065bf14","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T14:49:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"25c30bf7-5209-4231-8ded-e8068065bf14","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T14:49:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"25c30bf7-5209-4231-8ded-e8068065bf14","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T14:49:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"25c30bf7-5209-4231-8ded-e8068065bf14","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T14:49:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"25c30bf7-5209-4231-8ded-e8068065bf14","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T14:49:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"268fca17-7e5a-4675-b7f2-73b83e4a391b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:49144","PortSpecifier":{"PortValue":49144}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"268fca17-7e5a-4675-b7f2-73b83e4a391b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1dd877.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T14:49:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"268fca17-7e5a-4675-b7f2-73b83e4a391b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:49144","PortSpecifier":{"PortValue":49144}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783090166,"nanos":475735774},"http":{"id":"268fca17-7e5a-4675-b7f2-73b83e4a391b","method":"POST","headers":{":authority":"e2e-shared-b-1dd877.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:49:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"268fca17-7e5a-4675-b7f2-73b83e4a391b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T14:49:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"268fca17-7e5a-4675-b7f2-73b83e4a391b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1855d0c8-d07c-417e-9b3f-a12b5b00145c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=27a9bfa3-ed3c-4129-8f90-1c3d2b27fe8d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/af9f436983f9"]}}
{"level":"debug","ts":"2026-07-03T14:49:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"268fca17-7e5a-4675-b7f2-73b83e4a391b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/af9f436983f9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=27a9bfa3-ed3c-4129-8f90-1c3d2b27fe8d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1855d0c8-d07c-417e-9b3f-a12b5b00145c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"72fa94488914449a91242ee66b39aefb8fc61ec53ad224fa7af511146678f878"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1dd877.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:49:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"268fca17-7e5a-4675-b7f2-73b83e4a391b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:49:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"268fca17-7e5a-4675-b7f2-73b83e4a391b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:49:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"268fca17-7e5a-4675-b7f2-73b83e4a391b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1dd877/auth-test-model-1dd877\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:49:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"268fca17-7e5a-4675-b7f2-73b83e4a391b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T14:49:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"268fca17-7e5a-4675-b7f2-73b83e4a391b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T14:49:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"268fca17-7e5a-4675-b7f2-73b83e4a391b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T14:49:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"268fca17-7e5a-4675-b7f2-73b83e4a391b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T14:49:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"268fca17-7e5a-4675-b7f2-73b83e4a391b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T14:49:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7bf625a8-7439-4d82-b386-1c0ba83c3058","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:36392","PortSpecifier":{"PortValue":36392}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7bf625a8-7439-4d82-b386-1c0ba83c3058","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-6ebb6a.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T14:49:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7bf625a8-7439-4d82-b386-1c0ba83c3058","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:36392","PortSpecifier":{"PortValue":36392}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783090166,"nanos":516471136},"http":{"id":"7bf625a8-7439-4d82-b386-1c0ba83c3058","method":"GET","headers":{":authority":"e2e-shared-a-6ebb6a.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:49:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7bf625a8-7439-4d82-b386-1c0ba83c3058","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Pq6mfH1gwmKC0AES_Sof9qmThXFueoNq2Mz2GwshXhdVTZrpMVh0TYVEbMFr"}
{"level":"debug","ts":"2026-07-03T14:49:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7bf625a8-7439-4d82-b386-1c0ba83c3058","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6ebb6a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Pq6mfH1gwmKC0AES_Sof9qmThXFueoNq2Mz2GwshXhdVTZrpMVh0TYVEbMFr\"}"}
{"level":"debug","ts":"2026-07-03T14:49:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7bf625a8-7439-4d82-b386-1c0ba83c3058","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6ebb6a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"40a81728-d99c-40d9-be50-98b389acae81","keyName":"e2e-auth-iso-a-e7606f","subscription":"e2e-auth-iso-3f8d52","tenant":"e2e-shared-a-6ebb6a","userId":"40a81728-d99c-40d9-be50-98b389acae81","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-03T14:49:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7bf625a8-7439-4d82-b386-1c0ba83c3058","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:49:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7bf625a8-7439-4d82-b386-1c0ba83c3058","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:49:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7bf625a8-7439-4d82-b386-1c0ba83c3058","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:49:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7bf625a8-7439-4d82-b386-1c0ba83c3058","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6ebb6a/auth-test-model-6ebb6a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:49:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7bf625a8-7439-4d82-b386-1c0ba83c3058","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T14:49:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7bf625a8-7439-4d82-b386-1c0ba83c3058","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-03T14:49:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7bf625a8-7439-4d82-b386-1c0ba83c3058","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-3f8d52"}
{"level":"debug","ts":"2026-07-03T14:49:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7bf625a8-7439-4d82-b386-1c0ba83c3058","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T14:49:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7bf625a8-7439-4d82-b386-1c0ba83c3058","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T14:49:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7bf625a8-7439-4d82-b386-1c0ba83c3058","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T14:49:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"30f3ba13-be07-4403-aa79-9fc205429b0f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:57798","PortSpecifier":{"PortValue":57798}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"30f3ba13-be07-4403-aa79-9fc205429b0f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6ebb6a.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T14:49:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"30f3ba13-be07-4403-aa79-9fc205429b0f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:57798","PortSpecifier":{"PortValue":57798}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783090183,"nanos":623434007},"http":{"id":"30f3ba13-be07-4403-aa79-9fc205429b0f","method":"POST","headers":{":authority":"e2e-shared-a-6ebb6a.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:49:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"30f3ba13-be07-4403-aa79-9fc205429b0f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T14:49:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"30f3ba13-be07-4403-aa79-9fc205429b0f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1855d0c8-d07c-417e-9b3f-a12b5b00145c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=27a9bfa3-ed3c-4129-8f90-1c3d2b27fe8d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/af9f436983f9"]}}
{"level":"debug","ts":"2026-07-03T14:49:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"30f3ba13-be07-4403-aa79-9fc205429b0f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/af9f436983f9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=27a9bfa3-ed3c-4129-8f90-1c3d2b27fe8d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1855d0c8-d07c-417e-9b3f-a12b5b00145c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1111181e5388815f5618ccc1bbb67ae9343ad40ff34d1fe98d081a03101265c9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6ebb6a.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:49:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"30f3ba13-be07-4403-aa79-9fc205429b0f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:49:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"30f3ba13-be07-4403-aa79-9fc205429b0f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:49:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"30f3ba13-be07-4403-aa79-9fc205429b0f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6ebb6a/auth-test-model-6ebb6a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:49:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"30f3ba13-be07-4403-aa79-9fc205429b0f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T14:49:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"30f3ba13-be07-4403-aa79-9fc205429b0f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T14:49:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"30f3ba13-be07-4403-aa79-9fc205429b0f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T14:49:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"30f3ba13-be07-4403-aa79-9fc205429b0f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T14:49:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"30f3ba13-be07-4403-aa79-9fc205429b0f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T14:49:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6cad956d-8ec6-4bc3-9dab-3735008a75a9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:50500","PortSpecifier":{"PortValue":50500}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6cad956d-8ec6-4bc3-9dab-3735008a75a9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1dd877.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T14:49:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6cad956d-8ec6-4bc3-9dab-3735008a75a9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:50500","PortSpecifier":{"PortValue":50500}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783090183,"nanos":661436661},"http":{"id":"6cad956d-8ec6-4bc3-9dab-3735008a75a9","method":"POST","headers":{":authority":"e2e-shared-b-1dd877.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:49:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6cad956d-8ec6-4bc3-9dab-3735008a75a9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T14:49:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6cad956d-8ec6-4bc3-9dab-3735008a75a9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1855d0c8-d07c-417e-9b3f-a12b5b00145c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=27a9bfa3-ed3c-4129-8f90-1c3d2b27fe8d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/af9f436983f9"]}}
{"level":"debug","ts":"2026-07-03T14:49:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6cad956d-8ec6-4bc3-9dab-3735008a75a9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/af9f436983f9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=27a9bfa3-ed3c-4129-8f90-1c3d2b27fe8d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1855d0c8-d07c-417e-9b3f-a12b5b00145c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"72fa94488914449a91242ee66b39aefb8fc61ec53ad224fa7af511146678f878"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1dd877.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:49:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6cad956d-8ec6-4bc3-9dab-3735008a75a9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:49:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6cad956d-8ec6-4bc3-9dab-3735008a75a9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:49:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6cad956d-8ec6-4bc3-9dab-3735008a75a9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1dd877/auth-test-model-1dd877\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:49:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6cad956d-8ec6-4bc3-9dab-3735008a75a9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T14:49:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6cad956d-8ec6-4bc3-9dab-3735008a75a9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T14:49:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6cad956d-8ec6-4bc3-9dab-3735008a75a9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-03T14:49:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6cad956d-8ec6-4bc3-9dab-3735008a75a9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T14:49:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6cad956d-8ec6-4bc3-9dab-3735008a75a9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T14:49:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6b7d2f88-1083-460f-a1a9-40e9f73ea913","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:50508","PortSpecifier":{"PortValue":50508}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6b7d2f88-1083-460f-a1a9-40e9f73ea913","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-1dd877.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T14:49:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6b7d2f88-1083-460f-a1a9-40e9f73ea913","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:50508","PortSpecifier":{"PortValue":50508}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783090183,"nanos":700231659},"http":{"id":"6b7d2f88-1083-460f-a1a9-40e9f73ea913","method":"GET","headers":{":authority":"e2e-shared-b-1dd877.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:49:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6b7d2f88-1083-460f-a1a9-40e9f73ea913","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1XkAgsxaT4SHqLS4b_wh29vm30ly17rz8Djkz8cwVKC7pf2NI9r8jeqDLP5uh"}
{"level":"debug","ts":"2026-07-03T14:49:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6b7d2f88-1083-460f-a1a9-40e9f73ea913","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-1dd877.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1XkAgsxaT4SHqLS4b_wh29vm30ly17rz8Djkz8cwVKC7pf2NI9r8jeqDLP5uh\"}"}
{"level":"debug","ts":"2026-07-03T14:49:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6b7d2f88-1083-460f-a1a9-40e9f73ea913","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-1dd877.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-03T14:49:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6b7d2f88-1083-460f-a1a9-40e9f73ea913","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"72fa94488914449a91242ee66b39aefb8fc61ec53ad224fa7af511146678f878"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1dd877.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:49:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b7d2f88-1083-460f-a1a9-40e9f73ea913","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:49:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"6b7d2f88-1083-460f-a1a9-40e9f73ea913","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-03T14:49:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6b7d2f88-1083-460f-a1a9-40e9f73ea913","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-03T14:49:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6b7d2f88-1083-460f-a1a9-40e9f73ea913","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-03T14:49:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"60e0c4b9-d6f3-4426-bbf5-57fc2a991a4c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:58314","PortSpecifier":{"PortValue":58314}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"60e0c4b9-d6f3-4426-bbf5-57fc2a991a4c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6ebb6a.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T14:49:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"60e0c4b9-d6f3-4426-bbf5-57fc2a991a4c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:58314","PortSpecifier":{"PortValue":58314}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783090198,"nanos":731078770},"http":{"id":"60e0c4b9-d6f3-4426-bbf5-57fc2a991a4c","method":"POST","headers":{":authority":"e2e-shared-a-6ebb6a.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:49:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"60e0c4b9-d6f3-4426-bbf5-57fc2a991a4c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T14:49:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"60e0c4b9-d6f3-4426-bbf5-57fc2a991a4c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1855d0c8-d07c-417e-9b3f-a12b5b00145c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=27a9bfa3-ed3c-4129-8f90-1c3d2b27fe8d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/af9f436983f9"]}}
{"level":"debug","ts":"2026-07-03T14:49:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"60e0c4b9-d6f3-4426-bbf5-57fc2a991a4c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/af9f436983f9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=27a9bfa3-ed3c-4129-8f90-1c3d2b27fe8d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1855d0c8-d07c-417e-9b3f-a12b5b00145c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1111181e5388815f5618ccc1bbb67ae9343ad40ff34d1fe98d081a03101265c9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6ebb6a.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:49:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60e0c4b9-d6f3-4426-bbf5-57fc2a991a4c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:49:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60e0c4b9-d6f3-4426-bbf5-57fc2a991a4c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:49:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60e0c4b9-d6f3-4426-bbf5-57fc2a991a4c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6ebb6a/auth-test-model-6ebb6a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:49:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"60e0c4b9-d6f3-4426-bbf5-57fc2a991a4c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T14:49:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"60e0c4b9-d6f3-4426-bbf5-57fc2a991a4c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T14:49:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"60e0c4b9-d6f3-4426-bbf5-57fc2a991a4c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T14:49:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"60e0c4b9-d6f3-4426-bbf5-57fc2a991a4c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T14:49:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"60e0c4b9-d6f3-4426-bbf5-57fc2a991a4c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T14:49:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7fe8fe19-fe6b-4eb9-93dc-26a7c491a827","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:51972","PortSpecifier":{"PortValue":51972}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7fe8fe19-fe6b-4eb9-93dc-26a7c491a827","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1dd877.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T14:49:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7fe8fe19-fe6b-4eb9-93dc-26a7c491a827","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:51972","PortSpecifier":{"PortValue":51972}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783090198,"nanos":778850365},"http":{"id":"7fe8fe19-fe6b-4eb9-93dc-26a7c491a827","method":"POST","headers":{":authority":"e2e-shared-b-1dd877.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:49:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7fe8fe19-fe6b-4eb9-93dc-26a7c491a827","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T14:49:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7fe8fe19-fe6b-4eb9-93dc-26a7c491a827","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1855d0c8-d07c-417e-9b3f-a12b5b00145c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=27a9bfa3-ed3c-4129-8f90-1c3d2b27fe8d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/af9f436983f9"]}}
{"level":"debug","ts":"2026-07-03T14:49:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7fe8fe19-fe6b-4eb9-93dc-26a7c491a827","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/af9f436983f9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=27a9bfa3-ed3c-4129-8f90-1c3d2b27fe8d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1855d0c8-d07c-417e-9b3f-a12b5b00145c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"72fa94488914449a91242ee66b39aefb8fc61ec53ad224fa7af511146678f878"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1dd877.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:49:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7fe8fe19-fe6b-4eb9-93dc-26a7c491a827","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:49:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7fe8fe19-fe6b-4eb9-93dc-26a7c491a827","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:49:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7fe8fe19-fe6b-4eb9-93dc-26a7c491a827","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1dd877/auth-test-model-1dd877\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:49:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7fe8fe19-fe6b-4eb9-93dc-26a7c491a827","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T14:49:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7fe8fe19-fe6b-4eb9-93dc-26a7c491a827","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T14:49:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7fe8fe19-fe6b-4eb9-93dc-26a7c491a827","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T14:49:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7fe8fe19-fe6b-4eb9-93dc-26a7c491a827","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T14:49:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7fe8fe19-fe6b-4eb9-93dc-26a7c491a827","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T14:49:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8955df36-c00a-414e-9f70-c9314986af50","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:58318","PortSpecifier":{"PortValue":58318}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8955df36-c00a-414e-9f70-c9314986af50","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-6ebb6a.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T14:49:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8955df36-c00a-414e-9f70-c9314986af50","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:58318","PortSpecifier":{"PortValue":58318}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783090198,"nanos":820653079},"http":{"id":"8955df36-c00a-414e-9f70-c9314986af50","method":"POST","headers":{":authority":"e2e-shared-a-6ebb6a.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:49:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8955df36-c00a-414e-9f70-c9314986af50","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T14:49:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8955df36-c00a-414e-9f70-c9314986af50","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1855d0c8-d07c-417e-9b3f-a12b5b00145c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=27a9bfa3-ed3c-4129-8f90-1c3d2b27fe8d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/af9f436983f9"]}}
{"level":"debug","ts":"2026-07-03T14:49:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8955df36-c00a-414e-9f70-c9314986af50","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/af9f436983f9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=27a9bfa3-ed3c-4129-8f90-1c3d2b27fe8d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1855d0c8-d07c-417e-9b3f-a12b5b00145c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1111181e5388815f5618ccc1bbb67ae9343ad40ff34d1fe98d081a03101265c9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6ebb6a.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:49:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8955df36-c00a-414e-9f70-c9314986af50","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:49:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8955df36-c00a-414e-9f70-c9314986af50","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:49:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8955df36-c00a-414e-9f70-c9314986af50","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6ebb6a/auth-test-model-6ebb6a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:49:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8955df36-c00a-414e-9f70-c9314986af50","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T14:49:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8955df36-c00a-414e-9f70-c9314986af50","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T14:49:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8955df36-c00a-414e-9f70-c9314986af50","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T14:49:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8955df36-c00a-414e-9f70-c9314986af50","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T14:49:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8955df36-c00a-414e-9f70-c9314986af50","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T14:49:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7821ba3d-7b25-4d40-ba6a-e52fe52e3dc0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:51978","PortSpecifier":{"PortValue":51978}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7821ba3d-7b25-4d40-ba6a-e52fe52e3dc0","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-1dd877.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T14:49:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7821ba3d-7b25-4d40-ba6a-e52fe52e3dc0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:51978","PortSpecifier":{"PortValue":51978}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783090198,"nanos":858139581},"http":{"id":"7821ba3d-7b25-4d40-ba6a-e52fe52e3dc0","method":"POST","headers":{":authority":"e2e-shared-b-1dd877.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:49:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7821ba3d-7b25-4d40-ba6a-e52fe52e3dc0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T14:49:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7821ba3d-7b25-4d40-ba6a-e52fe52e3dc0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1855d0c8-d07c-417e-9b3f-a12b5b00145c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=27a9bfa3-ed3c-4129-8f90-1c3d2b27fe8d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/af9f436983f9"]}}
{"level":"debug","ts":"2026-07-03T14:49:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7821ba3d-7b25-4d40-ba6a-e52fe52e3dc0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/af9f436983f9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=27a9bfa3-ed3c-4129-8f90-1c3d2b27fe8d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1855d0c8-d07c-417e-9b3f-a12b5b00145c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"72fa94488914449a91242ee66b39aefb8fc61ec53ad224fa7af511146678f878"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1dd877.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:49:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7821ba3d-7b25-4d40-ba6a-e52fe52e3dc0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:49:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7821ba3d-7b25-4d40-ba6a-e52fe52e3dc0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:49:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7821ba3d-7b25-4d40-ba6a-e52fe52e3dc0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1dd877/auth-test-model-1dd877\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:49:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7821ba3d-7b25-4d40-ba6a-e52fe52e3dc0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T14:49:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7821ba3d-7b25-4d40-ba6a-e52fe52e3dc0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T14:49:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7821ba3d-7b25-4d40-ba6a-e52fe52e3dc0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T14:49:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7821ba3d-7b25-4d40-ba6a-e52fe52e3dc0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T14:49:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7821ba3d-7b25-4d40-ba6a-e52fe52e3dc0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T14:50:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f9cdb590-6e57-4c58-9183-db2871f0784d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:58050","PortSpecifier":{"PortValue":58050}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f9cdb590-6e57-4c58-9183-db2871f0784d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6ebb6a.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T14:50:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f9cdb590-6e57-4c58-9183-db2871f0784d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:58050","PortSpecifier":{"PortValue":58050}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783090216,"nanos":1262720},"http":{"id":"f9cdb590-6e57-4c58-9183-db2871f0784d","method":"POST","headers":{":authority":"e2e-shared-a-6ebb6a.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:50:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f9cdb590-6e57-4c58-9183-db2871f0784d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T14:50:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f9cdb590-6e57-4c58-9183-db2871f0784d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1855d0c8-d07c-417e-9b3f-a12b5b00145c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=27a9bfa3-ed3c-4129-8f90-1c3d2b27fe8d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/af9f436983f9"]}}
{"level":"debug","ts":"2026-07-03T14:50:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f9cdb590-6e57-4c58-9183-db2871f0784d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/af9f436983f9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=27a9bfa3-ed3c-4129-8f90-1c3d2b27fe8d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1855d0c8-d07c-417e-9b3f-a12b5b00145c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1111181e5388815f5618ccc1bbb67ae9343ad40ff34d1fe98d081a03101265c9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6ebb6a.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:50:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f9cdb590-6e57-4c58-9183-db2871f0784d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:50:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f9cdb590-6e57-4c58-9183-db2871f0784d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:50:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f9cdb590-6e57-4c58-9183-db2871f0784d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6ebb6a/auth-test-model-6ebb6a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:50:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f9cdb590-6e57-4c58-9183-db2871f0784d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T14:50:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f9cdb590-6e57-4c58-9183-db2871f0784d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T14:50:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f9cdb590-6e57-4c58-9183-db2871f0784d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T14:50:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f9cdb590-6e57-4c58-9183-db2871f0784d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T14:50:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f9cdb590-6e57-4c58-9183-db2871f0784d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T14:50:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3fb7eb15-38cb-43d4-966e-70dbeaabc581","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:53468","PortSpecifier":{"PortValue":53468}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3fb7eb15-38cb-43d4-966e-70dbeaabc581","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1dd877.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T14:50:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3fb7eb15-38cb-43d4-966e-70dbeaabc581","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:53468","PortSpecifier":{"PortValue":53468}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783090216,"nanos":39176040},"http":{"id":"3fb7eb15-38cb-43d4-966e-70dbeaabc581","method":"POST","headers":{":authority":"e2e-shared-b-1dd877.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:50:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3fb7eb15-38cb-43d4-966e-70dbeaabc581","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T14:50:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3fb7eb15-38cb-43d4-966e-70dbeaabc581","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1855d0c8-d07c-417e-9b3f-a12b5b00145c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=27a9bfa3-ed3c-4129-8f90-1c3d2b27fe8d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/af9f436983f9"]}}
{"level":"debug","ts":"2026-07-03T14:50:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3fb7eb15-38cb-43d4-966e-70dbeaabc581","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/af9f436983f9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=27a9bfa3-ed3c-4129-8f90-1c3d2b27fe8d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1855d0c8-d07c-417e-9b3f-a12b5b00145c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"72fa94488914449a91242ee66b39aefb8fc61ec53ad224fa7af511146678f878"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1dd877.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:50:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3fb7eb15-38cb-43d4-966e-70dbeaabc581","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:50:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3fb7eb15-38cb-43d4-966e-70dbeaabc581","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:50:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3fb7eb15-38cb-43d4-966e-70dbeaabc581","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1dd877/auth-test-model-1dd877\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:50:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3fb7eb15-38cb-43d4-966e-70dbeaabc581","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T14:50:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3fb7eb15-38cb-43d4-966e-70dbeaabc581","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T14:50:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3fb7eb15-38cb-43d4-966e-70dbeaabc581","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T14:50:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3fb7eb15-38cb-43d4-966e-70dbeaabc581","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T14:50:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3fb7eb15-38cb-43d4-966e-70dbeaabc581","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T14:50:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b32f2adc-d431-4ff1-86b4-9224f699a898","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:53478","PortSpecifier":{"PortValue":53478}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b32f2adc-d431-4ff1-86b4-9224f699a898","method":"GET","path":"/maas-api/v1/api-keys/4ac0eef7-000e-46f6-b3ce-d39095e85a24","host":"e2e-shared-b-1dd877.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T14:50:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b32f2adc-d431-4ff1-86b4-9224f699a898","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:53478","PortSpecifier":{"PortValue":53478}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783090216,"nanos":77141367},"http":{"id":"b32f2adc-d431-4ff1-86b4-9224f699a898","method":"GET","headers":{":authority":"e2e-shared-b-1dd877.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/4ac0eef7-000e-46f6-b3ce-d39095e85a24",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:50:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b32f2adc-d431-4ff1-86b4-9224f699a898","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T14:50:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b32f2adc-d431-4ff1-86b4-9224f699a898","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1855d0c8-d07c-417e-9b3f-a12b5b00145c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=27a9bfa3-ed3c-4129-8f90-1c3d2b27fe8d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/af9f436983f9"]}}
{"level":"debug","ts":"2026-07-03T14:50:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b32f2adc-d431-4ff1-86b4-9224f699a898","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/af9f436983f9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=27a9bfa3-ed3c-4129-8f90-1c3d2b27fe8d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1855d0c8-d07c-417e-9b3f-a12b5b00145c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"72fa94488914449a91242ee66b39aefb8fc61ec53ad224fa7af511146678f878"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1dd877.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/4ac0eef7-000e-46f6-b3ce-d39095e85a24",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:50:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b32f2adc-d431-4ff1-86b4-9224f699a898","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:50:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b32f2adc-d431-4ff1-86b4-9224f699a898","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:50:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b32f2adc-d431-4ff1-86b4-9224f699a898","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1dd877/auth-test-model-1dd877\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:50:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b32f2adc-d431-4ff1-86b4-9224f699a898","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T14:50:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b32f2adc-d431-4ff1-86b4-9224f699a898","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T14:50:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b32f2adc-d431-4ff1-86b4-9224f699a898","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T14:50:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b32f2adc-d431-4ff1-86b4-9224f699a898","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T14:50:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b32f2adc-d431-4ff1-86b4-9224f699a898","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T14:50:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5e673051-170c-409b-8be8-8fcc2809c52c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:58066","PortSpecifier":{"PortValue":58066}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5e673051-170c-409b-8be8-8fcc2809c52c","method":"GET","path":"/maas-api/v1/api-keys/4ac0eef7-000e-46f6-b3ce-d39095e85a24","host":"e2e-shared-a-6ebb6a.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T14:50:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5e673051-170c-409b-8be8-8fcc2809c52c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:58066","PortSpecifier":{"PortValue":58066}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783090216,"nanos":113007970},"http":{"id":"5e673051-170c-409b-8be8-8fcc2809c52c","method":"GET","headers":{":authority":"e2e-shared-a-6ebb6a.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/4ac0eef7-000e-46f6-b3ce-d39095e85a24",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:50:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5e673051-170c-409b-8be8-8fcc2809c52c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T14:50:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5e673051-170c-409b-8be8-8fcc2809c52c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1855d0c8-d07c-417e-9b3f-a12b5b00145c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=27a9bfa3-ed3c-4129-8f90-1c3d2b27fe8d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/af9f436983f9"]}}
{"level":"debug","ts":"2026-07-03T14:50:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5e673051-170c-409b-8be8-8fcc2809c52c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/af9f436983f9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=27a9bfa3-ed3c-4129-8f90-1c3d2b27fe8d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1855d0c8-d07c-417e-9b3f-a12b5b00145c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1111181e5388815f5618ccc1bbb67ae9343ad40ff34d1fe98d081a03101265c9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6ebb6a.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/4ac0eef7-000e-46f6-b3ce-d39095e85a24",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:50:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e673051-170c-409b-8be8-8fcc2809c52c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:50:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e673051-170c-409b-8be8-8fcc2809c52c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:50:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e673051-170c-409b-8be8-8fcc2809c52c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6ebb6a/auth-test-model-6ebb6a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:50:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5e673051-170c-409b-8be8-8fcc2809c52c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T14:50:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5e673051-170c-409b-8be8-8fcc2809c52c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T14:50:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5e673051-170c-409b-8be8-8fcc2809c52c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T14:50:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5e673051-170c-409b-8be8-8fcc2809c52c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T14:50:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5e673051-170c-409b-8be8-8fcc2809c52c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T14:50:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1f34062d-e6de-4643-af2f-cb5abac040f7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:56374","PortSpecifier":{"PortValue":56374}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1f34062d-e6de-4643-af2f-cb5abac040f7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6ebb6a.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T14:50:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1f34062d-e6de-4643-af2f-cb5abac040f7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:56374","PortSpecifier":{"PortValue":56374}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783090231,"nanos":133709381},"http":{"id":"1f34062d-e6de-4643-af2f-cb5abac040f7","method":"POST","headers":{":authority":"e2e-shared-a-6ebb6a.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:50:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1f34062d-e6de-4643-af2f-cb5abac040f7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T14:50:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1f34062d-e6de-4643-af2f-cb5abac040f7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1855d0c8-d07c-417e-9b3f-a12b5b00145c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=27a9bfa3-ed3c-4129-8f90-1c3d2b27fe8d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/af9f436983f9"]}}
{"level":"debug","ts":"2026-07-03T14:50:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1f34062d-e6de-4643-af2f-cb5abac040f7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/af9f436983f9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=27a9bfa3-ed3c-4129-8f90-1c3d2b27fe8d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1855d0c8-d07c-417e-9b3f-a12b5b00145c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1111181e5388815f5618ccc1bbb67ae9343ad40ff34d1fe98d081a03101265c9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6ebb6a.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:50:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f34062d-e6de-4643-af2f-cb5abac040f7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:50:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f34062d-e6de-4643-af2f-cb5abac040f7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:50:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f34062d-e6de-4643-af2f-cb5abac040f7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6ebb6a/auth-test-model-6ebb6a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:50:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1f34062d-e6de-4643-af2f-cb5abac040f7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T14:50:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f34062d-e6de-4643-af2f-cb5abac040f7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T14:50:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f34062d-e6de-4643-af2f-cb5abac040f7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-03T14:50:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1f34062d-e6de-4643-af2f-cb5abac040f7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T14:50:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1f34062d-e6de-4643-af2f-cb5abac040f7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T14:50:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d743df36-30cc-47ee-b06e-0ce250cf3452","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:45360","PortSpecifier":{"PortValue":45360}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d743df36-30cc-47ee-b06e-0ce250cf3452","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1dd877.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T14:50:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d743df36-30cc-47ee-b06e-0ce250cf3452","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:45360","PortSpecifier":{"PortValue":45360}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783090231,"nanos":170578112},"http":{"id":"d743df36-30cc-47ee-b06e-0ce250cf3452","method":"POST","headers":{":authority":"e2e-shared-b-1dd877.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:50:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d743df36-30cc-47ee-b06e-0ce250cf3452","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T14:50:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d743df36-30cc-47ee-b06e-0ce250cf3452","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1855d0c8-d07c-417e-9b3f-a12b5b00145c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=27a9bfa3-ed3c-4129-8f90-1c3d2b27fe8d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/af9f436983f9"]}}
{"level":"debug","ts":"2026-07-03T14:50:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d743df36-30cc-47ee-b06e-0ce250cf3452","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/af9f436983f9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=27a9bfa3-ed3c-4129-8f90-1c3d2b27fe8d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1855d0c8-d07c-417e-9b3f-a12b5b00145c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"72fa94488914449a91242ee66b39aefb8fc61ec53ad224fa7af511146678f878"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1dd877.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:50:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d743df36-30cc-47ee-b06e-0ce250cf3452","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:50:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d743df36-30cc-47ee-b06e-0ce250cf3452","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:50:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d743df36-30cc-47ee-b06e-0ce250cf3452","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1dd877/auth-test-model-1dd877\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:50:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d743df36-30cc-47ee-b06e-0ce250cf3452","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T14:50:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d743df36-30cc-47ee-b06e-0ce250cf3452","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T14:50:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d743df36-30cc-47ee-b06e-0ce250cf3452","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T14:50:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d743df36-30cc-47ee-b06e-0ce250cf3452","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T14:50:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d743df36-30cc-47ee-b06e-0ce250cf3452","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T14:50:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"64a19435-42d0-40b4-a678-efc2989a9c88","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:56388","PortSpecifier":{"PortValue":56388}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"64a19435-42d0-40b4-a678-efc2989a9c88","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-6ebb6a.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T14:50:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"64a19435-42d0-40b4-a678-efc2989a9c88","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:56388","PortSpecifier":{"PortValue":56388}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783090231,"nanos":216137838},"http":{"id":"64a19435-42d0-40b4-a678-efc2989a9c88","method":"POST","headers":{":authority":"e2e-shared-a-6ebb6a.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:50:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"64a19435-42d0-40b4-a678-efc2989a9c88","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-215Zini6Wdb2n32u_IBlNNC4Uew0jCwKxKw8qO3lUIxHgYwEPhV64sqvxVBX"}
{"level":"debug","ts":"2026-07-03T14:50:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"64a19435-42d0-40b4-a678-efc2989a9c88","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6ebb6a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-215Zini6Wdb2n32u_IBlNNC4Uew0jCwKxKw8qO3lUIxHgYwEPhV64sqvxVBX\"}"}
{"level":"debug","ts":"2026-07-03T14:50:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"64a19435-42d0-40b4-a678-efc2989a9c88","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6ebb6a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"216ca2b0-a8ed-4aa0-9298-b434d98d694a","keyName":"e2e-auth-iso-a-80624c","subscription":"e2e-auth-iso-6ddfbf","tenant":"e2e-shared-a-6ebb6a","userId":"216ca2b0-a8ed-4aa0-9298-b434d98d694a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-03T14:50:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"64a19435-42d0-40b4-a678-efc2989a9c88","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:50:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"64a19435-42d0-40b4-a678-efc2989a9c88","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:50:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"64a19435-42d0-40b4-a678-efc2989a9c88","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:50:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"64a19435-42d0-40b4-a678-efc2989a9c88","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6ebb6a/auth-test-model-6ebb6a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:50:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"64a19435-42d0-40b4-a678-efc2989a9c88","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T14:50:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"64a19435-42d0-40b4-a678-efc2989a9c88","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-03T14:50:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"64a19435-42d0-40b4-a678-efc2989a9c88","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-6ddfbf"}
{"level":"debug","ts":"2026-07-03T14:50:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"64a19435-42d0-40b4-a678-efc2989a9c88","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T14:50:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"64a19435-42d0-40b4-a678-efc2989a9c88","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T14:50:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"64a19435-42d0-40b4-a678-efc2989a9c88","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T14:50:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8a70448bd0fa81aa0da6a07d8b3100a53c752fb8ffd6b5771d66f79ad90fc52b"}
{"level":"info","ts":"2026-07-03T14:50:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9ff71a70dae6e420d5847521ce0518191a9827e8dd2554caff5566d8c0c0b8bd"}
{"level":"info","ts":"2026-07-03T14:50:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/db3117aee279cccb240654f85361d28ebad5e930ac4bdb2bef62cbd8399b57e8"}
{"level":"info","ts":"2026-07-03T14:50:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a246011d92f7c83cfd3f3900b1142e10903dcfdeae9cc879b4bbe674b5660b83"}
{"level":"info","ts":"2026-07-03T14:50:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0363825afe9721f648d97e4bd68eb8782b2fec9ac3422895e46439435a559c5f"}
{"level":"info","ts":"2026-07-03T14:50:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b03be7a618bc64dae30f2129f0d4d16f1134e93f656109c79295e4c940be6590"}
{"level":"info","ts":"2026-07-03T14:50:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eb4c92912e32ca00170ad6a53a37a6c3bc6d2969a9827626d895080e41d285bc"}
{"level":"info","ts":"2026-07-03T14:50:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4d24a06319f537ff4812944bfacdc072115109e6ee8d60caef3903fdadc504c6"}
{"level":"info","ts":"2026-07-03T14:50:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/56a411adca314ae1ee5fa1a50c9c86386b36280ad24f2f86f0710514ca116f45"}
{"level":"info","ts":"2026-07-03T14:50:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f5c22a4a3ff94a3c8c665c7ef5a62ea96193e4c3558022c849ff5a2061395525"}
{"level":"info","ts":"2026-07-03T14:50:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f68b0fbee0ad84af37b7d82282ffd88b6ff26d89fe7d9d223edc0bf5ac1ed958"}
{"level":"info","ts":"2026-07-03T14:50:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6a34fae2dd030ea4beacd0ae2c556db6b8e14ff418903d5a34169875b83f5bd8"}
{"level":"info","ts":"2026-07-03T14:50:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/956d4334eaa6b917064da9eda0bfb2aae4f24c1d955278132b3256757ab9d2a3"}
{"level":"info","ts":"2026-07-03T14:50:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7980f3abe88c183a253aac0ef9efacb4ef430883e54d453c53799ada0481b91b"}
{"level":"info","ts":"2026-07-03T14:50:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/69d3e1a62d78680e6cf487984b7644a70c8a1c4c2199f2aae383fdd4c779d9fe"}
{"level":"info","ts":"2026-07-03T14:50:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7a35e7814e3bbd8cc3823c2c69c65208e74d2bca143d088112ad2050ca2c2f6a"}
{"level":"debug","ts":"2026-07-03T14:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f8bcdd5abc19efbf1a5e9b125b0b916a29a717151ab13bbf5c93659770479a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:50:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:50:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f8bcdd5abc19efbf1a5e9b125b0b916a29a717151ab13bbf5c93659770479a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f8bcdd5abc19efbf1a5e9b125b0b916a29a717151ab13bbf5c93659770479a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f8bcdd5abc19efbf1a5e9b125b0b916a29a717151ab13bbf5c93659770479a4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f8bcdd5abc19efbf1a5e9b125b0b916a29a717151ab13bbf5c93659770479a4"}
{"level":"debug","ts":"2026-07-03T14:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f8bcdd5abc19efbf1a5e9b125b0b916a29a717151ab13bbf5c93659770479a4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:50:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f8bcdd5abc19efbf1a5e9b125b0b916a29a717151ab13bbf5c93659770479a4"}
{"level":"debug","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f8bcdd5abc19efbf1a5e9b125b0b916a29a717151ab13bbf5c93659770479a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:50:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:50:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f8bcdd5abc19efbf1a5e9b125b0b916a29a717151ab13bbf5c93659770479a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f8bcdd5abc19efbf1a5e9b125b0b916a29a717151ab13bbf5c93659770479a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f8bcdd5abc19efbf1a5e9b125b0b916a29a717151ab13bbf5c93659770479a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf920e91c800153d40671630fd84020db5c931eea56c2647b7b902b8cf70ef5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:50:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:50:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf920e91c800153d40671630fd84020db5c931eea56c2647b7b902b8cf70ef5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf920e91c800153d40671630fd84020db5c931eea56c2647b7b902b8cf70ef5c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f8bcdd5abc19efbf1a5e9b125b0b916a29a717151ab13bbf5c93659770479a4"}
{"level":"debug","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf920e91c800153d40671630fd84020db5c931eea56c2647b7b902b8cf70ef5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:50:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:50:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf920e91c800153d40671630fd84020db5c931eea56c2647b7b902b8cf70ef5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf920e91c800153d40671630fd84020db5c931eea56c2647b7b902b8cf70ef5c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf920e91c800153d40671630fd84020db5c931eea56c2647b7b902b8cf70ef5c"}
{"level":"debug","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf920e91c800153d40671630fd84020db5c931eea56c2647b7b902b8cf70ef5c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf920e91c800153d40671630fd84020db5c931eea56c2647b7b902b8cf70ef5c"}
{"level":"debug","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf920e91c800153d40671630fd84020db5c931eea56c2647b7b902b8cf70ef5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:50:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:50:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf920e91c800153d40671630fd84020db5c931eea56c2647b7b902b8cf70ef5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf920e91c800153d40671630fd84020db5c931eea56c2647b7b902b8cf70ef5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf920e91c800153d40671630fd84020db5c931eea56c2647b7b902b8cf70ef5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:50:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:50:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf920e91c800153d40671630fd84020db5c931eea56c2647b7b902b8cf70ef5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf920e91c800153d40671630fd84020db5c931eea56c2647b7b902b8cf70ef5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf920e91c800153d40671630fd84020db5c931eea56c2647b7b902b8cf70ef5c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf920e91c800153d40671630fd84020db5c931eea56c2647b7b902b8cf70ef5c"}
{"level":"debug","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf920e91c800153d40671630fd84020db5c931eea56c2647b7b902b8cf70ef5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"084658f95c2f26768d7f8780468c82e6424c203129f01c460cea51338c69f596","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:50:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:50:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf920e91c800153d40671630fd84020db5c931eea56c2647b7b902b8cf70ef5c"}
{"level":"info","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"084658f95c2f26768d7f8780468c82e6424c203129f01c460cea51338c69f596","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"084658f95c2f26768d7f8780468c82e6424c203129f01c460cea51338c69f596","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:50:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:50:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/084658f95c2f26768d7f8780468c82e6424c203129f01c460cea51338c69f596"}
{"level":"info","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"084658f95c2f26768d7f8780468c82e6424c203129f01c460cea51338c69f596","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"084658f95c2f26768d7f8780468c82e6424c203129f01c460cea51338c69f596","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:50:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:50:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"084658f95c2f26768d7f8780468c82e6424c203129f01c460cea51338c69f596","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"084658f95c2f26768d7f8780468c82e6424c203129f01c460cea51338c69f596\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf920e91c800153d40671630fd84020db5c931eea56c2647b7b902b8cf70ef5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:50:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:50:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf920e91c800153d40671630fd84020db5c931eea56c2647b7b902b8cf70ef5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/084658f95c2f26768d7f8780468c82e6424c203129f01c460cea51338c69f596"}
{"level":"info","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf920e91c800153d40671630fd84020db5c931eea56c2647b7b902b8cf70ef5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"084658f95c2f26768d7f8780468c82e6424c203129f01c460cea51338c69f596","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf920e91c800153d40671630fd84020db5c931eea56c2647b7b902b8cf70ef5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"084658f95c2f26768d7f8780468c82e6424c203129f01c460cea51338c69f596","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e55e0ad676d4137b6c4d37f2df567184e7d43c4b5d8d086c0b8a06aee7fb9bbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:50:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:50:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/084658f95c2f26768d7f8780468c82e6424c203129f01c460cea51338c69f596"}
{"level":"info","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e55e0ad676d4137b6c4d37f2df567184e7d43c4b5d8d086c0b8a06aee7fb9bbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e55e0ad676d4137b6c4d37f2df567184e7d43c4b5d8d086c0b8a06aee7fb9bbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e55e0ad676d4137b6c4d37f2df567184e7d43c4b5d8d086c0b8a06aee7fb9bbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e55e0ad676d4137b6c4d37f2df567184e7d43c4b5d8d086c0b8a06aee7fb9bbb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf920e91c800153d40671630fd84020db5c931eea56c2647b7b902b8cf70ef5c"}
{"level":"info","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e55e0ad676d4137b6c4d37f2df567184e7d43c4b5d8d086c0b8a06aee7fb9bbb"}
{"level":"debug","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"084658f95c2f26768d7f8780468c82e6424c203129f01c460cea51338c69f596","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:50:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:50:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["084658f95c2f26768d7f8780468c82e6424c203129f01c460cea51338c69f596"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"084658f95c2f26768d7f8780468c82e6424c203129f01c460cea51338c69f596","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e55e0ad676d4137b6c4d37f2df567184e7d43c4b5d8d086c0b8a06aee7fb9bbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:50:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:50:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e55e0ad676d4137b6c4d37f2df567184e7d43c4b5d8d086c0b8a06aee7fb9bbb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e55e0ad676d4137b6c4d37f2df567184e7d43c4b5d8d086c0b8a06aee7fb9bbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"084658f95c2f26768d7f8780468c82e6424c203129f01c460cea51338c69f596","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:50:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:50:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"084658f95c2f26768d7f8780468c82e6424c203129f01c460cea51338c69f596","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9545e594ed9846cc3b0689ffedc6141a03250a86dd116816433de70c1a39bf6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:50:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:50:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/084658f95c2f26768d7f8780468c82e6424c203129f01c460cea51338c69f596"}
{"level":"info","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9545e594ed9846cc3b0689ffedc6141a03250a86dd116816433de70c1a39bf6e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e55e0ad676d4137b6c4d37f2df567184e7d43c4b5d8d086c0b8a06aee7fb9bbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"084658f95c2f26768d7f8780468c82e6424c203129f01c460cea51338c69f596","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:50:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:50:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["084658f95c2f26768d7f8780468c82e6424c203129f01c460cea51338c69f596"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9545e594ed9846cc3b0689ffedc6141a03250a86dd116816433de70c1a39bf6e"}
{"level":"info","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"084658f95c2f26768d7f8780468c82e6424c203129f01c460cea51338c69f596","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9545e594ed9846cc3b0689ffedc6141a03250a86dd116816433de70c1a39bf6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:50:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:50:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9545e594ed9846cc3b0689ffedc6141a03250a86dd116816433de70c1a39bf6e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9545e594ed9846cc3b0689ffedc6141a03250a86dd116816433de70c1a39bf6e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"084658f95c2f26768d7f8780468c82e6424c203129f01c460cea51338c69f596","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9545e594ed9846cc3b0689ffedc6141a03250a86dd116816433de70c1a39bf6e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e55e0ad676d4137b6c4d37f2df567184e7d43c4b5d8d086c0b8a06aee7fb9bbb"}
{"level":"info","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/084658f95c2f26768d7f8780468c82e6424c203129f01c460cea51338c69f596"}
{"level":"info","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9545e594ed9846cc3b0689ffedc6141a03250a86dd116816433de70c1a39bf6e"}
{"level":"debug","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"164de7e5b10d622e5049f879016f7129b947d1809afbabc60d153426b075b1c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:50:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:50:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"164de7e5b10d622e5049f879016f7129b947d1809afbabc60d153426b075b1c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"164de7e5b10d622e5049f879016f7129b947d1809afbabc60d153426b075b1c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"164de7e5b10d622e5049f879016f7129b947d1809afbabc60d153426b075b1c4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/164de7e5b10d622e5049f879016f7129b947d1809afbabc60d153426b075b1c4"}
{"level":"debug","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"164de7e5b10d622e5049f879016f7129b947d1809afbabc60d153426b075b1c4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/164de7e5b10d622e5049f879016f7129b947d1809afbabc60d153426b075b1c4"}
{"level":"debug","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"164de7e5b10d622e5049f879016f7129b947d1809afbabc60d153426b075b1c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:50:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:50:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["164de7e5b10d622e5049f879016f7129b947d1809afbabc60d153426b075b1c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"164de7e5b10d622e5049f879016f7129b947d1809afbabc60d153426b075b1c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"164de7e5b10d622e5049f879016f7129b947d1809afbabc60d153426b075b1c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47ea1b68239c4e000cf8493b019a8c3a377943b4a519dd23a1dd32895ed2b062","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:50:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:50:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47ea1b68239c4e000cf8493b019a8c3a377943b4a519dd23a1dd32895ed2b062","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47ea1b68239c4e000cf8493b019a8c3a377943b4a519dd23a1dd32895ed2b062","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/164de7e5b10d622e5049f879016f7129b947d1809afbabc60d153426b075b1c4"}
{"level":"debug","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47ea1b68239c4e000cf8493b019a8c3a377943b4a519dd23a1dd32895ed2b062","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:50:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:50:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47ea1b68239c4e000cf8493b019a8c3a377943b4a519dd23a1dd32895ed2b062","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47ea1b68239c4e000cf8493b019a8c3a377943b4a519dd23a1dd32895ed2b062","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47ea1b68239c4e000cf8493b019a8c3a377943b4a519dd23a1dd32895ed2b062"}
{"level":"debug","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47ea1b68239c4e000cf8493b019a8c3a377943b4a519dd23a1dd32895ed2b062","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47ea1b68239c4e000cf8493b019a8c3a377943b4a519dd23a1dd32895ed2b062"}
{"level":"debug","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff7220c07af00b45f04a7b074a7374bc77b0bc63d4dd0c41eff4220534d288dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:50:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:50:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff7220c07af00b45f04a7b074a7374bc77b0bc63d4dd0c41eff4220534d288dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff7220c07af00b45f04a7b074a7374bc77b0bc63d4dd0c41eff4220534d288dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:50:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:50:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff7220c07af00b45f04a7b074a7374bc77b0bc63d4dd0c41eff4220534d288dc"}
{"level":"info","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff7220c07af00b45f04a7b074a7374bc77b0bc63d4dd0c41eff4220534d288dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47ea1b68239c4e000cf8493b019a8c3a377943b4a519dd23a1dd32895ed2b062","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:50:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:50:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["47ea1b68239c4e000cf8493b019a8c3a377943b4a519dd23a1dd32895ed2b062"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff7220c07af00b45f04a7b074a7374bc77b0bc63d4dd0c41eff4220534d288dc"}
{"level":"info","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47ea1b68239c4e000cf8493b019a8c3a377943b4a519dd23a1dd32895ed2b062","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff7220c07af00b45f04a7b074a7374bc77b0bc63d4dd0c41eff4220534d288dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47ea1b68239c4e000cf8493b019a8c3a377943b4a519dd23a1dd32895ed2b062","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff7220c07af00b45f04a7b074a7374bc77b0bc63d4dd0c41eff4220534d288dc"}
{"level":"debug","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff7220c07af00b45f04a7b074a7374bc77b0bc63d4dd0c41eff4220534d288dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:50:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:50:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff7220c07af00b45f04a7b074a7374bc77b0bc63d4dd0c41eff4220534d288dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47ea1b68239c4e000cf8493b019a8c3a377943b4a519dd23a1dd32895ed2b062"}
{"level":"info","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff7220c07af00b45f04a7b074a7374bc77b0bc63d4dd0c41eff4220534d288dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff7220c07af00b45f04a7b074a7374bc77b0bc63d4dd0c41eff4220534d288dc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:50:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff7220c07af00b45f04a7b074a7374bc77b0bc63d4dd0c41eff4220534d288dc"}
{"level":"debug","ts":"2026-07-03T14:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c89602d96d8d6eb19f2252b9878031e7466e932878e3ef9edcc07b97dbf1a46c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:51:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:51:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c89602d96d8d6eb19f2252b9878031e7466e932878e3ef9edcc07b97dbf1a46c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c89602d96d8d6eb19f2252b9878031e7466e932878e3ef9edcc07b97dbf1a46c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c89602d96d8d6eb19f2252b9878031e7466e932878e3ef9edcc07b97dbf1a46c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c89602d96d8d6eb19f2252b9878031e7466e932878e3ef9edcc07b97dbf1a46c"}
{"level":"debug","ts":"2026-07-03T14:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c89602d96d8d6eb19f2252b9878031e7466e932878e3ef9edcc07b97dbf1a46c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c89602d96d8d6eb19f2252b9878031e7466e932878e3ef9edcc07b97dbf1a46c"}
{"level":"debug","ts":"2026-07-03T14:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c89602d96d8d6eb19f2252b9878031e7466e932878e3ef9edcc07b97dbf1a46c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:51:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:51:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c89602d96d8d6eb19f2252b9878031e7466e932878e3ef9edcc07b97dbf1a46c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c89602d96d8d6eb19f2252b9878031e7466e932878e3ef9edcc07b97dbf1a46c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c89602d96d8d6eb19f2252b9878031e7466e932878e3ef9edcc07b97dbf1a46c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:51:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:51:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c89602d96d8d6eb19f2252b9878031e7466e932878e3ef9edcc07b97dbf1a46c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c89602d96d8d6eb19f2252b9878031e7466e932878e3ef9edcc07b97dbf1a46c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c89602d96d8d6eb19f2252b9878031e7466e932878e3ef9edcc07b97dbf1a46c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c89602d96d8d6eb19f2252b9878031e7466e932878e3ef9edcc07b97dbf1a46c"}
{"level":"debug","ts":"2026-07-03T14:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c89602d96d8d6eb19f2252b9878031e7466e932878e3ef9edcc07b97dbf1a46c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c89602d96d8d6eb19f2252b9878031e7466e932878e3ef9edcc07b97dbf1a46c"}
{"level":"debug","ts":"2026-07-03T14:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c89602d96d8d6eb19f2252b9878031e7466e932878e3ef9edcc07b97dbf1a46c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:51:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:51:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c89602d96d8d6eb19f2252b9878031e7466e932878e3ef9edcc07b97dbf1a46c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c89602d96d8d6eb19f2252b9878031e7466e932878e3ef9edcc07b97dbf1a46c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c89602d96d8d6eb19f2252b9878031e7466e932878e3ef9edcc07b97dbf1a46c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:51:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:51:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c89602d96d8d6eb19f2252b9878031e7466e932878e3ef9edcc07b97dbf1a46c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c89602d96d8d6eb19f2252b9878031e7466e932878e3ef9edcc07b97dbf1a46c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c89602d96d8d6eb19f2252b9878031e7466e932878e3ef9edcc07b97dbf1a46c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c89602d96d8d6eb19f2252b9878031e7466e932878e3ef9edcc07b97dbf1a46c"}
{"level":"debug","ts":"2026-07-03T14:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c89602d96d8d6eb19f2252b9878031e7466e932878e3ef9edcc07b97dbf1a46c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c89602d96d8d6eb19f2252b9878031e7466e932878e3ef9edcc07b97dbf1a46c"}
{"level":"debug","ts":"2026-07-03T14:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c89602d96d8d6eb19f2252b9878031e7466e932878e3ef9edcc07b97dbf1a46c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:51:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:51:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c89602d96d8d6eb19f2252b9878031e7466e932878e3ef9edcc07b97dbf1a46c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c89602d96d8d6eb19f2252b9878031e7466e932878e3ef9edcc07b97dbf1a46c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c89602d96d8d6eb19f2252b9878031e7466e932878e3ef9edcc07b97dbf1a46c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ef6c05265c9669bca771de8d1002654b0f281da76d6ffd9151ae3e19bfe791e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:51:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:51:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c89602d96d8d6eb19f2252b9878031e7466e932878e3ef9edcc07b97dbf1a46c"}
{"level":"info","ts":"2026-07-03T14:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ef6c05265c9669bca771de8d1002654b0f281da76d6ffd9151ae3e19bfe791e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ef6c05265c9669bca771de8d1002654b0f281da76d6ffd9151ae3e19bfe791e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:51:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:51:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ef6c05265c9669bca771de8d1002654b0f281da76d6ffd9151ae3e19bfe791e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ef6c05265c9669bca771de8d1002654b0f281da76d6ffd9151ae3e19bfe791e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:51:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:51:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ef6c05265c9669bca771de8d1002654b0f281da76d6ffd9151ae3e19bfe791e"}
{"level":"error","ts":"2026-07-03T14:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9ef6c05265c9669bca771de8d1002654b0f281da76d6ffd9151ae3e19bfe791e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9ef6c05265c9669bca771de8d1002654b0f281da76d6ffd9151ae3e19bfe791e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-03T14:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ef6c05265c9669bca771de8d1002654b0f281da76d6ffd9151ae3e19bfe791e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ef6c05265c9669bca771de8d1002654b0f281da76d6ffd9151ae3e19bfe791e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ef6c05265c9669bca771de8d1002654b0f281da76d6ffd9151ae3e19bfe791e"}
{"level":"debug","ts":"2026-07-03T14:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ef6c05265c9669bca771de8d1002654b0f281da76d6ffd9151ae3e19bfe791e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:51:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:51:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ef6c05265c9669bca771de8d1002654b0f281da76d6ffd9151ae3e19bfe791e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ef6c05265c9669bca771de8d1002654b0f281da76d6ffd9151ae3e19bfe791e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ef6c05265c9669bca771de8d1002654b0f281da76d6ffd9151ae3e19bfe791e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:51:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:51:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ef6c05265c9669bca771de8d1002654b0f281da76d6ffd9151ae3e19bfe791e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ef6c05265c9669bca771de8d1002654b0f281da76d6ffd9151ae3e19bfe791e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ef6c05265c9669bca771de8d1002654b0f281da76d6ffd9151ae3e19bfe791e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ef6c05265c9669bca771de8d1002654b0f281da76d6ffd9151ae3e19bfe791e"}
{"level":"debug","ts":"2026-07-03T14:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ef6c05265c9669bca771de8d1002654b0f281da76d6ffd9151ae3e19bfe791e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ef6c05265c9669bca771de8d1002654b0f281da76d6ffd9151ae3e19bfe791e"}
{"level":"debug","ts":"2026-07-03T14:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"285d67bc144b52d601624ca5017bc54fc6b311a1470e8d567f85c2f57cc7bd94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:51:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:51:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"285d67bc144b52d601624ca5017bc54fc6b311a1470e8d567f85c2f57cc7bd94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ef6c05265c9669bca771de8d1002654b0f281da76d6ffd9151ae3e19bfe791e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:51:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:51:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ef6c05265c9669bca771de8d1002654b0f281da76d6ffd9151ae3e19bfe791e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/285d67bc144b52d601624ca5017bc54fc6b311a1470e8d567f85c2f57cc7bd94"}
{"level":"info","ts":"2026-07-03T14:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ef6c05265c9669bca771de8d1002654b0f281da76d6ffd9151ae3e19bfe791e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"285d67bc144b52d601624ca5017bc54fc6b311a1470e8d567f85c2f57cc7bd94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ef6c05265c9669bca771de8d1002654b0f281da76d6ffd9151ae3e19bfe791e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"285d67bc144b52d601624ca5017bc54fc6b311a1470e8d567f85c2f57cc7bd94","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/285d67bc144b52d601624ca5017bc54fc6b311a1470e8d567f85c2f57cc7bd94"}
{"level":"debug","ts":"2026-07-03T14:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"285d67bc144b52d601624ca5017bc54fc6b311a1470e8d567f85c2f57cc7bd94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:51:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:51:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["285d67bc144b52d601624ca5017bc54fc6b311a1470e8d567f85c2f57cc7bd94"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ef6c05265c9669bca771de8d1002654b0f281da76d6ffd9151ae3e19bfe791e"}
{"level":"info","ts":"2026-07-03T14:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"285d67bc144b52d601624ca5017bc54fc6b311a1470e8d567f85c2f57cc7bd94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"285d67bc144b52d601624ca5017bc54fc6b311a1470e8d567f85c2f57cc7bd94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:51:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:51:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"285d67bc144b52d601624ca5017bc54fc6b311a1470e8d567f85c2f57cc7bd94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"285d67bc144b52d601624ca5017bc54fc6b311a1470e8d567f85c2f57cc7bd94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"285d67bc144b52d601624ca5017bc54fc6b311a1470e8d567f85c2f57cc7bd94","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/285d67bc144b52d601624ca5017bc54fc6b311a1470e8d567f85c2f57cc7bd94"}
{"level":"debug","ts":"2026-07-03T14:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"285d67bc144b52d601624ca5017bc54fc6b311a1470e8d567f85c2f57cc7bd94","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/285d67bc144b52d601624ca5017bc54fc6b311a1470e8d567f85c2f57cc7bd94"}
{"level":"debug","ts":"2026-07-03T14:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"285d67bc144b52d601624ca5017bc54fc6b311a1470e8d567f85c2f57cc7bd94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:51:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:51:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["285d67bc144b52d601624ca5017bc54fc6b311a1470e8d567f85c2f57cc7bd94"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"285d67bc144b52d601624ca5017bc54fc6b311a1470e8d567f85c2f57cc7bd94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"285d67bc144b52d601624ca5017bc54fc6b311a1470e8d567f85c2f57cc7bd94","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/285d67bc144b52d601624ca5017bc54fc6b311a1470e8d567f85c2f57cc7bd94"}
{"level":"debug","ts":"2026-07-03T14:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09a33e80193b4eafc24b356a8f7c6e15d8867504e636945c6a0f948e3c42ed6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:51:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:51:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09a33e80193b4eafc24b356a8f7c6e15d8867504e636945c6a0f948e3c42ed6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3e0a3c030ebc758303a2b420a9f8203cbedf74e1f2926073ab9b661fb62ddcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:51:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:51:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09a33e80193b4eafc24b356a8f7c6e15d8867504e636945c6a0f948e3c42ed6d"}
{"level":"info","ts":"2026-07-03T14:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3e0a3c030ebc758303a2b420a9f8203cbedf74e1f2926073ab9b661fb62ddcb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09a33e80193b4eafc24b356a8f7c6e15d8867504e636945c6a0f948e3c42ed6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:51:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:51:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09a33e80193b4eafc24b356a8f7c6e15d8867504e636945c6a0f948e3c42ed6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3e0a3c030ebc758303a2b420a9f8203cbedf74e1f2926073ab9b661fb62ddcb"}
{"level":"info","ts":"2026-07-03T14:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09a33e80193b4eafc24b356a8f7c6e15d8867504e636945c6a0f948e3c42ed6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a6c6977c4aa801b9ec8ea10a4449e3ccd5d519629d44a64672bdc9751b4df20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:51:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:51:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09a33e80193b4eafc24b356a8f7c6e15d8867504e636945c6a0f948e3c42ed6d"}
{"level":"info","ts":"2026-07-03T14:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a6c6977c4aa801b9ec8ea10a4449e3ccd5d519629d44a64672bdc9751b4df20"}
{"level":"info","ts":"2026-07-03T14:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a6c6977c4aa801b9ec8ea10a4449e3ccd5d519629d44a64672bdc9751b4df20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3e0a3c030ebc758303a2b420a9f8203cbedf74e1f2926073ab9b661fb62ddcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:51:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:51:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3e0a3c030ebc758303a2b420a9f8203cbedf74e1f2926073ab9b661fb62ddcb"}
{"level":"info","ts":"2026-07-03T14:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3e0a3c030ebc758303a2b420a9f8203cbedf74e1f2926073ab9b661fb62ddcb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09a33e80193b4eafc24b356a8f7c6e15d8867504e636945c6a0f948e3c42ed6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:51:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:51:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09a33e80193b4eafc24b356a8f7c6e15d8867504e636945c6a0f948e3c42ed6d"}
{"level":"info","ts":"2026-07-03T14:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09a33e80193b4eafc24b356a8f7c6e15d8867504e636945c6a0f948e3c42ed6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a6c6977c4aa801b9ec8ea10a4449e3ccd5d519629d44a64672bdc9751b4df20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:51:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:51:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a6c6977c4aa801b9ec8ea10a4449e3ccd5d519629d44a64672bdc9751b4df20"}
{"level":"info","ts":"2026-07-03T14:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a6c6977c4aa801b9ec8ea10a4449e3ccd5d519629d44a64672bdc9751b4df20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3e0a3c030ebc758303a2b420a9f8203cbedf74e1f2926073ab9b661fb62ddcb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09a33e80193b4eafc24b356a8f7c6e15d8867504e636945c6a0f948e3c42ed6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:51:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:51:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09a33e80193b4eafc24b356a8f7c6e15d8867504e636945c6a0f948e3c42ed6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3e0a3c030ebc758303a2b420a9f8203cbedf74e1f2926073ab9b661fb62ddcb"}
{"level":"info","ts":"2026-07-03T14:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09a33e80193b4eafc24b356a8f7c6e15d8867504e636945c6a0f948e3c42ed6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a6c6977c4aa801b9ec8ea10a4449e3ccd5d519629d44a64672bdc9751b4df20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:51:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:51:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a6c6977c4aa801b9ec8ea10a4449e3ccd5d519629d44a64672bdc9751b4df20"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09a33e80193b4eafc24b356a8f7c6e15d8867504e636945c6a0f948e3c42ed6d"}
{"level":"info","ts":"2026-07-03T14:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a6c6977c4aa801b9ec8ea10a4449e3ccd5d519629d44a64672bdc9751b4df20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3e0a3c030ebc758303a2b420a9f8203cbedf74e1f2926073ab9b661fb62ddcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:51:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:51:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3e0a3c030ebc758303a2b420a9f8203cbedf74e1f2926073ab9b661fb62ddcb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3e0a3c030ebc758303a2b420a9f8203cbedf74e1f2926073ab9b661fb62ddcb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09a33e80193b4eafc24b356a8f7c6e15d8867504e636945c6a0f948e3c42ed6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a6c6977c4aa801b9ec8ea10a4449e3ccd5d519629d44a64672bdc9751b4df20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:51:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:51:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a6c6977c4aa801b9ec8ea10a4449e3ccd5d519629d44a64672bdc9751b4df20"}
{"level":"info","ts":"2026-07-03T14:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a6c6977c4aa801b9ec8ea10a4449e3ccd5d519629d44a64672bdc9751b4df20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a03f2d5a297a92ae29e7f791f3c6a09337942c1a530ded4fd55c72682cb5ae75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:51:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:51:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09a33e80193b4eafc24b356a8f7c6e15d8867504e636945c6a0f948e3c42ed6d"}
{"level":"info","ts":"2026-07-03T14:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a03f2d5a297a92ae29e7f791f3c6a09337942c1a530ded4fd55c72682cb5ae75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3e0a3c030ebc758303a2b420a9f8203cbedf74e1f2926073ab9b661fb62ddcb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a6c6977c4aa801b9ec8ea10a4449e3ccd5d519629d44a64672bdc9751b4df20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:51:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:51:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a6c6977c4aa801b9ec8ea10a4449e3ccd5d519629d44a64672bdc9751b4df20"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a6c6977c4aa801b9ec8ea10a4449e3ccd5d519629d44a64672bdc9751b4df20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a03f2d5a297a92ae29e7f791f3c6a09337942c1a530ded4fd55c72682cb5ae75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:51:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:51:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a03f2d5a297a92ae29e7f791f3c6a09337942c1a530ded4fd55c72682cb5ae75"}
{"level":"info","ts":"2026-07-03T14:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a03f2d5a297a92ae29e7f791f3c6a09337942c1a530ded4fd55c72682cb5ae75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a6c6977c4aa801b9ec8ea10a4449e3ccd5d519629d44a64672bdc9751b4df20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a03f2d5a297a92ae29e7f791f3c6a09337942c1a530ded4fd55c72682cb5ae75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:51:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:51:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a03f2d5a297a92ae29e7f791f3c6a09337942c1a530ded4fd55c72682cb5ae75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3e0a3c030ebc758303a2b420a9f8203cbedf74e1f2926073ab9b661fb62ddcb"}
{"level":"info","ts":"2026-07-03T14:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a03f2d5a297a92ae29e7f791f3c6a09337942c1a530ded4fd55c72682cb5ae75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a03f2d5a297a92ae29e7f791f3c6a09337942c1a530ded4fd55c72682cb5ae75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:51:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:51:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a03f2d5a297a92ae29e7f791f3c6a09337942c1a530ded4fd55c72682cb5ae75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-03T14:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a03f2d5a297a92ae29e7f791f3c6a09337942c1a530ded4fd55c72682cb5ae75","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a03f2d5a297a92ae29e7f791f3c6a09337942c1a530ded4fd55c72682cb5ae75\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-03T14:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a03f2d5a297a92ae29e7f791f3c6a09337942c1a530ded4fd55c72682cb5ae75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a03f2d5a297a92ae29e7f791f3c6a09337942c1a530ded4fd55c72682cb5ae75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f0dc216203bb5aa63cb5075ac947907ca782506a8810c14d3933948c4fd6106","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:51:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:51:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a6c6977c4aa801b9ec8ea10a4449e3ccd5d519629d44a64672bdc9751b4df20"}
{"level":"info","ts":"2026-07-03T14:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f0dc216203bb5aa63cb5075ac947907ca782506a8810c14d3933948c4fd6106","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f0dc216203bb5aa63cb5075ac947907ca782506a8810c14d3933948c4fd6106","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f0dc216203bb5aa63cb5075ac947907ca782506a8810c14d3933948c4fd6106","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a03f2d5a297a92ae29e7f791f3c6a09337942c1a530ded4fd55c72682cb5ae75"}
{"level":"debug","ts":"2026-07-03T14:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f0dc216203bb5aa63cb5075ac947907ca782506a8810c14d3933948c4fd6106","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:51:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:51:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f0dc216203bb5aa63cb5075ac947907ca782506a8810c14d3933948c4fd6106"}
{"level":"info","ts":"2026-07-03T14:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f0dc216203bb5aa63cb5075ac947907ca782506a8810c14d3933948c4fd6106","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f0dc216203bb5aa63cb5075ac947907ca782506a8810c14d3933948c4fd6106","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:51:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:51:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f0dc216203bb5aa63cb5075ac947907ca782506a8810c14d3933948c4fd6106"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f0dc216203bb5aa63cb5075ac947907ca782506a8810c14d3933948c4fd6106","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f0dc216203bb5aa63cb5075ac947907ca782506a8810c14d3933948c4fd6106","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:51:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:51:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f0dc216203bb5aa63cb5075ac947907ca782506a8810c14d3933948c4fd6106"}
{"level":"info","ts":"2026-07-03T14:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f0dc216203bb5aa63cb5075ac947907ca782506a8810c14d3933948c4fd6106","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f0dc216203bb5aa63cb5075ac947907ca782506a8810c14d3933948c4fd6106","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f0dc216203bb5aa63cb5075ac947907ca782506a8810c14d3933948c4fd6106","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f0dc216203bb5aa63cb5075ac947907ca782506a8810c14d3933948c4fd6106"}
{"level":"debug","ts":"2026-07-03T14:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f0dc216203bb5aa63cb5075ac947907ca782506a8810c14d3933948c4fd6106","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f0dc216203bb5aa63cb5075ac947907ca782506a8810c14d3933948c4fd6106"}
{"level":"debug","ts":"2026-07-03T14:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f0dc216203bb5aa63cb5075ac947907ca782506a8810c14d3933948c4fd6106","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:51:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:51:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f0dc216203bb5aa63cb5075ac947907ca782506a8810c14d3933948c4fd6106"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f0dc216203bb5aa63cb5075ac947907ca782506a8810c14d3933948c4fd6106","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f0dc216203bb5aa63cb5075ac947907ca782506a8810c14d3933948c4fd6106","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f0dc216203bb5aa63cb5075ac947907ca782506a8810c14d3933948c4fd6106"}
{"level":"debug","ts":"2026-07-03T14:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c89602d96d8d6eb19f2252b9878031e7466e932878e3ef9edcc07b97dbf1a46c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:51:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:51:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c89602d96d8d6eb19f2252b9878031e7466e932878e3ef9edcc07b97dbf1a46c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c89602d96d8d6eb19f2252b9878031e7466e932878e3ef9edcc07b97dbf1a46c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c89602d96d8d6eb19f2252b9878031e7466e932878e3ef9edcc07b97dbf1a46c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c89602d96d8d6eb19f2252b9878031e7466e932878e3ef9edcc07b97dbf1a46c"}
{"level":"debug","ts":"2026-07-03T14:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c89602d96d8d6eb19f2252b9878031e7466e932878e3ef9edcc07b97dbf1a46c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c89602d96d8d6eb19f2252b9878031e7466e932878e3ef9edcc07b97dbf1a46c"}
{"level":"debug","ts":"2026-07-03T14:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c89602d96d8d6eb19f2252b9878031e7466e932878e3ef9edcc07b97dbf1a46c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:51:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:51:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c89602d96d8d6eb19f2252b9878031e7466e932878e3ef9edcc07b97dbf1a46c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c89602d96d8d6eb19f2252b9878031e7466e932878e3ef9edcc07b97dbf1a46c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c89602d96d8d6eb19f2252b9878031e7466e932878e3ef9edcc07b97dbf1a46c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c89602d96d8d6eb19f2252b9878031e7466e932878e3ef9edcc07b97dbf1a46c"}
{"level":"debug","ts":"2026-07-03T14:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46d58e2d92e7a8de3e6b687a4f6836f6508bd2b32ce20dc71caf294c4c8c85ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:51:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:51:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46d58e2d92e7a8de3e6b687a4f6836f6508bd2b32ce20dc71caf294c4c8c85ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46d58e2d92e7a8de3e6b687a4f6836f6508bd2b32ce20dc71caf294c4c8c85ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46d58e2d92e7a8de3e6b687a4f6836f6508bd2b32ce20dc71caf294c4c8c85ae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46d58e2d92e7a8de3e6b687a4f6836f6508bd2b32ce20dc71caf294c4c8c85ae"}
{"level":"debug","ts":"2026-07-03T14:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46d58e2d92e7a8de3e6b687a4f6836f6508bd2b32ce20dc71caf294c4c8c85ae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46d58e2d92e7a8de3e6b687a4f6836f6508bd2b32ce20dc71caf294c4c8c85ae"}
{"level":"debug","ts":"2026-07-03T14:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46d58e2d92e7a8de3e6b687a4f6836f6508bd2b32ce20dc71caf294c4c8c85ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:51:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:51:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["46d58e2d92e7a8de3e6b687a4f6836f6508bd2b32ce20dc71caf294c4c8c85ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46d58e2d92e7a8de3e6b687a4f6836f6508bd2b32ce20dc71caf294c4c8c85ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46d58e2d92e7a8de3e6b687a4f6836f6508bd2b32ce20dc71caf294c4c8c85ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"084658f95c2f26768d7f8780468c82e6424c203129f01c460cea51338c69f596","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46d58e2d92e7a8de3e6b687a4f6836f6508bd2b32ce20dc71caf294c4c8c85ae"}
{"level":"info","ts":"2026-07-03T14:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/084658f95c2f26768d7f8780468c82e6424c203129f01c460cea51338c69f596"}
{"level":"debug","ts":"2026-07-03T14:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ef6c05265c9669bca771de8d1002654b0f281da76d6ffd9151ae3e19bfe791e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ef6c05265c9669bca771de8d1002654b0f281da76d6ffd9151ae3e19bfe791e"}
{"level":"debug","ts":"2026-07-03T14:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"285d67bc144b52d601624ca5017bc54fc6b311a1470e8d567f85c2f57cc7bd94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:51:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:51:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"285d67bc144b52d601624ca5017bc54fc6b311a1470e8d567f85c2f57cc7bd94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c081c27dc685dd75fe3f8352c9def11cb0ca562c389fef10c042164db52c8f6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"285d67bc144b52d601624ca5017bc54fc6b311a1470e8d567f85c2f57cc7bd94","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/285d67bc144b52d601624ca5017bc54fc6b311a1470e8d567f85c2f57cc7bd94"}
{"level":"debug","ts":"2026-07-03T14:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"285d67bc144b52d601624ca5017bc54fc6b311a1470e8d567f85c2f57cc7bd94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:51:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:51:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["285d67bc144b52d601624ca5017bc54fc6b311a1470e8d567f85c2f57cc7bd94"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"285d67bc144b52d601624ca5017bc54fc6b311a1470e8d567f85c2f57cc7bd94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"285d67bc144b52d601624ca5017bc54fc6b311a1470e8d567f85c2f57cc7bd94","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c081c27dc685dd75fe3f8352c9def11cb0ca562c389fef10c042164db52c8f6b"}
{"level":"info","ts":"2026-07-03T14:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/285d67bc144b52d601624ca5017bc54fc6b311a1470e8d567f85c2f57cc7bd94"}
{"level":"debug","ts":"2026-07-03T14:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a03f2d5a297a92ae29e7f791f3c6a09337942c1a530ded4fd55c72682cb5ae75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:51:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:51:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a03f2d5a297a92ae29e7f791f3c6a09337942c1a530ded4fd55c72682cb5ae75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a03f2d5a297a92ae29e7f791f3c6a09337942c1a530ded4fd55c72682cb5ae75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a03f2d5a297a92ae29e7f791f3c6a09337942c1a530ded4fd55c72682cb5ae75","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a03f2d5a297a92ae29e7f791f3c6a09337942c1a530ded4fd55c72682cb5ae75"}
{"level":"debug","ts":"2026-07-03T14:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a03f2d5a297a92ae29e7f791f3c6a09337942c1a530ded4fd55c72682cb5ae75","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a03f2d5a297a92ae29e7f791f3c6a09337942c1a530ded4fd55c72682cb5ae75"}
{"level":"debug","ts":"2026-07-03T14:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a03f2d5a297a92ae29e7f791f3c6a09337942c1a530ded4fd55c72682cb5ae75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:51:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:51:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a03f2d5a297a92ae29e7f791f3c6a09337942c1a530ded4fd55c72682cb5ae75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a03f2d5a297a92ae29e7f791f3c6a09337942c1a530ded4fd55c72682cb5ae75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09a33e80193b4eafc24b356a8f7c6e15d8867504e636945c6a0f948e3c42ed6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:51:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:51:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09a33e80193b4eafc24b356a8f7c6e15d8867504e636945c6a0f948e3c42ed6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a03f2d5a297a92ae29e7f791f3c6a09337942c1a530ded4fd55c72682cb5ae75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09a33e80193b4eafc24b356a8f7c6e15d8867504e636945c6a0f948e3c42ed6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09a33e80193b4eafc24b356a8f7c6e15d8867504e636945c6a0f948e3c42ed6d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09a33e80193b4eafc24b356a8f7c6e15d8867504e636945c6a0f948e3c42ed6d"}
{"level":"debug","ts":"2026-07-03T14:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09a33e80193b4eafc24b356a8f7c6e15d8867504e636945c6a0f948e3c42ed6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:51:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:51:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09a33e80193b4eafc24b356a8f7c6e15d8867504e636945c6a0f948e3c42ed6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:51:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a03f2d5a297a92ae29e7f791f3c6a09337942c1a530ded4fd55c72682cb5ae75"}
{"level":"info","ts":"2026-07-03T14:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09a33e80193b4eafc24b356a8f7c6e15d8867504e636945c6a0f948e3c42ed6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09a33e80193b4eafc24b356a8f7c6e15d8867504e636945c6a0f948e3c42ed6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:51:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:51:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09a33e80193b4eafc24b356a8f7c6e15d8867504e636945c6a0f948e3c42ed6d"}
{"level":"info","ts":"2026-07-03T14:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09a33e80193b4eafc24b356a8f7c6e15d8867504e636945c6a0f948e3c42ed6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09a33e80193b4eafc24b356a8f7c6e15d8867504e636945c6a0f948e3c42ed6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09a33e80193b4eafc24b356a8f7c6e15d8867504e636945c6a0f948e3c42ed6d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09a33e80193b4eafc24b356a8f7c6e15d8867504e636945c6a0f948e3c42ed6d"}
{"level":"debug","ts":"2026-07-03T14:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09a33e80193b4eafc24b356a8f7c6e15d8867504e636945c6a0f948e3c42ed6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e55e0ad676d4137b6c4d37f2df567184e7d43c4b5d8d086c0b8a06aee7fb9bbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09a33e80193b4eafc24b356a8f7c6e15d8867504e636945c6a0f948e3c42ed6d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09a33e80193b4eafc24b356a8f7c6e15d8867504e636945c6a0f948e3c42ed6d"}
{"level":"info","ts":"2026-07-03T14:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e55e0ad676d4137b6c4d37f2df567184e7d43c4b5d8d086c0b8a06aee7fb9bbb"}
{"level":"debug","ts":"2026-07-03T14:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f0dc216203bb5aa63cb5075ac947907ca782506a8810c14d3933948c4fd6106","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:51:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:51:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f0dc216203bb5aa63cb5075ac947907ca782506a8810c14d3933948c4fd6106","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f0dc216203bb5aa63cb5075ac947907ca782506a8810c14d3933948c4fd6106","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f0dc216203bb5aa63cb5075ac947907ca782506a8810c14d3933948c4fd6106","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f0dc216203bb5aa63cb5075ac947907ca782506a8810c14d3933948c4fd6106"}
{"level":"debug","ts":"2026-07-03T14:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09a33e80193b4eafc24b356a8f7c6e15d8867504e636945c6a0f948e3c42ed6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:51:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:51:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09a33e80193b4eafc24b356a8f7c6e15d8867504e636945c6a0f948e3c42ed6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09a33e80193b4eafc24b356a8f7c6e15d8867504e636945c6a0f948e3c42ed6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f0dc216203bb5aa63cb5075ac947907ca782506a8810c14d3933948c4fd6106","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09a33e80193b4eafc24b356a8f7c6e15d8867504e636945c6a0f948e3c42ed6d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f0dc216203bb5aa63cb5075ac947907ca782506a8810c14d3933948c4fd6106"}
{"level":"info","ts":"2026-07-03T14:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09a33e80193b4eafc24b356a8f7c6e15d8867504e636945c6a0f948e3c42ed6d"}
{"level":"debug","ts":"2026-07-03T14:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f0dc216203bb5aa63cb5075ac947907ca782506a8810c14d3933948c4fd6106","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:51:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:51:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f0dc216203bb5aa63cb5075ac947907ca782506a8810c14d3933948c4fd6106"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f0dc216203bb5aa63cb5075ac947907ca782506a8810c14d3933948c4fd6106","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f0dc216203bb5aa63cb5075ac947907ca782506a8810c14d3933948c4fd6106","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:51:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:51:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f0dc216203bb5aa63cb5075ac947907ca782506a8810c14d3933948c4fd6106","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff7220c07af00b45f04a7b074a7374bc77b0bc63d4dd0c41eff4220534d288dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f0dc216203bb5aa63cb5075ac947907ca782506a8810c14d3933948c4fd6106","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f0dc216203bb5aa63cb5075ac947907ca782506a8810c14d3933948c4fd6106","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1111181e5388815f5618ccc1bbb67ae9343ad40ff34d1fe98d081a03101265c9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f0dc216203bb5aa63cb5075ac947907ca782506a8810c14d3933948c4fd6106"}
{"level":"debug","ts":"2026-07-03T14:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f0dc216203bb5aa63cb5075ac947907ca782506a8810c14d3933948c4fd6106","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:51:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:51:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f0dc216203bb5aa63cb5075ac947907ca782506a8810c14d3933948c4fd6106"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff7220c07af00b45f04a7b074a7374bc77b0bc63d4dd0c41eff4220534d288dc"}
{"level":"info","ts":"2026-07-03T14:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f0dc216203bb5aa63cb5075ac947907ca782506a8810c14d3933948c4fd6106","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f0dc216203bb5aa63cb5075ac947907ca782506a8810c14d3933948c4fd6106","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1111181e5388815f5618ccc1bbb67ae9343ad40ff34d1fe98d081a03101265c9"}
{"level":"info","ts":"2026-07-03T14:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f0dc216203bb5aa63cb5075ac947907ca782506a8810c14d3933948c4fd6106"}
{"level":"debug","ts":"2026-07-03T14:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a6c6977c4aa801b9ec8ea10a4449e3ccd5d519629d44a64672bdc9751b4df20","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf920e91c800153d40671630fd84020db5c931eea56c2647b7b902b8cf70ef5c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a6c6977c4aa801b9ec8ea10a4449e3ccd5d519629d44a64672bdc9751b4df20"}
{"level":"debug","ts":"2026-07-03T14:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f8bcdd5abc19efbf1a5e9b125b0b916a29a717151ab13bbf5c93659770479a4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf920e91c800153d40671630fd84020db5c931eea56c2647b7b902b8cf70ef5c"}
{"level":"debug","ts":"2026-07-03T14:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"164de7e5b10d622e5049f879016f7129b947d1809afbabc60d153426b075b1c4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f8bcdd5abc19efbf1a5e9b125b0b916a29a717151ab13bbf5c93659770479a4"}
{"level":"debug","ts":"2026-07-03T14:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9545e594ed9846cc3b0689ffedc6141a03250a86dd116816433de70c1a39bf6e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/164de7e5b10d622e5049f879016f7129b947d1809afbabc60d153426b075b1c4"}
{"level":"debug","ts":"2026-07-03T14:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3e0a3c030ebc758303a2b420a9f8203cbedf74e1f2926073ab9b661fb62ddcb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9545e594ed9846cc3b0689ffedc6141a03250a86dd116816433de70c1a39bf6e"}
{"level":"debug","ts":"2026-07-03T14:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72fa94488914449a91242ee66b39aefb8fc61ec53ad224fa7af511146678f878","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3e0a3c030ebc758303a2b420a9f8203cbedf74e1f2926073ab9b661fb62ddcb"}
{"level":"debug","ts":"2026-07-03T14:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47ea1b68239c4e000cf8493b019a8c3a377943b4a519dd23a1dd32895ed2b062","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72fa94488914449a91242ee66b39aefb8fc61ec53ad224fa7af511146678f878"}
{"level":"info","ts":"2026-07-03T14:51:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47ea1b68239c4e000cf8493b019a8c3a377943b4a519dd23a1dd32895ed2b062"}
{"level":"info","ts":"2026-07-03T14:51:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"14f7e91b-2372-41ca-b297-3a459488c697","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:42830","PortSpecifier":{"PortValue":42830}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"14f7e91b-2372-41ca-b297-3a459488c697","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6ebb6a.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T14:51:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"14f7e91b-2372-41ca-b297-3a459488c697","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:42830","PortSpecifier":{"PortValue":42830}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783090307,"nanos":379809793},"http":{"id":"14f7e91b-2372-41ca-b297-3a459488c697","method":"POST","headers":{":authority":"e2e-shared-a-6ebb6a.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:51:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"14f7e91b-2372-41ca-b297-3a459488c697","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T14:51:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"14f7e91b-2372-41ca-b297-3a459488c697","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1855d0c8-d07c-417e-9b3f-a12b5b00145c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=27a9bfa3-ed3c-4129-8f90-1c3d2b27fe8d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/af9f436983f9"]}}
{"level":"debug","ts":"2026-07-03T14:51:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"14f7e91b-2372-41ca-b297-3a459488c697","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/af9f436983f9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=27a9bfa3-ed3c-4129-8f90-1c3d2b27fe8d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1855d0c8-d07c-417e-9b3f-a12b5b00145c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1111181e5388815f5618ccc1bbb67ae9343ad40ff34d1fe98d081a03101265c9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6ebb6a.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:51:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"14f7e91b-2372-41ca-b297-3a459488c697","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:51:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"14f7e91b-2372-41ca-b297-3a459488c697","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:51:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"14f7e91b-2372-41ca-b297-3a459488c697","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6ebb6a/sub-test-model-6ebb6a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:51:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"14f7e91b-2372-41ca-b297-3a459488c697","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T14:51:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"14f7e91b-2372-41ca-b297-3a459488c697","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T14:51:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"14f7e91b-2372-41ca-b297-3a459488c697","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-03T14:51:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"14f7e91b-2372-41ca-b297-3a459488c697","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T14:51:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"14f7e91b-2372-41ca-b297-3a459488c697","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T14:51:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"09c015f6-5582-498d-b771-36fe5050952e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:60986","PortSpecifier":{"PortValue":60986}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"09c015f6-5582-498d-b771-36fe5050952e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1dd877.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T14:51:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"09c015f6-5582-498d-b771-36fe5050952e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:60986","PortSpecifier":{"PortValue":60986}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783090307,"nanos":420802399},"http":{"id":"09c015f6-5582-498d-b771-36fe5050952e","method":"POST","headers":{":authority":"e2e-shared-b-1dd877.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:51:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"09c015f6-5582-498d-b771-36fe5050952e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T14:51:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"09c015f6-5582-498d-b771-36fe5050952e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1855d0c8-d07c-417e-9b3f-a12b5b00145c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=27a9bfa3-ed3c-4129-8f90-1c3d2b27fe8d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/af9f436983f9"]}}
{"level":"debug","ts":"2026-07-03T14:51:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"09c015f6-5582-498d-b771-36fe5050952e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/af9f436983f9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=27a9bfa3-ed3c-4129-8f90-1c3d2b27fe8d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1855d0c8-d07c-417e-9b3f-a12b5b00145c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"72fa94488914449a91242ee66b39aefb8fc61ec53ad224fa7af511146678f878"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1dd877.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:51:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09c015f6-5582-498d-b771-36fe5050952e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:51:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09c015f6-5582-498d-b771-36fe5050952e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:51:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09c015f6-5582-498d-b771-36fe5050952e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1dd877/sub-test-model-1dd877\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:51:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"09c015f6-5582-498d-b771-36fe5050952e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T14:51:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"09c015f6-5582-498d-b771-36fe5050952e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T14:51:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"09c015f6-5582-498d-b771-36fe5050952e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T14:51:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"09c015f6-5582-498d-b771-36fe5050952e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T14:51:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"09c015f6-5582-498d-b771-36fe5050952e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T14:51:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fe9014e7-a3cf-4e76-9ebd-61fe9502851b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:42836","PortSpecifier":{"PortValue":42836}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fe9014e7-a3cf-4e76-9ebd-61fe9502851b","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-6ebb6a.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T14:51:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fe9014e7-a3cf-4e76-9ebd-61fe9502851b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:42836","PortSpecifier":{"PortValue":42836}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783090307,"nanos":462589644},"http":{"id":"fe9014e7-a3cf-4e76-9ebd-61fe9502851b","method":"GET","headers":{":authority":"e2e-shared-a-6ebb6a.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:51:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fe9014e7-a3cf-4e76-9ebd-61fe9502851b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-pjxuKwAVEYHwsWdB_ugg3fahJuE2Eg7emWR3LK2UGSoIjsqcRdAd3Zlkm1dU"}
{"level":"debug","ts":"2026-07-03T14:51:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fe9014e7-a3cf-4e76-9ebd-61fe9502851b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6ebb6a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-pjxuKwAVEYHwsWdB_ugg3fahJuE2Eg7emWR3LK2UGSoIjsqcRdAd3Zlkm1dU\"}"}
{"level":"debug","ts":"2026-07-03T14:51:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fe9014e7-a3cf-4e76-9ebd-61fe9502851b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6ebb6a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"57f1a771-4e89-44d2-aeb5-a730ac17239d","keyName":"e2e-sub-iso-854ea7","subscription":"e2e-a-only-57f6df","tenant":"e2e-shared-a-6ebb6a","userId":"57f1a771-4e89-44d2-aeb5-a730ac17239d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-03T14:51:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fe9014e7-a3cf-4e76-9ebd-61fe9502851b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:51:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe9014e7-a3cf-4e76-9ebd-61fe9502851b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:51:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe9014e7-a3cf-4e76-9ebd-61fe9502851b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:51:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe9014e7-a3cf-4e76-9ebd-61fe9502851b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6ebb6a/sub-test-model-6ebb6a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:51:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fe9014e7-a3cf-4e76-9ebd-61fe9502851b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T14:51:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fe9014e7-a3cf-4e76-9ebd-61fe9502851b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T14:51:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fe9014e7-a3cf-4e76-9ebd-61fe9502851b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-03T14:51:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fe9014e7-a3cf-4e76-9ebd-61fe9502851b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-57f6df"}
{"level":"info","ts":"2026-07-03T14:51:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fe9014e7-a3cf-4e76-9ebd-61fe9502851b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T14:51:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fe9014e7-a3cf-4e76-9ebd-61fe9502851b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T14:51:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2e996c22-adb1-49da-9719-f7bea9f226c0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:60996","PortSpecifier":{"PortValue":60996}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2e996c22-adb1-49da-9719-f7bea9f226c0","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-1dd877.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T14:51:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2e996c22-adb1-49da-9719-f7bea9f226c0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:60996","PortSpecifier":{"PortValue":60996}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783090307,"nanos":504530476},"http":{"id":"2e996c22-adb1-49da-9719-f7bea9f226c0","method":"GET","headers":{":authority":"e2e-shared-b-1dd877.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:51:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2e996c22-adb1-49da-9719-f7bea9f226c0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-O9WHBfNCOFSzLx0h_6Yk3nonIvtkG5m8qC2s1QpxIZN2dkIDu7qehPqzsNGr"}
{"level":"debug","ts":"2026-07-03T14:51:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2e996c22-adb1-49da-9719-f7bea9f226c0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-1dd877.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-O9WHBfNCOFSzLx0h_6Yk3nonIvtkG5m8qC2s1QpxIZN2dkIDu7qehPqzsNGr\"}"}
{"level":"debug","ts":"2026-07-03T14:51:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2e996c22-adb1-49da-9719-f7bea9f226c0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-1dd877.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5530649e-0c7c-444b-a91b-b0b403745d98","keyName":"e2e-sub-iso-4302ab","subscription":"e2e-b-only-57f6df","tenant":"e2e-shared-b-1dd877","userId":"5530649e-0c7c-444b-a91b-b0b403745d98","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-03T14:51:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2e996c22-adb1-49da-9719-f7bea9f226c0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:51:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e996c22-adb1-49da-9719-f7bea9f226c0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:51:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e996c22-adb1-49da-9719-f7bea9f226c0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:51:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e996c22-adb1-49da-9719-f7bea9f226c0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1dd877/sub-test-model-1dd877\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:51:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e996c22-adb1-49da-9719-f7bea9f226c0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T14:51:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e996c22-adb1-49da-9719-f7bea9f226c0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-57f6df"}
{"level":"debug","ts":"2026-07-03T14:51:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e996c22-adb1-49da-9719-f7bea9f226c0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T14:51:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2e996c22-adb1-49da-9719-f7bea9f226c0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-03T14:51:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2e996c22-adb1-49da-9719-f7bea9f226c0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T14:51:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2e996c22-adb1-49da-9719-f7bea9f226c0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T14:51:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aa2db69a-1c79-4cbf-afe0-61ac675d12dc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:59498","PortSpecifier":{"PortValue":59498}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"aa2db69a-1c79-4cbf-afe0-61ac675d12dc","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6ebb6a.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T14:51:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aa2db69a-1c79-4cbf-afe0-61ac675d12dc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:59498","PortSpecifier":{"PortValue":59498}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783090317,"nanos":568491906},"http":{"id":"aa2db69a-1c79-4cbf-afe0-61ac675d12dc","method":"POST","headers":{":authority":"e2e-shared-a-6ebb6a.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:51:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"aa2db69a-1c79-4cbf-afe0-61ac675d12dc","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T14:51:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"aa2db69a-1c79-4cbf-afe0-61ac675d12dc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1855d0c8-d07c-417e-9b3f-a12b5b00145c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=27a9bfa3-ed3c-4129-8f90-1c3d2b27fe8d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/af9f436983f9"]}}
{"level":"debug","ts":"2026-07-03T14:51:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"aa2db69a-1c79-4cbf-afe0-61ac675d12dc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/af9f436983f9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=27a9bfa3-ed3c-4129-8f90-1c3d2b27fe8d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1855d0c8-d07c-417e-9b3f-a12b5b00145c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1111181e5388815f5618ccc1bbb67ae9343ad40ff34d1fe98d081a03101265c9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6ebb6a.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:51:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aa2db69a-1c79-4cbf-afe0-61ac675d12dc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:51:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aa2db69a-1c79-4cbf-afe0-61ac675d12dc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:51:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aa2db69a-1c79-4cbf-afe0-61ac675d12dc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6ebb6a/sub-test-model-6ebb6a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:51:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"aa2db69a-1c79-4cbf-afe0-61ac675d12dc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T14:51:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aa2db69a-1c79-4cbf-afe0-61ac675d12dc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T14:51:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aa2db69a-1c79-4cbf-afe0-61ac675d12dc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-03T14:51:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aa2db69a-1c79-4cbf-afe0-61ac675d12dc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T14:51:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aa2db69a-1c79-4cbf-afe0-61ac675d12dc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T14:51:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0d9dc763-e2cc-40ec-a44f-b65501c08f09","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:35402","PortSpecifier":{"PortValue":35402}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0d9dc763-e2cc-40ec-a44f-b65501c08f09","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1dd877.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T14:51:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0d9dc763-e2cc-40ec-a44f-b65501c08f09","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:35402","PortSpecifier":{"PortValue":35402}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783090317,"nanos":601971261},"http":{"id":"0d9dc763-e2cc-40ec-a44f-b65501c08f09","method":"POST","headers":{":authority":"e2e-shared-b-1dd877.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:51:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0d9dc763-e2cc-40ec-a44f-b65501c08f09","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T14:51:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0d9dc763-e2cc-40ec-a44f-b65501c08f09","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1855d0c8-d07c-417e-9b3f-a12b5b00145c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=27a9bfa3-ed3c-4129-8f90-1c3d2b27fe8d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/af9f436983f9"]}}
{"level":"debug","ts":"2026-07-03T14:51:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0d9dc763-e2cc-40ec-a44f-b65501c08f09","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/af9f436983f9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=27a9bfa3-ed3c-4129-8f90-1c3d2b27fe8d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1855d0c8-d07c-417e-9b3f-a12b5b00145c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"72fa94488914449a91242ee66b39aefb8fc61ec53ad224fa7af511146678f878"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1dd877.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:51:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d9dc763-e2cc-40ec-a44f-b65501c08f09","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:51:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d9dc763-e2cc-40ec-a44f-b65501c08f09","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:51:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d9dc763-e2cc-40ec-a44f-b65501c08f09","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1dd877/sub-test-model-1dd877\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:51:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0d9dc763-e2cc-40ec-a44f-b65501c08f09","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T14:51:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d9dc763-e2cc-40ec-a44f-b65501c08f09","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T14:51:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d9dc763-e2cc-40ec-a44f-b65501c08f09","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-03T14:51:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0d9dc763-e2cc-40ec-a44f-b65501c08f09","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T14:51:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0d9dc763-e2cc-40ec-a44f-b65501c08f09","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T14:51:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"03040834-dd6a-4a2a-b965-a70ac0ae9c40","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:59500","PortSpecifier":{"PortValue":59500}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"03040834-dd6a-4a2a-b965-a70ac0ae9c40","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-6ebb6a.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T14:51:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"03040834-dd6a-4a2a-b965-a70ac0ae9c40","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:59500","PortSpecifier":{"PortValue":59500}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783090317,"nanos":636161371},"http":{"id":"03040834-dd6a-4a2a-b965-a70ac0ae9c40","method":"POST","headers":{":authority":"e2e-shared-a-6ebb6a.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:51:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"03040834-dd6a-4a2a-b965-a70ac0ae9c40","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1WbtQYTfYBiEtJJg0_feqVYVk5GMDI4DDp6tJPB6pIRDigJ2JYQqhxa9MDQGv"}
{"level":"debug","ts":"2026-07-03T14:51:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"03040834-dd6a-4a2a-b965-a70ac0ae9c40","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6ebb6a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1WbtQYTfYBiEtJJg0_feqVYVk5GMDI4DDp6tJPB6pIRDigJ2JYQqhxa9MDQGv\"}"}
{"level":"debug","ts":"2026-07-03T14:51:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"03040834-dd6a-4a2a-b965-a70ac0ae9c40","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6ebb6a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b1979121-d43c-4937-8966-af8fd4cc86a6","keyName":"e2e-sub-iso-bd2b0a","subscription":"e2e-shared-sub-d7dc57","tenant":"e2e-shared-a-6ebb6a","userId":"b1979121-d43c-4937-8966-af8fd4cc86a6","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-03T14:51:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"03040834-dd6a-4a2a-b965-a70ac0ae9c40","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:51:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03040834-dd6a-4a2a-b965-a70ac0ae9c40","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:51:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03040834-dd6a-4a2a-b965-a70ac0ae9c40","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:51:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03040834-dd6a-4a2a-b965-a70ac0ae9c40","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6ebb6a/sub-test-model-6ebb6a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:51:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03040834-dd6a-4a2a-b965-a70ac0ae9c40","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T14:51:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03040834-dd6a-4a2a-b965-a70ac0ae9c40","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T14:51:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"03040834-dd6a-4a2a-b965-a70ac0ae9c40","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-03T14:51:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03040834-dd6a-4a2a-b965-a70ac0ae9c40","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-d7dc57"}
{"level":"info","ts":"2026-07-03T14:51:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"03040834-dd6a-4a2a-b965-a70ac0ae9c40","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T14:51:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"03040834-dd6a-4a2a-b965-a70ac0ae9c40","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T14:51:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b6b3aeee-6161-40cd-b853-3949cda9461a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:35408","PortSpecifier":{"PortValue":35408}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b6b3aeee-6161-40cd-b853-3949cda9461a","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-1dd877.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T14:51:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b6b3aeee-6161-40cd-b853-3949cda9461a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:35408","PortSpecifier":{"PortValue":35408}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783090317,"nanos":666795436},"http":{"id":"b6b3aeee-6161-40cd-b853-3949cda9461a","method":"POST","headers":{":authority":"e2e-shared-b-1dd877.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:51:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b6b3aeee-6161-40cd-b853-3949cda9461a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1dqtU0tdVGe3hbGOz_Cc9OoShvJRQCAZJMMozGPG9qko1gxwJJDVdDijOEV1X"}
{"level":"debug","ts":"2026-07-03T14:51:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b6b3aeee-6161-40cd-b853-3949cda9461a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-1dd877.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1dqtU0tdVGe3hbGOz_Cc9OoShvJRQCAZJMMozGPG9qko1gxwJJDVdDijOEV1X\"}"}
{"level":"debug","ts":"2026-07-03T14:51:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b6b3aeee-6161-40cd-b853-3949cda9461a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-1dd877.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ef31fd96-3913-4e25-9792-a2be0a212f74","keyName":"e2e-sub-iso-1017d5","subscription":"e2e-shared-sub-d7dc57","tenant":"e2e-shared-b-1dd877","userId":"ef31fd96-3913-4e25-9792-a2be0a212f74","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-03T14:51:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b6b3aeee-6161-40cd-b853-3949cda9461a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:51:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b6b3aeee-6161-40cd-b853-3949cda9461a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:51:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b6b3aeee-6161-40cd-b853-3949cda9461a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:51:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b6b3aeee-6161-40cd-b853-3949cda9461a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1dd877/sub-test-model-1dd877\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:51:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b6b3aeee-6161-40cd-b853-3949cda9461a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T14:51:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b6b3aeee-6161-40cd-b853-3949cda9461a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T14:51:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b6b3aeee-6161-40cd-b853-3949cda9461a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-d7dc57"}
{"level":"debug","ts":"2026-07-03T14:51:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b6b3aeee-6161-40cd-b853-3949cda9461a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-03T14:51:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b6b3aeee-6161-40cd-b853-3949cda9461a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T14:51:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b6b3aeee-6161-40cd-b853-3949cda9461a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T14:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e55e0ad676d4137b6c4d37f2df567184e7d43c4b5d8d086c0b8a06aee7fb9bbb"}
{"level":"info","ts":"2026-07-03T14:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f3e0a3c030ebc758303a2b420a9f8203cbedf74e1f2926073ab9b661fb62ddcb"}
{"level":"info","ts":"2026-07-03T14:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/09a33e80193b4eafc24b356a8f7c6e15d8867504e636945c6a0f948e3c42ed6d"}
{"level":"info","ts":"2026-07-03T14:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/084658f95c2f26768d7f8780468c82e6424c203129f01c460cea51338c69f596"}
{"level":"info","ts":"2026-07-03T14:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9545e594ed9846cc3b0689ffedc6141a03250a86dd116816433de70c1a39bf6e"}
{"level":"info","ts":"2026-07-03T14:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0a6c6977c4aa801b9ec8ea10a4449e3ccd5d519629d44a64672bdc9751b4df20"}
{"level":"info","ts":"2026-07-03T14:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ff7220c07af00b45f04a7b074a7374bc77b0bc63d4dd0c41eff4220534d288dc"}
{"level":"info","ts":"2026-07-03T14:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/47ea1b68239c4e000cf8493b019a8c3a377943b4a519dd23a1dd32895ed2b062"}
{"level":"info","ts":"2026-07-03T14:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/285d67bc144b52d601624ca5017bc54fc6b311a1470e8d567f85c2f57cc7bd94"}
{"level":"info","ts":"2026-07-03T14:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/164de7e5b10d622e5049f879016f7129b947d1809afbabc60d153426b075b1c4"}
{"level":"info","ts":"2026-07-03T14:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5f0dc216203bb5aa63cb5075ac947907ca782506a8810c14d3933948c4fd6106"}
{"level":"info","ts":"2026-07-03T14:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a03f2d5a297a92ae29e7f791f3c6a09337942c1a530ded4fd55c72682cb5ae75"}
{"level":"info","ts":"2026-07-03T14:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cf920e91c800153d40671630fd84020db5c931eea56c2647b7b902b8cf70ef5c"}
{"level":"info","ts":"2026-07-03T14:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c89602d96d8d6eb19f2252b9878031e7466e932878e3ef9edcc07b97dbf1a46c"}
{"level":"info","ts":"2026-07-03T14:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4f8bcdd5abc19efbf1a5e9b125b0b916a29a717151ab13bbf5c93659770479a4"}
{"level":"info","ts":"2026-07-03T14:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9ef6c05265c9669bca771de8d1002654b0f281da76d6ffd9151ae3e19bfe791e"}
{"level":"debug","ts":"2026-07-03T14:52:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"638a593d4d8d18aa0843e1d8ad2956d8560651a06746e98426eea7ce5850f322","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:52:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:52:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"638a593d4d8d18aa0843e1d8ad2956d8560651a06746e98426eea7ce5850f322","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"638a593d4d8d18aa0843e1d8ad2956d8560651a06746e98426eea7ce5850f322","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:52:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/638a593d4d8d18aa0843e1d8ad2956d8560651a06746e98426eea7ce5850f322"}
{"level":"debug","ts":"2026-07-03T14:52:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"638a593d4d8d18aa0843e1d8ad2956d8560651a06746e98426eea7ce5850f322","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:52:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/638a593d4d8d18aa0843e1d8ad2956d8560651a06746e98426eea7ce5850f322"}
{"level":"debug","ts":"2026-07-03T14:52:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"638a593d4d8d18aa0843e1d8ad2956d8560651a06746e98426eea7ce5850f322","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:52:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:52:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["638a593d4d8d18aa0843e1d8ad2956d8560651a06746e98426eea7ce5850f322"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"638a593d4d8d18aa0843e1d8ad2956d8560651a06746e98426eea7ce5850f322","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"638a593d4d8d18aa0843e1d8ad2956d8560651a06746e98426eea7ce5850f322","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:52:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/638a593d4d8d18aa0843e1d8ad2956d8560651a06746e98426eea7ce5850f322"}
{"level":"debug","ts":"2026-07-03T14:52:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"367951b7628aec3fc20ea3e0240896d20f43ca589eb53e75479feda3f8291497","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:52:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:52:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"367951b7628aec3fc20ea3e0240896d20f43ca589eb53e75479feda3f8291497","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"367951b7628aec3fc20ea3e0240896d20f43ca589eb53e75479feda3f8291497","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:52:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/367951b7628aec3fc20ea3e0240896d20f43ca589eb53e75479feda3f8291497"}
{"level":"debug","ts":"2026-07-03T14:52:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"367951b7628aec3fc20ea3e0240896d20f43ca589eb53e75479feda3f8291497","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:52:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/367951b7628aec3fc20ea3e0240896d20f43ca589eb53e75479feda3f8291497"}
{"level":"debug","ts":"2026-07-03T14:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"367951b7628aec3fc20ea3e0240896d20f43ca589eb53e75479feda3f8291497","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:52:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:52:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["367951b7628aec3fc20ea3e0240896d20f43ca589eb53e75479feda3f8291497"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"367951b7628aec3fc20ea3e0240896d20f43ca589eb53e75479feda3f8291497","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"367951b7628aec3fc20ea3e0240896d20f43ca589eb53e75479feda3f8291497","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/367951b7628aec3fc20ea3e0240896d20f43ca589eb53e75479feda3f8291497"}
{"level":"debug","ts":"2026-07-03T14:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38e9929c19344e9b7323bef9cb8591190c51680ef455239aad01c1dd0d6102ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:52:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:52:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38e9929c19344e9b7323bef9cb8591190c51680ef455239aad01c1dd0d6102ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38e9929c19344e9b7323bef9cb8591190c51680ef455239aad01c1dd0d6102ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38e9929c19344e9b7323bef9cb8591190c51680ef455239aad01c1dd0d6102ea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38e9929c19344e9b7323bef9cb8591190c51680ef455239aad01c1dd0d6102ea"}
{"level":"debug","ts":"2026-07-03T14:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38e9929c19344e9b7323bef9cb8591190c51680ef455239aad01c1dd0d6102ea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38e9929c19344e9b7323bef9cb8591190c51680ef455239aad01c1dd0d6102ea"}
{"level":"debug","ts":"2026-07-03T14:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38e9929c19344e9b7323bef9cb8591190c51680ef455239aad01c1dd0d6102ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:52:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:52:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["38e9929c19344e9b7323bef9cb8591190c51680ef455239aad01c1dd0d6102ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38e9929c19344e9b7323bef9cb8591190c51680ef455239aad01c1dd0d6102ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38e9929c19344e9b7323bef9cb8591190c51680ef455239aad01c1dd0d6102ea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38e9929c19344e9b7323bef9cb8591190c51680ef455239aad01c1dd0d6102ea"}
{"level":"debug","ts":"2026-07-03T14:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3510ee3ad77b0ce57bc5b07b4e0cb3a9f1bc309636ce17c5aad1736e486200e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:52:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:52:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3510ee3ad77b0ce57bc5b07b4e0cb3a9f1bc309636ce17c5aad1736e486200e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3510ee3ad77b0ce57bc5b07b4e0cb3a9f1bc309636ce17c5aad1736e486200e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:52:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:52:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3510ee3ad77b0ce57bc5b07b4e0cb3a9f1bc309636ce17c5aad1736e486200e6"}
{"level":"info","ts":"2026-07-03T14:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3510ee3ad77b0ce57bc5b07b4e0cb3a9f1bc309636ce17c5aad1736e486200e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3510ee3ad77b0ce57bc5b07b4e0cb3a9f1bc309636ce17c5aad1736e486200e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:52:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:52:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-03T14:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3510ee3ad77b0ce57bc5b07b4e0cb3a9f1bc309636ce17c5aad1736e486200e6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3510ee3ad77b0ce57bc5b07b4e0cb3a9f1bc309636ce17c5aad1736e486200e6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-03T14:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3510ee3ad77b0ce57bc5b07b4e0cb3a9f1bc309636ce17c5aad1736e486200e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3510ee3ad77b0ce57bc5b07b4e0cb3a9f1bc309636ce17c5aad1736e486200e6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3510ee3ad77b0ce57bc5b07b4e0cb3a9f1bc309636ce17c5aad1736e486200e6"}
{"level":"info","ts":"2026-07-03T14:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3510ee3ad77b0ce57bc5b07b4e0cb3a9f1bc309636ce17c5aad1736e486200e6"}
{"level":"debug","ts":"2026-07-03T14:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7dd0b0bcc90e1ed3f9abdf28f381ef5d746765ecc242096db53e80d7b6b42afd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:52:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:52:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7dd0b0bcc90e1ed3f9abdf28f381ef5d746765ecc242096db53e80d7b6b42afd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3510ee3ad77b0ce57bc5b07b4e0cb3a9f1bc309636ce17c5aad1736e486200e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:52:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:52:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3510ee3ad77b0ce57bc5b07b4e0cb3a9f1bc309636ce17c5aad1736e486200e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7dd0b0bcc90e1ed3f9abdf28f381ef5d746765ecc242096db53e80d7b6b42afd"}
{"level":"info","ts":"2026-07-03T14:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3510ee3ad77b0ce57bc5b07b4e0cb3a9f1bc309636ce17c5aad1736e486200e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7dd0b0bcc90e1ed3f9abdf28f381ef5d746765ecc242096db53e80d7b6b42afd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3510ee3ad77b0ce57bc5b07b4e0cb3a9f1bc309636ce17c5aad1736e486200e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7dd0b0bcc90e1ed3f9abdf28f381ef5d746765ecc242096db53e80d7b6b42afd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7dd0b0bcc90e1ed3f9abdf28f381ef5d746765ecc242096db53e80d7b6b42afd"}
{"level":"debug","ts":"2026-07-03T14:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7dd0b0bcc90e1ed3f9abdf28f381ef5d746765ecc242096db53e80d7b6b42afd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:52:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:52:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7dd0b0bcc90e1ed3f9abdf28f381ef5d746765ecc242096db53e80d7b6b42afd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3510ee3ad77b0ce57bc5b07b4e0cb3a9f1bc309636ce17c5aad1736e486200e6"}
{"level":"info","ts":"2026-07-03T14:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7dd0b0bcc90e1ed3f9abdf28f381ef5d746765ecc242096db53e80d7b6b42afd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7dd0b0bcc90e1ed3f9abdf28f381ef5d746765ecc242096db53e80d7b6b42afd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:52:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:52:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7dd0b0bcc90e1ed3f9abdf28f381ef5d746765ecc242096db53e80d7b6b42afd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7dd0b0bcc90e1ed3f9abdf28f381ef5d746765ecc242096db53e80d7b6b42afd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7dd0b0bcc90e1ed3f9abdf28f381ef5d746765ecc242096db53e80d7b6b42afd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7dd0b0bcc90e1ed3f9abdf28f381ef5d746765ecc242096db53e80d7b6b42afd"}
{"level":"debug","ts":"2026-07-03T14:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba7b45676f26150acbb1921543ad6f5970e3d4c083702f0cc623caa999b7ba53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:52:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:52:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba7b45676f26150acbb1921543ad6f5970e3d4c083702f0cc623caa999b7ba53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7dd0b0bcc90e1ed3f9abdf28f381ef5d746765ecc242096db53e80d7b6b42afd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba7b45676f26150acbb1921543ad6f5970e3d4c083702f0cc623caa999b7ba53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba7b45676f26150acbb1921543ad6f5970e3d4c083702f0cc623caa999b7ba53","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7dd0b0bcc90e1ed3f9abdf28f381ef5d746765ecc242096db53e80d7b6b42afd"}
{"level":"debug","ts":"2026-07-03T14:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba7b45676f26150acbb1921543ad6f5970e3d4c083702f0cc623caa999b7ba53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:52:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:52:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba7b45676f26150acbb1921543ad6f5970e3d4c083702f0cc623caa999b7ba53"}
{"level":"info","ts":"2026-07-03T14:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba7b45676f26150acbb1921543ad6f5970e3d4c083702f0cc623caa999b7ba53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7dd0b0bcc90e1ed3f9abdf28f381ef5d746765ecc242096db53e80d7b6b42afd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:52:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:52:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7dd0b0bcc90e1ed3f9abdf28f381ef5d746765ecc242096db53e80d7b6b42afd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7dd0b0bcc90e1ed3f9abdf28f381ef5d746765ecc242096db53e80d7b6b42afd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba7b45676f26150acbb1921543ad6f5970e3d4c083702f0cc623caa999b7ba53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7dd0b0bcc90e1ed3f9abdf28f381ef5d746765ecc242096db53e80d7b6b42afd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba7b45676f26150acbb1921543ad6f5970e3d4c083702f0cc623caa999b7ba53"}
{"level":"debug","ts":"2026-07-03T14:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba7b45676f26150acbb1921543ad6f5970e3d4c083702f0cc623caa999b7ba53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:52:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:52:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba7b45676f26150acbb1921543ad6f5970e3d4c083702f0cc623caa999b7ba53"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7dd0b0bcc90e1ed3f9abdf28f381ef5d746765ecc242096db53e80d7b6b42afd"}
{"level":"info","ts":"2026-07-03T14:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba7b45676f26150acbb1921543ad6f5970e3d4c083702f0cc623caa999b7ba53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f5a7c0b455b757d0e91c3f2efddfaf7a3ab2c5edec7105268568812e764de4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:52:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:52:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f5a7c0b455b757d0e91c3f2efddfaf7a3ab2c5edec7105268568812e764de4a"}
{"level":"info","ts":"2026-07-03T14:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f5a7c0b455b757d0e91c3f2efddfaf7a3ab2c5edec7105268568812e764de4a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba7b45676f26150acbb1921543ad6f5970e3d4c083702f0cc623caa999b7ba53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:52:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:52:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba7b45676f26150acbb1921543ad6f5970e3d4c083702f0cc623caa999b7ba53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f5a7c0b455b757d0e91c3f2efddfaf7a3ab2c5edec7105268568812e764de4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:52:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:52:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f5a7c0b455b757d0e91c3f2efddfaf7a3ab2c5edec7105268568812e764de4a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f5a7c0b455b757d0e91c3f2efddfaf7a3ab2c5edec7105268568812e764de4a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba7b45676f26150acbb1921543ad6f5970e3d4c083702f0cc623caa999b7ba53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f5a7c0b455b757d0e91c3f2efddfaf7a3ab2c5edec7105268568812e764de4a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba7b45676f26150acbb1921543ad6f5970e3d4c083702f0cc623caa999b7ba53"}
{"level":"debug","ts":"2026-07-03T14:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba7b45676f26150acbb1921543ad6f5970e3d4c083702f0cc623caa999b7ba53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:52:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:52:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba7b45676f26150acbb1921543ad6f5970e3d4c083702f0cc623caa999b7ba53"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba7b45676f26150acbb1921543ad6f5970e3d4c083702f0cc623caa999b7ba53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba7b45676f26150acbb1921543ad6f5970e3d4c083702f0cc623caa999b7ba53","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f5a7c0b455b757d0e91c3f2efddfaf7a3ab2c5edec7105268568812e764de4a"}
{"level":"info","ts":"2026-07-03T14:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba7b45676f26150acbb1921543ad6f5970e3d4c083702f0cc623caa999b7ba53"}
{"level":"debug","ts":"2026-07-03T14:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d09e65eb68b3ae71ff3565485f74f78c5d1ec9f7155c02b437837ffcc2c6bdf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:52:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:52:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d09e65eb68b3ae71ff3565485f74f78c5d1ec9f7155c02b437837ffcc2c6bdf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d09e65eb68b3ae71ff3565485f74f78c5d1ec9f7155c02b437837ffcc2c6bdf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:52:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:52:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d09e65eb68b3ae71ff3565485f74f78c5d1ec9f7155c02b437837ffcc2c6bdf"}
{"level":"info","ts":"2026-07-03T14:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d09e65eb68b3ae71ff3565485f74f78c5d1ec9f7155c02b437837ffcc2c6bdf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d09e65eb68b3ae71ff3565485f74f78c5d1ec9f7155c02b437837ffcc2c6bdf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:52:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:52:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-03T14:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1d09e65eb68b3ae71ff3565485f74f78c5d1ec9f7155c02b437837ffcc2c6bdf","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1d09e65eb68b3ae71ff3565485f74f78c5d1ec9f7155c02b437837ffcc2c6bdf\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-03T14:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d09e65eb68b3ae71ff3565485f74f78c5d1ec9f7155c02b437837ffcc2c6bdf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d09e65eb68b3ae71ff3565485f74f78c5d1ec9f7155c02b437837ffcc2c6bdf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d09e65eb68b3ae71ff3565485f74f78c5d1ec9f7155c02b437837ffcc2c6bdf"}
{"level":"info","ts":"2026-07-03T14:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d09e65eb68b3ae71ff3565485f74f78c5d1ec9f7155c02b437837ffcc2c6bdf"}
{"level":"debug","ts":"2026-07-03T14:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d09e65eb68b3ae71ff3565485f74f78c5d1ec9f7155c02b437837ffcc2c6bdf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:52:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:52:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d09e65eb68b3ae71ff3565485f74f78c5d1ec9f7155c02b437837ffcc2c6bdf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d09e65eb68b3ae71ff3565485f74f78c5d1ec9f7155c02b437837ffcc2c6bdf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d09e65eb68b3ae71ff3565485f74f78c5d1ec9f7155c02b437837ffcc2c6bdf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:52:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:52:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d09e65eb68b3ae71ff3565485f74f78c5d1ec9f7155c02b437837ffcc2c6bdf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d09e65eb68b3ae71ff3565485f74f78c5d1ec9f7155c02b437837ffcc2c6bdf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d09e65eb68b3ae71ff3565485f74f78c5d1ec9f7155c02b437837ffcc2c6bdf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:52:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d09e65eb68b3ae71ff3565485f74f78c5d1ec9f7155c02b437837ffcc2c6bdf"}
{"level":"debug","ts":"2026-07-03T14:52:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d09e65eb68b3ae71ff3565485f74f78c5d1ec9f7155c02b437837ffcc2c6bdf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:52:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d09e65eb68b3ae71ff3565485f74f78c5d1ec9f7155c02b437837ffcc2c6bdf"}
{"level":"debug","ts":"2026-07-03T14:52:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d09e65eb68b3ae71ff3565485f74f78c5d1ec9f7155c02b437837ffcc2c6bdf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:52:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:52:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d09e65eb68b3ae71ff3565485f74f78c5d1ec9f7155c02b437837ffcc2c6bdf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d09e65eb68b3ae71ff3565485f74f78c5d1ec9f7155c02b437837ffcc2c6bdf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d09e65eb68b3ae71ff3565485f74f78c5d1ec9f7155c02b437837ffcc2c6bdf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:52:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:52:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d09e65eb68b3ae71ff3565485f74f78c5d1ec9f7155c02b437837ffcc2c6bdf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d09e65eb68b3ae71ff3565485f74f78c5d1ec9f7155c02b437837ffcc2c6bdf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d09e65eb68b3ae71ff3565485f74f78c5d1ec9f7155c02b437837ffcc2c6bdf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:52:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d09e65eb68b3ae71ff3565485f74f78c5d1ec9f7155c02b437837ffcc2c6bdf"}
{"level":"debug","ts":"2026-07-03T14:52:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d09e65eb68b3ae71ff3565485f74f78c5d1ec9f7155c02b437837ffcc2c6bdf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:52:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d09e65eb68b3ae71ff3565485f74f78c5d1ec9f7155c02b437837ffcc2c6bdf"}
{"level":"debug","ts":"2026-07-03T14:52:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d09e65eb68b3ae71ff3565485f74f78c5d1ec9f7155c02b437837ffcc2c6bdf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:52:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:52:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d09e65eb68b3ae71ff3565485f74f78c5d1ec9f7155c02b437837ffcc2c6bdf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d09e65eb68b3ae71ff3565485f74f78c5d1ec9f7155c02b437837ffcc2c6bdf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d09e65eb68b3ae71ff3565485f74f78c5d1ec9f7155c02b437837ffcc2c6bdf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:52:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d09e65eb68b3ae71ff3565485f74f78c5d1ec9f7155c02b437837ffcc2c6bdf"}
{"level":"debug","ts":"2026-07-03T14:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c198d2d11832fe77d501e1e986a71beb0bdec9d1475c9fab26a3a68c0c39abda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:52:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:52:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c198d2d11832fe77d501e1e986a71beb0bdec9d1475c9fab26a3a68c0c39abda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c198d2d11832fe77d501e1e986a71beb0bdec9d1475c9fab26a3a68c0c39abda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:52:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:52:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c198d2d11832fe77d501e1e986a71beb0bdec9d1475c9fab26a3a68c0c39abda"}
{"level":"info","ts":"2026-07-03T14:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c198d2d11832fe77d501e1e986a71beb0bdec9d1475c9fab26a3a68c0c39abda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c198d2d11832fe77d501e1e986a71beb0bdec9d1475c9fab26a3a68c0c39abda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:52:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:52:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c198d2d11832fe77d501e1e986a71beb0bdec9d1475c9fab26a3a68c0c39abda"}
{"level":"error","ts":"2026-07-03T14:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c198d2d11832fe77d501e1e986a71beb0bdec9d1475c9fab26a3a68c0c39abda","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c198d2d11832fe77d501e1e986a71beb0bdec9d1475c9fab26a3a68c0c39abda\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-03T14:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c198d2d11832fe77d501e1e986a71beb0bdec9d1475c9fab26a3a68c0c39abda","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c198d2d11832fe77d501e1e986a71beb0bdec9d1475c9fab26a3a68c0c39abda"}
{"level":"debug","ts":"2026-07-03T14:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c198d2d11832fe77d501e1e986a71beb0bdec9d1475c9fab26a3a68c0c39abda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:52:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:52:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c198d2d11832fe77d501e1e986a71beb0bdec9d1475c9fab26a3a68c0c39abda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c198d2d11832fe77d501e1e986a71beb0bdec9d1475c9fab26a3a68c0c39abda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c198d2d11832fe77d501e1e986a71beb0bdec9d1475c9fab26a3a68c0c39abda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:52:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:52:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c198d2d11832fe77d501e1e986a71beb0bdec9d1475c9fab26a3a68c0c39abda"}
{"level":"info","ts":"2026-07-03T14:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c198d2d11832fe77d501e1e986a71beb0bdec9d1475c9fab26a3a68c0c39abda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c198d2d11832fe77d501e1e986a71beb0bdec9d1475c9fab26a3a68c0c39abda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c198d2d11832fe77d501e1e986a71beb0bdec9d1475c9fab26a3a68c0c39abda","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c198d2d11832fe77d501e1e986a71beb0bdec9d1475c9fab26a3a68c0c39abda"}
{"level":"debug","ts":"2026-07-03T14:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c198d2d11832fe77d501e1e986a71beb0bdec9d1475c9fab26a3a68c0c39abda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:52:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:52:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c198d2d11832fe77d501e1e986a71beb0bdec9d1475c9fab26a3a68c0c39abda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c198d2d11832fe77d501e1e986a71beb0bdec9d1475c9fab26a3a68c0c39abda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c198d2d11832fe77d501e1e986a71beb0bdec9d1475c9fab26a3a68c0c39abda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:52:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:52:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c198d2d11832fe77d501e1e986a71beb0bdec9d1475c9fab26a3a68c0c39abda","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c198d2d11832fe77d501e1e986a71beb0bdec9d1475c9fab26a3a68c0c39abda"}
{"level":"debug","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c198d2d11832fe77d501e1e986a71beb0bdec9d1475c9fab26a3a68c0c39abda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c198d2d11832fe77d501e1e986a71beb0bdec9d1475c9fab26a3a68c0c39abda","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c198d2d11832fe77d501e1e986a71beb0bdec9d1475c9fab26a3a68c0c39abda"}
{"level":"debug","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c198d2d11832fe77d501e1e986a71beb0bdec9d1475c9fab26a3a68c0c39abda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:52:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:52:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c198d2d11832fe77d501e1e986a71beb0bdec9d1475c9fab26a3a68c0c39abda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c198d2d11832fe77d501e1e986a71beb0bdec9d1475c9fab26a3a68c0c39abda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c198d2d11832fe77d501e1e986a71beb0bdec9d1475c9fab26a3a68c0c39abda","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c198d2d11832fe77d501e1e986a71beb0bdec9d1475c9fab26a3a68c0c39abda"}
{"level":"debug","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"030d7009bec719c89d11f8482f153a47d8328bd76ea59ad09ccf92375f817115","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:52:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:52:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"030d7009bec719c89d11f8482f153a47d8328bd76ea59ad09ccf92375f817115","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"030d7009bec719c89d11f8482f153a47d8328bd76ea59ad09ccf92375f817115","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"030d7009bec719c89d11f8482f153a47d8328bd76ea59ad09ccf92375f817115","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/030d7009bec719c89d11f8482f153a47d8328bd76ea59ad09ccf92375f817115"}
{"level":"debug","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"030d7009bec719c89d11f8482f153a47d8328bd76ea59ad09ccf92375f817115","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/030d7009bec719c89d11f8482f153a47d8328bd76ea59ad09ccf92375f817115"}
{"level":"debug","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"030d7009bec719c89d11f8482f153a47d8328bd76ea59ad09ccf92375f817115","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:52:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:52:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["030d7009bec719c89d11f8482f153a47d8328bd76ea59ad09ccf92375f817115"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"030d7009bec719c89d11f8482f153a47d8328bd76ea59ad09ccf92375f817115","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"030d7009bec719c89d11f8482f153a47d8328bd76ea59ad09ccf92375f817115","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:52:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:52:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"030d7009bec719c89d11f8482f153a47d8328bd76ea59ad09ccf92375f817115","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"030d7009bec719c89d11f8482f153a47d8328bd76ea59ad09ccf92375f817115","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"030d7009bec719c89d11f8482f153a47d8328bd76ea59ad09ccf92375f817115","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/030d7009bec719c89d11f8482f153a47d8328bd76ea59ad09ccf92375f817115"}
{"level":"debug","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"030d7009bec719c89d11f8482f153a47d8328bd76ea59ad09ccf92375f817115","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/030d7009bec719c89d11f8482f153a47d8328bd76ea59ad09ccf92375f817115"}
{"level":"debug","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"030d7009bec719c89d11f8482f153a47d8328bd76ea59ad09ccf92375f817115","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:52:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:52:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["030d7009bec719c89d11f8482f153a47d8328bd76ea59ad09ccf92375f817115"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"030d7009bec719c89d11f8482f153a47d8328bd76ea59ad09ccf92375f817115","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e08d48dffd4e56e22c392d89b56b0467c1716f941e7a7bd5b3af198e2edf1b1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:52:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:52:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e08d48dffd4e56e22c392d89b56b0467c1716f941e7a7bd5b3af198e2edf1b1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"030d7009bec719c89d11f8482f153a47d8328bd76ea59ad09ccf92375f817115","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e08d48dffd4e56e22c392d89b56b0467c1716f941e7a7bd5b3af198e2edf1b1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e08d48dffd4e56e22c392d89b56b0467c1716f941e7a7bd5b3af198e2edf1b1d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e08d48dffd4e56e22c392d89b56b0467c1716f941e7a7bd5b3af198e2edf1b1d"}
{"level":"debug","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e08d48dffd4e56e22c392d89b56b0467c1716f941e7a7bd5b3af198e2edf1b1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:52:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:52:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e08d48dffd4e56e22c392d89b56b0467c1716f941e7a7bd5b3af198e2edf1b1d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/030d7009bec719c89d11f8482f153a47d8328bd76ea59ad09ccf92375f817115"}
{"level":"info","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e08d48dffd4e56e22c392d89b56b0467c1716f941e7a7bd5b3af198e2edf1b1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e08d48dffd4e56e22c392d89b56b0467c1716f941e7a7bd5b3af198e2edf1b1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:52:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:52:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e08d48dffd4e56e22c392d89b56b0467c1716f941e7a7bd5b3af198e2edf1b1d"}
{"level":"info","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e08d48dffd4e56e22c392d89b56b0467c1716f941e7a7bd5b3af198e2edf1b1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e08d48dffd4e56e22c392d89b56b0467c1716f941e7a7bd5b3af198e2edf1b1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e08d48dffd4e56e22c392d89b56b0467c1716f941e7a7bd5b3af198e2edf1b1d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e08d48dffd4e56e22c392d89b56b0467c1716f941e7a7bd5b3af198e2edf1b1d"}
{"level":"debug","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e08d48dffd4e56e22c392d89b56b0467c1716f941e7a7bd5b3af198e2edf1b1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7eb0a04c9228b7afa214d023216691661548b6d1e9e12715b08b7b7226339a7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:52:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:52:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e08d48dffd4e56e22c392d89b56b0467c1716f941e7a7bd5b3af198e2edf1b1d"}
{"level":"info","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7eb0a04c9228b7afa214d023216691661548b6d1e9e12715b08b7b7226339a7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7eb0a04c9228b7afa214d023216691661548b6d1e9e12715b08b7b7226339a7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:52:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:52:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7eb0a04c9228b7afa214d023216691661548b6d1e9e12715b08b7b7226339a7d"}
{"level":"info","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7eb0a04c9228b7afa214d023216691661548b6d1e9e12715b08b7b7226339a7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7eb0a04c9228b7afa214d023216691661548b6d1e9e12715b08b7b7226339a7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:52:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:52:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7eb0a04c9228b7afa214d023216691661548b6d1e9e12715b08b7b7226339a7d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7eb0a04c9228b7afa214d023216691661548b6d1e9e12715b08b7b7226339a7d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e08d48dffd4e56e22c392d89b56b0467c1716f941e7a7bd5b3af198e2edf1b1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:52:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:52:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e08d48dffd4e56e22c392d89b56b0467c1716f941e7a7bd5b3af198e2edf1b1d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7eb0a04c9228b7afa214d023216691661548b6d1e9e12715b08b7b7226339a7d"}
{"level":"info","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e08d48dffd4e56e22c392d89b56b0467c1716f941e7a7bd5b3af198e2edf1b1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7eb0a04c9228b7afa214d023216691661548b6d1e9e12715b08b7b7226339a7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e08d48dffd4e56e22c392d89b56b0467c1716f941e7a7bd5b3af198e2edf1b1d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7eb0a04c9228b7afa214d023216691661548b6d1e9e12715b08b7b7226339a7d"}
{"level":"info","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e08d48dffd4e56e22c392d89b56b0467c1716f941e7a7bd5b3af198e2edf1b1d"}
{"level":"debug","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7eb0a04c9228b7afa214d023216691661548b6d1e9e12715b08b7b7226339a7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:52:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:52:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7eb0a04c9228b7afa214d023216691661548b6d1e9e12715b08b7b7226339a7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7eb0a04c9228b7afa214d023216691661548b6d1e9e12715b08b7b7226339a7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09d7eb4d38906bd528eca00e6b2e4f23928cde8137d5b2a65b6022ca33980bec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:52:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:52:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09d7eb4d38906bd528eca00e6b2e4f23928cde8137d5b2a65b6022ca33980bec"}
{"level":"info","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09d7eb4d38906bd528eca00e6b2e4f23928cde8137d5b2a65b6022ca33980bec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7eb0a04c9228b7afa214d023216691661548b6d1e9e12715b08b7b7226339a7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:52:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:52:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7eb0a04c9228b7afa214d023216691661548b6d1e9e12715b08b7b7226339a7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09d7eb4d38906bd528eca00e6b2e4f23928cde8137d5b2a65b6022ca33980bec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:52:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:52:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09d7eb4d38906bd528eca00e6b2e4f23928cde8137d5b2a65b6022ca33980bec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7eb0a04c9228b7afa214d023216691661548b6d1e9e12715b08b7b7226339a7d"}
{"level":"info","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09d7eb4d38906bd528eca00e6b2e4f23928cde8137d5b2a65b6022ca33980bec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7eb0a04c9228b7afa214d023216691661548b6d1e9e12715b08b7b7226339a7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:52:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:52:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7eb0a04c9228b7afa214d023216691661548b6d1e9e12715b08b7b7226339a7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09d7eb4d38906bd528eca00e6b2e4f23928cde8137d5b2a65b6022ca33980bec"}
{"level":"info","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7eb0a04c9228b7afa214d023216691661548b6d1e9e12715b08b7b7226339a7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09d7eb4d38906bd528eca00e6b2e4f23928cde8137d5b2a65b6022ca33980bec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7eb0a04c9228b7afa214d023216691661548b6d1e9e12715b08b7b7226339a7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:52:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:52:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7eb0a04c9228b7afa214d023216691661548b6d1e9e12715b08b7b7226339a7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7eb0a04c9228b7afa214d023216691661548b6d1e9e12715b08b7b7226339a7d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7eb0a04c9228b7afa214d023216691661548b6d1e9e12715b08b7b7226339a7d"}
{"level":"debug","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7eb0a04c9228b7afa214d023216691661548b6d1e9e12715b08b7b7226339a7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:52:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:52:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7eb0a04c9228b7afa214d023216691661548b6d1e9e12715b08b7b7226339a7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7eb0a04c9228b7afa214d023216691661548b6d1e9e12715b08b7b7226339a7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7eb0a04c9228b7afa214d023216691661548b6d1e9e12715b08b7b7226339a7d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09d7eb4d38906bd528eca00e6b2e4f23928cde8137d5b2a65b6022ca33980bec"}
{"level":"info","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7eb0a04c9228b7afa214d023216691661548b6d1e9e12715b08b7b7226339a7d"}
{"level":"debug","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"208414aa4c4ad56954710d6fcd41f2d736d6e28b5886dfdafffca9485dd51ef2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:52:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:52:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"208414aa4c4ad56954710d6fcd41f2d736d6e28b5886dfdafffca9485dd51ef2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"920e4c1210dc265839f110b328943dbc173ad6c5981a8a9120e53d85546bed06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:52:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:52:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/208414aa4c4ad56954710d6fcd41f2d736d6e28b5886dfdafffca9485dd51ef2"}
{"level":"info","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"920e4c1210dc265839f110b328943dbc173ad6c5981a8a9120e53d85546bed06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"208414aa4c4ad56954710d6fcd41f2d736d6e28b5886dfdafffca9485dd51ef2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:52:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:52:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["208414aa4c4ad56954710d6fcd41f2d736d6e28b5886dfdafffca9485dd51ef2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"208414aa4c4ad56954710d6fcd41f2d736d6e28b5886dfdafffca9485dd51ef2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"920e4c1210dc265839f110b328943dbc173ad6c5981a8a9120e53d85546bed06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:52:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:52:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/920e4c1210dc265839f110b328943dbc173ad6c5981a8a9120e53d85546bed06"}
{"level":"info","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"920e4c1210dc265839f110b328943dbc173ad6c5981a8a9120e53d85546bed06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"208414aa4c4ad56954710d6fcd41f2d736d6e28b5886dfdafffca9485dd51ef2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:52:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:52:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/208414aa4c4ad56954710d6fcd41f2d736d6e28b5886dfdafffca9485dd51ef2"}
{"level":"info","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"208414aa4c4ad56954710d6fcd41f2d736d6e28b5886dfdafffca9485dd51ef2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"920e4c1210dc265839f110b328943dbc173ad6c5981a8a9120e53d85546bed06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"208414aa4c4ad56954710d6fcd41f2d736d6e28b5886dfdafffca9485dd51ef2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:52:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:52:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["208414aa4c4ad56954710d6fcd41f2d736d6e28b5886dfdafffca9485dd51ef2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"208414aa4c4ad56954710d6fcd41f2d736d6e28b5886dfdafffca9485dd51ef2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"208414aa4c4ad56954710d6fcd41f2d736d6e28b5886dfdafffca9485dd51ef2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:52:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:52:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["208414aa4c4ad56954710d6fcd41f2d736d6e28b5886dfdafffca9485dd51ef2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/920e4c1210dc265839f110b328943dbc173ad6c5981a8a9120e53d85546bed06"}
{"level":"error","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"208414aa4c4ad56954710d6fcd41f2d736d6e28b5886dfdafffca9485dd51ef2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"208414aa4c4ad56954710d6fcd41f2d736d6e28b5886dfdafffca9485dd51ef2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"920e4c1210dc265839f110b328943dbc173ad6c5981a8a9120e53d85546bed06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:52:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:52:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["920e4c1210dc265839f110b328943dbc173ad6c5981a8a9120e53d85546bed06"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/208414aa4c4ad56954710d6fcd41f2d736d6e28b5886dfdafffca9485dd51ef2"}
{"level":"info","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"920e4c1210dc265839f110b328943dbc173ad6c5981a8a9120e53d85546bed06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"208414aa4c4ad56954710d6fcd41f2d736d6e28b5886dfdafffca9485dd51ef2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:52:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:52:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"920e4c1210dc265839f110b328943dbc173ad6c5981a8a9120e53d85546bed06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133"}
{"level":"debug","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:52:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:52:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/920e4c1210dc265839f110b328943dbc173ad6c5981a8a9120e53d85546bed06"}
{"level":"info","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:52:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:52:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133"}
{"level":"info","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133"}
{"level":"debug","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:52:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133"}
{"level":"debug","ts":"2026-07-03T14:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:52:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:52:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:52:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:52:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133"}
{"level":"debug","ts":"2026-07-03T14:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133"}
{"level":"debug","ts":"2026-07-03T14:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:52:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:52:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:52:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:52:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133"}
{"level":"debug","ts":"2026-07-03T14:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133"}
{"level":"debug","ts":"2026-07-03T14:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:52:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:52:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:52:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:52:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133"}
{"level":"debug","ts":"2026-07-03T14:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133"}
{"level":"debug","ts":"2026-07-03T14:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:52:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:52:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:52:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:52:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133"}
{"level":"debug","ts":"2026-07-03T14:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133"}
{"level":"debug","ts":"2026-07-03T14:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:52:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:52:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:52:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:52:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133"}
{"level":"debug","ts":"2026-07-03T14:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133"}
{"level":"debug","ts":"2026-07-03T14:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:52:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:52:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:52:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:52:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133"}
{"level":"debug","ts":"2026-07-03T14:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133"}
{"level":"debug","ts":"2026-07-03T14:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:52:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:52:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:52:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:52:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133"}
{"level":"debug","ts":"2026-07-03T14:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133"}
{"level":"debug","ts":"2026-07-03T14:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:52:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:52:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:52:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133"}
{"level":"debug","ts":"2026-07-03T14:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7eb0a04c9228b7afa214d023216691661548b6d1e9e12715b08b7b7226339a7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:52:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:52:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7eb0a04c9228b7afa214d023216691661548b6d1e9e12715b08b7b7226339a7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7eb0a04c9228b7afa214d023216691661548b6d1e9e12715b08b7b7226339a7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7eb0a04c9228b7afa214d023216691661548b6d1e9e12715b08b7b7226339a7d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7eb0a04c9228b7afa214d023216691661548b6d1e9e12715b08b7b7226339a7d"}
{"level":"debug","ts":"2026-07-03T14:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7eb0a04c9228b7afa214d023216691661548b6d1e9e12715b08b7b7226339a7d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7eb0a04c9228b7afa214d023216691661548b6d1e9e12715b08b7b7226339a7d"}
{"level":"debug","ts":"2026-07-03T14:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7eb0a04c9228b7afa214d023216691661548b6d1e9e12715b08b7b7226339a7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:52:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:52:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7eb0a04c9228b7afa214d023216691661548b6d1e9e12715b08b7b7226339a7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7eb0a04c9228b7afa214d023216691661548b6d1e9e12715b08b7b7226339a7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7eb0a04c9228b7afa214d023216691661548b6d1e9e12715b08b7b7226339a7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:52:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:52:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7eb0a04c9228b7afa214d023216691661548b6d1e9e12715b08b7b7226339a7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba7b45676f26150acbb1921543ad6f5970e3d4c083702f0cc623caa999b7ba53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7eb0a04c9228b7afa214d023216691661548b6d1e9e12715b08b7b7226339a7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7eb0a04c9228b7afa214d023216691661548b6d1e9e12715b08b7b7226339a7d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7eb0a04c9228b7afa214d023216691661548b6d1e9e12715b08b7b7226339a7d"}
{"level":"debug","ts":"2026-07-03T14:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7eb0a04c9228b7afa214d023216691661548b6d1e9e12715b08b7b7226339a7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:52:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:52:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7eb0a04c9228b7afa214d023216691661548b6d1e9e12715b08b7b7226339a7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba7b45676f26150acbb1921543ad6f5970e3d4c083702f0cc623caa999b7ba53"}
{"level":"info","ts":"2026-07-03T14:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7eb0a04c9228b7afa214d023216691661548b6d1e9e12715b08b7b7226339a7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7eb0a04c9228b7afa214d023216691661548b6d1e9e12715b08b7b7226339a7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:52:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:52:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7eb0a04c9228b7afa214d023216691661548b6d1e9e12715b08b7b7226339a7d"}
{"level":"info","ts":"2026-07-03T14:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7eb0a04c9228b7afa214d023216691661548b6d1e9e12715b08b7b7226339a7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7eb0a04c9228b7afa214d023216691661548b6d1e9e12715b08b7b7226339a7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7eb0a04c9228b7afa214d023216691661548b6d1e9e12715b08b7b7226339a7d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7eb0a04c9228b7afa214d023216691661548b6d1e9e12715b08b7b7226339a7d"}
{"level":"debug","ts":"2026-07-03T14:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7eb0a04c9228b7afa214d023216691661548b6d1e9e12715b08b7b7226339a7d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7eb0a04c9228b7afa214d023216691661548b6d1e9e12715b08b7b7226339a7d"}
{"level":"debug","ts":"2026-07-03T14:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7eb0a04c9228b7afa214d023216691661548b6d1e9e12715b08b7b7226339a7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:52:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:52:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7eb0a04c9228b7afa214d023216691661548b6d1e9e12715b08b7b7226339a7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7eb0a04c9228b7afa214d023216691661548b6d1e9e12715b08b7b7226339a7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7eb0a04c9228b7afa214d023216691661548b6d1e9e12715b08b7b7226339a7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:52:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:52:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7eb0a04c9228b7afa214d023216691661548b6d1e9e12715b08b7b7226339a7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7eb0a04c9228b7afa214d023216691661548b6d1e9e12715b08b7b7226339a7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7eb0a04c9228b7afa214d023216691661548b6d1e9e12715b08b7b7226339a7d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7eb0a04c9228b7afa214d023216691661548b6d1e9e12715b08b7b7226339a7d"}
{"level":"debug","ts":"2026-07-03T14:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7eb0a04c9228b7afa214d023216691661548b6d1e9e12715b08b7b7226339a7d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7eb0a04c9228b7afa214d023216691661548b6d1e9e12715b08b7b7226339a7d"}
{"level":"debug","ts":"2026-07-03T14:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f5a7c0b455b757d0e91c3f2efddfaf7a3ab2c5edec7105268568812e764de4a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f5a7c0b455b757d0e91c3f2efddfaf7a3ab2c5edec7105268568812e764de4a"}
{"level":"debug","ts":"2026-07-03T14:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7eb0a04c9228b7afa214d023216691661548b6d1e9e12715b08b7b7226339a7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:52:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:52:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7eb0a04c9228b7afa214d023216691661548b6d1e9e12715b08b7b7226339a7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7eb0a04c9228b7afa214d023216691661548b6d1e9e12715b08b7b7226339a7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7eb0a04c9228b7afa214d023216691661548b6d1e9e12715b08b7b7226339a7d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7eb0a04c9228b7afa214d023216691661548b6d1e9e12715b08b7b7226339a7d"}
{"level":"debug","ts":"2026-07-03T14:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46d58e2d92e7a8de3e6b687a4f6836f6508bd2b32ce20dc71caf294c4c8c85ae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46d58e2d92e7a8de3e6b687a4f6836f6508bd2b32ce20dc71caf294c4c8c85ae"}
{"level":"debug","ts":"2026-07-03T14:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:52:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:52:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133"}
{"level":"debug","ts":"2026-07-03T14:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133"}
{"level":"debug","ts":"2026-07-03T14:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:52:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:52:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:52:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:52:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133"}
{"level":"debug","ts":"2026-07-03T14:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"920e4c1210dc265839f110b328943dbc173ad6c5981a8a9120e53d85546bed06","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7dd0b0bcc90e1ed3f9abdf28f381ef5d746765ecc242096db53e80d7b6b42afd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133"}
{"level":"info","ts":"2026-07-03T14:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/920e4c1210dc265839f110b328943dbc173ad6c5981a8a9120e53d85546bed06"}
{"level":"debug","ts":"2026-07-03T14:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:52:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:52:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7dd0b0bcc90e1ed3f9abdf28f381ef5d746765ecc242096db53e80d7b6b42afd"}
{"level":"info","ts":"2026-07-03T14:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:52:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:52:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133"}
{"level":"debug","ts":"2026-07-03T14:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"208414aa4c4ad56954710d6fcd41f2d736d6e28b5886dfdafffca9485dd51ef2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133"}
{"level":"debug","ts":"2026-07-03T14:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c081c27dc685dd75fe3f8352c9def11cb0ca562c389fef10c042164db52c8f6b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/208414aa4c4ad56954710d6fcd41f2d736d6e28b5886dfdafffca9485dd51ef2"}
{"level":"debug","ts":"2026-07-03T14:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e08d48dffd4e56e22c392d89b56b0467c1716f941e7a7bd5b3af198e2edf1b1d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:52:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:52:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c081c27dc685dd75fe3f8352c9def11cb0ca562c389fef10c042164db52c8f6b"}
{"level":"info","ts":"2026-07-03T14:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"638a593d4d8d18aa0843e1d8ad2956d8560651a06746e98426eea7ce5850f322","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e08d48dffd4e56e22c392d89b56b0467c1716f941e7a7bd5b3af198e2edf1b1d"}
{"level":"debug","ts":"2026-07-03T14:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38e9929c19344e9b7323bef9cb8591190c51680ef455239aad01c1dd0d6102ea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/638a593d4d8d18aa0843e1d8ad2956d8560651a06746e98426eea7ce5850f322"}
{"level":"debug","ts":"2026-07-03T14:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"367951b7628aec3fc20ea3e0240896d20f43ca589eb53e75479feda3f8291497","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133"}
{"level":"debug","ts":"2026-07-03T14:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3510ee3ad77b0ce57bc5b07b4e0cb3a9f1bc309636ce17c5aad1736e486200e6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38e9929c19344e9b7323bef9cb8591190c51680ef455239aad01c1dd0d6102ea"}
{"level":"info","ts":"2026-07-03T14:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/367951b7628aec3fc20ea3e0240896d20f43ca589eb53e75479feda3f8291497"}
{"level":"info","ts":"2026-07-03T14:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3510ee3ad77b0ce57bc5b07b4e0cb3a9f1bc309636ce17c5aad1736e486200e6"}
{"level":"debug","ts":"2026-07-03T14:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09d7eb4d38906bd528eca00e6b2e4f23928cde8137d5b2a65b6022ca33980bec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:52:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:52:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09d7eb4d38906bd528eca00e6b2e4f23928cde8137d5b2a65b6022ca33980bec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09d7eb4d38906bd528eca00e6b2e4f23928cde8137d5b2a65b6022ca33980bec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72fa94488914449a91242ee66b39aefb8fc61ec53ad224fa7af511146678f878","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09d7eb4d38906bd528eca00e6b2e4f23928cde8137d5b2a65b6022ca33980bec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09d7eb4d38906bd528eca00e6b2e4f23928cde8137d5b2a65b6022ca33980bec"}
{"level":"debug","ts":"2026-07-03T14:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c198d2d11832fe77d501e1e986a71beb0bdec9d1475c9fab26a3a68c0c39abda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09d7eb4d38906bd528eca00e6b2e4f23928cde8137d5b2a65b6022ca33980bec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:52:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:52:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09d7eb4d38906bd528eca00e6b2e4f23928cde8137d5b2a65b6022ca33980bec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72fa94488914449a91242ee66b39aefb8fc61ec53ad224fa7af511146678f878"}
{"level":"info","ts":"2026-07-03T14:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09d7eb4d38906bd528eca00e6b2e4f23928cde8137d5b2a65b6022ca33980bec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d09e65eb68b3ae71ff3565485f74f78c5d1ec9f7155c02b437837ffcc2c6bdf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09d7eb4d38906bd528eca00e6b2e4f23928cde8137d5b2a65b6022ca33980bec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:52:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:52:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09d7eb4d38906bd528eca00e6b2e4f23928cde8137d5b2a65b6022ca33980bec"}
{"level":"info","ts":"2026-07-03T14:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09d7eb4d38906bd528eca00e6b2e4f23928cde8137d5b2a65b6022ca33980bec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1111181e5388815f5618ccc1bbb67ae9343ad40ff34d1fe98d081a03101265c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09d7eb4d38906bd528eca00e6b2e4f23928cde8137d5b2a65b6022ca33980bec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:52:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:52:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09d7eb4d38906bd528eca00e6b2e4f23928cde8137d5b2a65b6022ca33980bec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09d7eb4d38906bd528eca00e6b2e4f23928cde8137d5b2a65b6022ca33980bec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09d7eb4d38906bd528eca00e6b2e4f23928cde8137d5b2a65b6022ca33980bec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:52:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:52:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09d7eb4d38906bd528eca00e6b2e4f23928cde8137d5b2a65b6022ca33980bec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c198d2d11832fe77d501e1e986a71beb0bdec9d1475c9fab26a3a68c0c39abda"}
{"level":"error","ts":"2026-07-03T14:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"09d7eb4d38906bd528eca00e6b2e4f23928cde8137d5b2a65b6022ca33980bec","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"09d7eb4d38906bd528eca00e6b2e4f23928cde8137d5b2a65b6022ca33980bec\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-03T14:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09d7eb4d38906bd528eca00e6b2e4f23928cde8137d5b2a65b6022ca33980bec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09d7eb4d38906bd528eca00e6b2e4f23928cde8137d5b2a65b6022ca33980bec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"030d7009bec719c89d11f8482f153a47d8328bd76ea59ad09ccf92375f817115","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d09e65eb68b3ae71ff3565485f74f78c5d1ec9f7155c02b437837ffcc2c6bdf"}
{"level":"info","ts":"2026-07-03T14:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1111181e5388815f5618ccc1bbb67ae9343ad40ff34d1fe98d081a03101265c9"}
{"level":"info","ts":"2026-07-03T14:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09d7eb4d38906bd528eca00e6b2e4f23928cde8137d5b2a65b6022ca33980bec"}
{"level":"info","ts":"2026-07-03T14:52:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/030d7009bec719c89d11f8482f153a47d8328bd76ea59ad09ccf92375f817115"}
{"level":"info","ts":"2026-07-03T14:52:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6a812022-6367-434b-89e2-1e04dab7d675","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:58940","PortSpecifier":{"PortValue":58940}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6a812022-6367-434b-89e2-1e04dab7d675","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6ebb6a.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T14:52:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6a812022-6367-434b-89e2-1e04dab7d675","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:58940","PortSpecifier":{"PortValue":58940}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783090370,"nanos":701419888},"http":{"id":"6a812022-6367-434b-89e2-1e04dab7d675","method":"POST","headers":{":authority":"e2e-shared-a-6ebb6a.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:52:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6a812022-6367-434b-89e2-1e04dab7d675","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T14:52:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6a812022-6367-434b-89e2-1e04dab7d675","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1855d0c8-d07c-417e-9b3f-a12b5b00145c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=27a9bfa3-ed3c-4129-8f90-1c3d2b27fe8d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/af9f436983f9"]}}
{"level":"debug","ts":"2026-07-03T14:52:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6a812022-6367-434b-89e2-1e04dab7d675","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/af9f436983f9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=27a9bfa3-ed3c-4129-8f90-1c3d2b27fe8d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1855d0c8-d07c-417e-9b3f-a12b5b00145c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1111181e5388815f5618ccc1bbb67ae9343ad40ff34d1fe98d081a03101265c9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6ebb6a.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:52:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a812022-6367-434b-89e2-1e04dab7d675","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:52:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a812022-6367-434b-89e2-1e04dab7d675","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:52:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a812022-6367-434b-89e2-1e04dab7d675","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6ebb6a/rate-test-model-6ebb6a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:52:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6a812022-6367-434b-89e2-1e04dab7d675","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T14:52:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a812022-6367-434b-89e2-1e04dab7d675","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T14:52:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a812022-6367-434b-89e2-1e04dab7d675","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T14:52:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6a812022-6367-434b-89e2-1e04dab7d675","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T14:52:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6a812022-6367-434b-89e2-1e04dab7d675","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T14:52:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e4143554-c842-44bc-962f-dd103e61747d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:48728","PortSpecifier":{"PortValue":48728}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e4143554-c842-44bc-962f-dd103e61747d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1dd877.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T14:52:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e4143554-c842-44bc-962f-dd103e61747d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:48728","PortSpecifier":{"PortValue":48728}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783090370,"nanos":757361158},"http":{"id":"e4143554-c842-44bc-962f-dd103e61747d","method":"POST","headers":{":authority":"e2e-shared-b-1dd877.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:52:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e4143554-c842-44bc-962f-dd103e61747d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T14:52:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e4143554-c842-44bc-962f-dd103e61747d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1855d0c8-d07c-417e-9b3f-a12b5b00145c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=27a9bfa3-ed3c-4129-8f90-1c3d2b27fe8d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/af9f436983f9"]}}
{"level":"debug","ts":"2026-07-03T14:52:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e4143554-c842-44bc-962f-dd103e61747d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/af9f436983f9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=27a9bfa3-ed3c-4129-8f90-1c3d2b27fe8d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1855d0c8-d07c-417e-9b3f-a12b5b00145c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"72fa94488914449a91242ee66b39aefb8fc61ec53ad224fa7af511146678f878"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1dd877.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:52:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4143554-c842-44bc-962f-dd103e61747d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:52:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4143554-c842-44bc-962f-dd103e61747d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:52:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4143554-c842-44bc-962f-dd103e61747d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1dd877/rate-test-model-1dd877\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:52:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e4143554-c842-44bc-962f-dd103e61747d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T14:52:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e4143554-c842-44bc-962f-dd103e61747d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T14:52:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e4143554-c842-44bc-962f-dd103e61747d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T14:52:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e4143554-c842-44bc-962f-dd103e61747d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T14:52:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e4143554-c842-44bc-962f-dd103e61747d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T14:52:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5212f08b-6d69-43b9-aea1-8dcb4f7cc51c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:58950","PortSpecifier":{"PortValue":58950}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5212f08b-6d69-43b9-aea1-8dcb4f7cc51c","method":"POST","path":"/ai-tenant-e2e-shared-a-6ebb6a/rate-test-model-6ebb6a/v1/completions","host":"e2e-shared-a-6ebb6a.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T14:52:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5212f08b-6d69-43b9-aea1-8dcb4f7cc51c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:58950","PortSpecifier":{"PortValue":58950}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783090370,"nanos":800211123},"http":{"id":"5212f08b-6d69-43b9-aea1-8dcb4f7cc51c","method":"POST","headers":{":authority":"e2e-shared-a-6ebb6a.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6ebb6a/rate-test-model-6ebb6a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:52:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5212f08b-6d69-43b9-aea1-8dcb4f7cc51c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-UYMMrrelDTFmcXT8_r1Pst4xipo6zWSfYAFrN6tZIxUuVDSO52J1pHK4HDpM"}
{"level":"debug","ts":"2026-07-03T14:52:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5212f08b-6d69-43b9-aea1-8dcb4f7cc51c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6ebb6a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-UYMMrrelDTFmcXT8_r1Pst4xipo6zWSfYAFrN6tZIxUuVDSO52J1pHK4HDpM\"}"}
{"level":"debug","ts":"2026-07-03T14:52:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5212f08b-6d69-43b9-aea1-8dcb4f7cc51c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6ebb6a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a227aaed-51d0-431d-a68d-26df4ac0967a","keyName":"e2e-rate-a-f8b143","subscription":"e2e-rate-iso-a-f8b143","tenant":"e2e-shared-a-6ebb6a","userId":"a227aaed-51d0-431d-a68d-26df4ac0967a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-03T14:52:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5212f08b-6d69-43b9-aea1-8dcb4f7cc51c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6ebb6a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-6ebb6a/rate-test-model-6ebb6a\",\"requestedSubscription\":\"e2e-rate-iso-a-f8b143\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-03T14:52:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5212f08b-6d69-43b9-aea1-8dcb4f7cc51c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6ebb6a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-6ebb6a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f8b143","namespace":"ai-tenant-e2e-shared-a-6ebb6a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-03T14:52:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5212f08b-6d69-43b9-aea1-8dcb4f7cc51c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:52:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5212f08b-6d69-43b9-aea1-8dcb4f7cc51c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:52:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5212f08b-6d69-43b9-aea1-8dcb4f7cc51c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:52:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5212f08b-6d69-43b9-aea1-8dcb4f7cc51c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:52:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5212f08b-6d69-43b9-aea1-8dcb4f7cc51c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6ebb6a/rate-test-model-6ebb6a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:52:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5212f08b-6d69-43b9-aea1-8dcb4f7cc51c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T14:52:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5212f08b-6d69-43b9-aea1-8dcb4f7cc51c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f8b143"}
{"level":"debug","ts":"2026-07-03T14:52:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5212f08b-6d69-43b9-aea1-8dcb4f7cc51c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T14:52:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5212f08b-6d69-43b9-aea1-8dcb4f7cc51c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a227aaed-51d0-431d-a68d-26df4ac0967a","keyName":"e2e-rate-a-f8b143","selected_subscription":"e2e-rate-iso-a-f8b143","selected_subscription_key":"ai-tenant-e2e-shared-a-6ebb6a/e2e-rate-iso-a-f8b143@ai-tenant-e2e-shared-a-6ebb6a/rate-test-model-6ebb6a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-6ebb6a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f8b143","namespace":"ai-tenant-e2e-shared-a-6ebb6a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-03T14:52:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5212f08b-6d69-43b9-aea1-8dcb4f7cc51c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T14:52:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5212f08b-6d69-43b9-aea1-8dcb4f7cc51c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T14:52:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ae8d10f4-9212-43e1-a0d2-f46345ef52d2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:58954","PortSpecifier":{"PortValue":58954}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ae8d10f4-9212-43e1-a0d2-f46345ef52d2","method":"POST","path":"/ai-tenant-e2e-shared-a-6ebb6a/rate-test-model-6ebb6a/v1/completions","host":"e2e-shared-a-6ebb6a.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T14:52:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ae8d10f4-9212-43e1-a0d2-f46345ef52d2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:58954","PortSpecifier":{"PortValue":58954}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783090371,"nanos":871882497},"http":{"id":"ae8d10f4-9212-43e1-a0d2-f46345ef52d2","method":"POST","headers":{":authority":"e2e-shared-a-6ebb6a.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6ebb6a/rate-test-model-6ebb6a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:52:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ae8d10f4-9212-43e1-a0d2-f46345ef52d2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-UYMMrrelDTFmcXT8_r1Pst4xipo6zWSfYAFrN6tZIxUuVDSO52J1pHK4HDpM"}
{"level":"debug","ts":"2026-07-03T14:52:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ae8d10f4-9212-43e1-a0d2-f46345ef52d2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6ebb6a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-UYMMrrelDTFmcXT8_r1Pst4xipo6zWSfYAFrN6tZIxUuVDSO52J1pHK4HDpM\"}"}
{"level":"debug","ts":"2026-07-03T14:52:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ae8d10f4-9212-43e1-a0d2-f46345ef52d2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6ebb6a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a227aaed-51d0-431d-a68d-26df4ac0967a","keyName":"e2e-rate-a-f8b143","subscription":"e2e-rate-iso-a-f8b143","tenant":"e2e-shared-a-6ebb6a","userId":"a227aaed-51d0-431d-a68d-26df4ac0967a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-03T14:52:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ae8d10f4-9212-43e1-a0d2-f46345ef52d2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6ebb6a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-6ebb6a/rate-test-model-6ebb6a\",\"requestedSubscription\":\"e2e-rate-iso-a-f8b143\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-03T14:52:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ae8d10f4-9212-43e1-a0d2-f46345ef52d2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6ebb6a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-6ebb6a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f8b143","namespace":"ai-tenant-e2e-shared-a-6ebb6a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-03T14:52:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ae8d10f4-9212-43e1-a0d2-f46345ef52d2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:52:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae8d10f4-9212-43e1-a0d2-f46345ef52d2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:52:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae8d10f4-9212-43e1-a0d2-f46345ef52d2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:52:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae8d10f4-9212-43e1-a0d2-f46345ef52d2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:52:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae8d10f4-9212-43e1-a0d2-f46345ef52d2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6ebb6a/rate-test-model-6ebb6a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:52:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae8d10f4-9212-43e1-a0d2-f46345ef52d2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f8b143"}
{"level":"debug","ts":"2026-07-03T14:52:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae8d10f4-9212-43e1-a0d2-f46345ef52d2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T14:52:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae8d10f4-9212-43e1-a0d2-f46345ef52d2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T14:52:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae8d10f4-9212-43e1-a0d2-f46345ef52d2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a227aaed-51d0-431d-a68d-26df4ac0967a","keyName":"e2e-rate-a-f8b143","selected_subscription":"e2e-rate-iso-a-f8b143","selected_subscription_key":"ai-tenant-e2e-shared-a-6ebb6a/e2e-rate-iso-a-f8b143@ai-tenant-e2e-shared-a-6ebb6a/rate-test-model-6ebb6a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-6ebb6a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f8b143","namespace":"ai-tenant-e2e-shared-a-6ebb6a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-03T14:52:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ae8d10f4-9212-43e1-a0d2-f46345ef52d2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T14:52:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ae8d10f4-9212-43e1-a0d2-f46345ef52d2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T14:52:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1fd2d115-e201-470e-8b77-0eb82744ab82","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:58960","PortSpecifier":{"PortValue":58960}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1fd2d115-e201-470e-8b77-0eb82744ab82","method":"POST","path":"/ai-tenant-e2e-shared-a-6ebb6a/rate-test-model-6ebb6a/v1/completions","host":"e2e-shared-a-6ebb6a.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T14:52:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1fd2d115-e201-470e-8b77-0eb82744ab82","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:58960","PortSpecifier":{"PortValue":58960}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783090372,"nanos":914317237},"http":{"id":"1fd2d115-e201-470e-8b77-0eb82744ab82","method":"POST","headers":{":authority":"e2e-shared-a-6ebb6a.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6ebb6a/rate-test-model-6ebb6a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:52:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1fd2d115-e201-470e-8b77-0eb82744ab82","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-UYMMrrelDTFmcXT8_r1Pst4xipo6zWSfYAFrN6tZIxUuVDSO52J1pHK4HDpM"}
{"level":"debug","ts":"2026-07-03T14:52:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1fd2d115-e201-470e-8b77-0eb82744ab82","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6ebb6a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-UYMMrrelDTFmcXT8_r1Pst4xipo6zWSfYAFrN6tZIxUuVDSO52J1pHK4HDpM\"}"}
{"level":"debug","ts":"2026-07-03T14:52:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1fd2d115-e201-470e-8b77-0eb82744ab82","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6ebb6a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a227aaed-51d0-431d-a68d-26df4ac0967a","keyName":"e2e-rate-a-f8b143","subscription":"e2e-rate-iso-a-f8b143","tenant":"e2e-shared-a-6ebb6a","userId":"a227aaed-51d0-431d-a68d-26df4ac0967a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-03T14:52:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1fd2d115-e201-470e-8b77-0eb82744ab82","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6ebb6a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-6ebb6a/rate-test-model-6ebb6a\",\"requestedSubscription\":\"e2e-rate-iso-a-f8b143\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-03T14:52:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1fd2d115-e201-470e-8b77-0eb82744ab82","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6ebb6a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-6ebb6a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f8b143","namespace":"ai-tenant-e2e-shared-a-6ebb6a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-03T14:52:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1fd2d115-e201-470e-8b77-0eb82744ab82","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:52:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1fd2d115-e201-470e-8b77-0eb82744ab82","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:52:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1fd2d115-e201-470e-8b77-0eb82744ab82","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:52:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1fd2d115-e201-470e-8b77-0eb82744ab82","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6ebb6a/rate-test-model-6ebb6a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:52:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1fd2d115-e201-470e-8b77-0eb82744ab82","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:52:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1fd2d115-e201-470e-8b77-0eb82744ab82","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T14:52:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1fd2d115-e201-470e-8b77-0eb82744ab82","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T14:52:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1fd2d115-e201-470e-8b77-0eb82744ab82","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f8b143"}
{"level":"debug","ts":"2026-07-03T14:52:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1fd2d115-e201-470e-8b77-0eb82744ab82","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a227aaed-51d0-431d-a68d-26df4ac0967a","keyName":"e2e-rate-a-f8b143","selected_subscription":"e2e-rate-iso-a-f8b143","selected_subscription_key":"ai-tenant-e2e-shared-a-6ebb6a/e2e-rate-iso-a-f8b143@ai-tenant-e2e-shared-a-6ebb6a/rate-test-model-6ebb6a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-6ebb6a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f8b143","namespace":"ai-tenant-e2e-shared-a-6ebb6a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-03T14:52:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1fd2d115-e201-470e-8b77-0eb82744ab82","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T14:52:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1fd2d115-e201-470e-8b77-0eb82744ab82","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T14:53:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4e5c4a10-e033-46cc-a9da-44fe926814ec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:35924","PortSpecifier":{"PortValue":35924}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4e5c4a10-e033-46cc-a9da-44fe926814ec","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6ebb6a.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T14:53:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4e5c4a10-e033-46cc-a9da-44fe926814ec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:35924","PortSpecifier":{"PortValue":35924}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783090385,"nanos":794153847},"http":{"id":"4e5c4a10-e033-46cc-a9da-44fe926814ec","method":"POST","headers":{":authority":"e2e-shared-a-6ebb6a.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:53:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4e5c4a10-e033-46cc-a9da-44fe926814ec","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T14:53:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4e5c4a10-e033-46cc-a9da-44fe926814ec","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1855d0c8-d07c-417e-9b3f-a12b5b00145c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=27a9bfa3-ed3c-4129-8f90-1c3d2b27fe8d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/af9f436983f9"]}}
{"level":"debug","ts":"2026-07-03T14:53:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4e5c4a10-e033-46cc-a9da-44fe926814ec","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/af9f436983f9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=27a9bfa3-ed3c-4129-8f90-1c3d2b27fe8d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1855d0c8-d07c-417e-9b3f-a12b5b00145c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1111181e5388815f5618ccc1bbb67ae9343ad40ff34d1fe98d081a03101265c9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6ebb6a.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:53:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e5c4a10-e033-46cc-a9da-44fe926814ec","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:53:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e5c4a10-e033-46cc-a9da-44fe926814ec","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:53:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e5c4a10-e033-46cc-a9da-44fe926814ec","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6ebb6a/rate-test-model-6ebb6a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:53:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4e5c4a10-e033-46cc-a9da-44fe926814ec","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T14:53:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e5c4a10-e033-46cc-a9da-44fe926814ec","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T14:53:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e5c4a10-e033-46cc-a9da-44fe926814ec","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T14:53:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4e5c4a10-e033-46cc-a9da-44fe926814ec","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T14:53:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4e5c4a10-e033-46cc-a9da-44fe926814ec","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T14:53:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9ee3c81a-d286-47be-aefb-36a566d24ce7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:52746","PortSpecifier":{"PortValue":52746}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9ee3c81a-d286-47be-aefb-36a566d24ce7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1dd877.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T14:53:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9ee3c81a-d286-47be-aefb-36a566d24ce7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:52746","PortSpecifier":{"PortValue":52746}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783090385,"nanos":834365470},"http":{"id":"9ee3c81a-d286-47be-aefb-36a566d24ce7","method":"POST","headers":{":authority":"e2e-shared-b-1dd877.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:53:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9ee3c81a-d286-47be-aefb-36a566d24ce7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T14:53:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9ee3c81a-d286-47be-aefb-36a566d24ce7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"1855d0c8-d07c-417e-9b3f-a12b5b00145c","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=27a9bfa3-ed3c-4129-8f90-1c3d2b27fe8d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/af9f436983f9"]}}
{"level":"debug","ts":"2026-07-03T14:53:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9ee3c81a-d286-47be-aefb-36a566d24ce7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/af9f436983f9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=27a9bfa3-ed3c-4129-8f90-1c3d2b27fe8d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1855d0c8-d07c-417e-9b3f-a12b5b00145c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"72fa94488914449a91242ee66b39aefb8fc61ec53ad224fa7af511146678f878"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1dd877.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:53:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9ee3c81a-d286-47be-aefb-36a566d24ce7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:53:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9ee3c81a-d286-47be-aefb-36a566d24ce7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:53:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9ee3c81a-d286-47be-aefb-36a566d24ce7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1dd877/rate-test-model-1dd877\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:53:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9ee3c81a-d286-47be-aefb-36a566d24ce7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T14:53:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9ee3c81a-d286-47be-aefb-36a566d24ce7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T14:53:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9ee3c81a-d286-47be-aefb-36a566d24ce7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-03T14:53:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9ee3c81a-d286-47be-aefb-36a566d24ce7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T14:53:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9ee3c81a-d286-47be-aefb-36a566d24ce7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T14:53:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1eea480f-b685-4eac-92cb-f81f882fb4cd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:35936","PortSpecifier":{"PortValue":35936}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1eea480f-b685-4eac-92cb-f81f882fb4cd","method":"POST","path":"/ai-tenant-e2e-shared-a-6ebb6a/rate-test-model-6ebb6a/v1/completions","host":"e2e-shared-a-6ebb6a.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T14:53:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1eea480f-b685-4eac-92cb-f81f882fb4cd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:35936","PortSpecifier":{"PortValue":35936}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783090385,"nanos":872354479},"http":{"id":"1eea480f-b685-4eac-92cb-f81f882fb4cd","method":"POST","headers":{":authority":"e2e-shared-a-6ebb6a.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6ebb6a/rate-test-model-6ebb6a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:53:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1eea480f-b685-4eac-92cb-f81f882fb4cd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-wuoAxPx1sMR23Is6_uEy6w1qEtRKOPtT7PqbHm3vuQ19QOP22RSp5nSXyyMe"}
{"level":"debug","ts":"2026-07-03T14:53:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1eea480f-b685-4eac-92cb-f81f882fb4cd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6ebb6a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-wuoAxPx1sMR23Is6_uEy6w1qEtRKOPtT7PqbHm3vuQ19QOP22RSp5nSXyyMe\"}"}
{"level":"debug","ts":"2026-07-03T14:53:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1eea480f-b685-4eac-92cb-f81f882fb4cd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6ebb6a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e7034ce5-3f63-4a70-b25e-d612c13fb29b","keyName":"e2e-rate-a-e09b3c","subscription":"e2e-rate-iso-a-e09b3c","tenant":"e2e-shared-a-6ebb6a","userId":"e7034ce5-3f63-4a70-b25e-d612c13fb29b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-03T14:53:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1eea480f-b685-4eac-92cb-f81f882fb4cd","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6ebb6a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-6ebb6a/rate-test-model-6ebb6a\",\"requestedSubscription\":\"e2e-rate-iso-a-e09b3c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-03T14:53:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1eea480f-b685-4eac-92cb-f81f882fb4cd","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6ebb6a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-6ebb6a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e09b3c","namespace":"ai-tenant-e2e-shared-a-6ebb6a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-03T14:53:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1eea480f-b685-4eac-92cb-f81f882fb4cd","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:53:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1eea480f-b685-4eac-92cb-f81f882fb4cd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:53:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1eea480f-b685-4eac-92cb-f81f882fb4cd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:53:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1eea480f-b685-4eac-92cb-f81f882fb4cd","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:53:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1eea480f-b685-4eac-92cb-f81f882fb4cd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6ebb6a/rate-test-model-6ebb6a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:53:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1eea480f-b685-4eac-92cb-f81f882fb4cd","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T14:53:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1eea480f-b685-4eac-92cb-f81f882fb4cd","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T14:53:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1eea480f-b685-4eac-92cb-f81f882fb4cd","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e09b3c"}
{"level":"debug","ts":"2026-07-03T14:53:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1eea480f-b685-4eac-92cb-f81f882fb4cd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e7034ce5-3f63-4a70-b25e-d612c13fb29b","keyName":"e2e-rate-a-e09b3c","selected_subscription":"e2e-rate-iso-a-e09b3c","selected_subscription_key":"ai-tenant-e2e-shared-a-6ebb6a/e2e-rate-iso-a-e09b3c@ai-tenant-e2e-shared-a-6ebb6a/rate-test-model-6ebb6a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-6ebb6a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e09b3c","namespace":"ai-tenant-e2e-shared-a-6ebb6a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-03T14:53:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1eea480f-b685-4eac-92cb-f81f882fb4cd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T14:53:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1eea480f-b685-4eac-92cb-f81f882fb4cd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T14:53:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dc50d003-5824-491d-94dd-c974ae9f90b0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:35944","PortSpecifier":{"PortValue":35944}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dc50d003-5824-491d-94dd-c974ae9f90b0","method":"POST","path":"/ai-tenant-e2e-shared-a-6ebb6a/rate-test-model-6ebb6a/v1/completions","host":"e2e-shared-a-6ebb6a.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T14:53:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dc50d003-5824-491d-94dd-c974ae9f90b0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:35944","PortSpecifier":{"PortValue":35944}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783090386,"nanos":912852891},"http":{"id":"dc50d003-5824-491d-94dd-c974ae9f90b0","method":"POST","headers":{":authority":"e2e-shared-a-6ebb6a.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6ebb6a/rate-test-model-6ebb6a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:53:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dc50d003-5824-491d-94dd-c974ae9f90b0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-wuoAxPx1sMR23Is6_uEy6w1qEtRKOPtT7PqbHm3vuQ19QOP22RSp5nSXyyMe"}
{"level":"debug","ts":"2026-07-03T14:53:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dc50d003-5824-491d-94dd-c974ae9f90b0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6ebb6a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-wuoAxPx1sMR23Is6_uEy6w1qEtRKOPtT7PqbHm3vuQ19QOP22RSp5nSXyyMe\"}"}
{"level":"debug","ts":"2026-07-03T14:53:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dc50d003-5824-491d-94dd-c974ae9f90b0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6ebb6a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e7034ce5-3f63-4a70-b25e-d612c13fb29b","keyName":"e2e-rate-a-e09b3c","subscription":"e2e-rate-iso-a-e09b3c","tenant":"e2e-shared-a-6ebb6a","userId":"e7034ce5-3f63-4a70-b25e-d612c13fb29b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-03T14:53:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dc50d003-5824-491d-94dd-c974ae9f90b0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6ebb6a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-6ebb6a/rate-test-model-6ebb6a\",\"requestedSubscription\":\"e2e-rate-iso-a-e09b3c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-03T14:53:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dc50d003-5824-491d-94dd-c974ae9f90b0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6ebb6a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-6ebb6a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e09b3c","namespace":"ai-tenant-e2e-shared-a-6ebb6a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-03T14:53:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dc50d003-5824-491d-94dd-c974ae9f90b0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:53:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc50d003-5824-491d-94dd-c974ae9f90b0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:53:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc50d003-5824-491d-94dd-c974ae9f90b0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:53:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc50d003-5824-491d-94dd-c974ae9f90b0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:53:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc50d003-5824-491d-94dd-c974ae9f90b0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6ebb6a/rate-test-model-6ebb6a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:53:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc50d003-5824-491d-94dd-c974ae9f90b0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T14:53:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc50d003-5824-491d-94dd-c974ae9f90b0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e09b3c"}
{"level":"debug","ts":"2026-07-03T14:53:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc50d003-5824-491d-94dd-c974ae9f90b0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T14:53:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc50d003-5824-491d-94dd-c974ae9f90b0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e7034ce5-3f63-4a70-b25e-d612c13fb29b","keyName":"e2e-rate-a-e09b3c","selected_subscription":"e2e-rate-iso-a-e09b3c","selected_subscription_key":"ai-tenant-e2e-shared-a-6ebb6a/e2e-rate-iso-a-e09b3c@ai-tenant-e2e-shared-a-6ebb6a/rate-test-model-6ebb6a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-6ebb6a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e09b3c","namespace":"ai-tenant-e2e-shared-a-6ebb6a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-03T14:53:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dc50d003-5824-491d-94dd-c974ae9f90b0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T14:53:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dc50d003-5824-491d-94dd-c974ae9f90b0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T14:53:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9b1231ec-8f53-4e3a-8836-12b3ad3adad8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:35950","PortSpecifier":{"PortValue":35950}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9b1231ec-8f53-4e3a-8836-12b3ad3adad8","method":"POST","path":"/ai-tenant-e2e-shared-a-6ebb6a/rate-test-model-6ebb6a/v1/completions","host":"e2e-shared-a-6ebb6a.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T14:53:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9b1231ec-8f53-4e3a-8836-12b3ad3adad8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:35950","PortSpecifier":{"PortValue":35950}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783090387,"nanos":950257436},"http":{"id":"9b1231ec-8f53-4e3a-8836-12b3ad3adad8","method":"POST","headers":{":authority":"e2e-shared-a-6ebb6a.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6ebb6a/rate-test-model-6ebb6a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:53:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9b1231ec-8f53-4e3a-8836-12b3ad3adad8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-wuoAxPx1sMR23Is6_uEy6w1qEtRKOPtT7PqbHm3vuQ19QOP22RSp5nSXyyMe"}
{"level":"debug","ts":"2026-07-03T14:53:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9b1231ec-8f53-4e3a-8836-12b3ad3adad8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6ebb6a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-wuoAxPx1sMR23Is6_uEy6w1qEtRKOPtT7PqbHm3vuQ19QOP22RSp5nSXyyMe\"}"}
{"level":"debug","ts":"2026-07-03T14:53:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9b1231ec-8f53-4e3a-8836-12b3ad3adad8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6ebb6a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e7034ce5-3f63-4a70-b25e-d612c13fb29b","keyName":"e2e-rate-a-e09b3c","subscription":"e2e-rate-iso-a-e09b3c","tenant":"e2e-shared-a-6ebb6a","userId":"e7034ce5-3f63-4a70-b25e-d612c13fb29b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-03T14:53:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9b1231ec-8f53-4e3a-8836-12b3ad3adad8","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6ebb6a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-6ebb6a/rate-test-model-6ebb6a\",\"requestedSubscription\":\"e2e-rate-iso-a-e09b3c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-03T14:53:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9b1231ec-8f53-4e3a-8836-12b3ad3adad8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6ebb6a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-6ebb6a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e09b3c","namespace":"ai-tenant-e2e-shared-a-6ebb6a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-03T14:53:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9b1231ec-8f53-4e3a-8836-12b3ad3adad8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:53:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b1231ec-8f53-4e3a-8836-12b3ad3adad8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:53:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b1231ec-8f53-4e3a-8836-12b3ad3adad8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:53:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b1231ec-8f53-4e3a-8836-12b3ad3adad8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:53:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b1231ec-8f53-4e3a-8836-12b3ad3adad8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6ebb6a/rate-test-model-6ebb6a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:53:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b1231ec-8f53-4e3a-8836-12b3ad3adad8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T14:53:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b1231ec-8f53-4e3a-8836-12b3ad3adad8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e09b3c"}
{"level":"debug","ts":"2026-07-03T14:53:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b1231ec-8f53-4e3a-8836-12b3ad3adad8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T14:53:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b1231ec-8f53-4e3a-8836-12b3ad3adad8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e7034ce5-3f63-4a70-b25e-d612c13fb29b","keyName":"e2e-rate-a-e09b3c","selected_subscription":"e2e-rate-iso-a-e09b3c","selected_subscription_key":"ai-tenant-e2e-shared-a-6ebb6a/e2e-rate-iso-a-e09b3c@ai-tenant-e2e-shared-a-6ebb6a/rate-test-model-6ebb6a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-6ebb6a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e09b3c","namespace":"ai-tenant-e2e-shared-a-6ebb6a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-03T14:53:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9b1231ec-8f53-4e3a-8836-12b3ad3adad8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T14:53:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9b1231ec-8f53-4e3a-8836-12b3ad3adad8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T14:53:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"52593a01-2cf9-452f-a86f-49c082ca69e3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:52760","PortSpecifier":{"PortValue":52760}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"52593a01-2cf9-452f-a86f-49c082ca69e3","method":"POST","path":"/ai-tenant-e2e-shared-b-1dd877/rate-test-model-1dd877/v1/completions","host":"e2e-shared-b-1dd877.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T14:53:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"52593a01-2cf9-452f-a86f-49c082ca69e3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:52760","PortSpecifier":{"PortValue":52760}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783090387,"nanos":988307791},"http":{"id":"52593a01-2cf9-452f-a86f-49c082ca69e3","method":"POST","headers":{":authority":"e2e-shared-b-1dd877.apps.7847ab8c-b65a-4357-bd73-af9f436983f9.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-1dd877/rate-test-model-1dd877/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:53:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"52593a01-2cf9-452f-a86f-49c082ca69e3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1O8xtqwWJoX19zmRm_asgGVxLe7gLImKgdWGiAThPMjtI9BL6GFo9kPLMXXHM"}
{"level":"debug","ts":"2026-07-03T14:53:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"52593a01-2cf9-452f-a86f-49c082ca69e3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-1dd877.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1O8xtqwWJoX19zmRm_asgGVxLe7gLImKgdWGiAThPMjtI9BL6GFo9kPLMXXHM\"}"}
{"level":"debug","ts":"2026-07-03T14:53:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"52593a01-2cf9-452f-a86f-49c082ca69e3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-1dd877.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9ae33a8a-ba64-4a95-ac16-b41cb189d263","keyName":"e2e-rate-b-e09b3c","subscription":"e2e-rate-iso-b-e09b3c","tenant":"e2e-shared-b-1dd877","userId":"9ae33a8a-ba64-4a95-ac16-b41cb189d263","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-03T14:53:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"52593a01-2cf9-452f-a86f-49c082ca69e3","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-1dd877.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-1dd877/rate-test-model-1dd877\",\"requestedSubscription\":\"e2e-rate-iso-b-e09b3c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-03T14:53:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"52593a01-2cf9-452f-a86f-49c082ca69e3","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-1dd877.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-1dd877","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-e09b3c","namespace":"ai-tenant-e2e-shared-b-1dd877","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-03T14:53:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"52593a01-2cf9-452f-a86f-49c082ca69e3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:53:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52593a01-2cf9-452f-a86f-49c082ca69e3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:53:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52593a01-2cf9-452f-a86f-49c082ca69e3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:53:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52593a01-2cf9-452f-a86f-49c082ca69e3","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:53:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52593a01-2cf9-452f-a86f-49c082ca69e3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1dd877/rate-test-model-1dd877\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:53:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52593a01-2cf9-452f-a86f-49c082ca69e3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T14:53:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52593a01-2cf9-452f-a86f-49c082ca69e3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-e09b3c"}
{"level":"debug","ts":"2026-07-03T14:53:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52593a01-2cf9-452f-a86f-49c082ca69e3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T14:53:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52593a01-2cf9-452f-a86f-49c082ca69e3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9ae33a8a-ba64-4a95-ac16-b41cb189d263","keyName":"e2e-rate-b-e09b3c","selected_subscription":"e2e-rate-iso-b-e09b3c","selected_subscription_key":"ai-tenant-e2e-shared-b-1dd877/e2e-rate-iso-b-e09b3c@ai-tenant-e2e-shared-b-1dd877/rate-test-model-1dd877","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-1dd877","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-e09b3c","namespace":"ai-tenant-e2e-shared-b-1dd877","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-03T14:53:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"52593a01-2cf9-452f-a86f-49c082ca69e3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T14:53:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"52593a01-2cf9-452f-a86f-49c082ca69e3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T14:53:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/367951b7628aec3fc20ea3e0240896d20f43ca589eb53e75479feda3f8291497"}
{"level":"info","ts":"2026-07-03T14:53:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/030d7009bec719c89d11f8482f153a47d8328bd76ea59ad09ccf92375f817115"}
{"level":"info","ts":"2026-07-03T14:53:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9f5a7c0b455b757d0e91c3f2efddfaf7a3ab2c5edec7105268568812e764de4a"}
{"level":"info","ts":"2026-07-03T14:53:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1d09e65eb68b3ae71ff3565485f74f78c5d1ec9f7155c02b437837ffcc2c6bdf"}
{"level":"info","ts":"2026-07-03T14:53:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/38e9929c19344e9b7323bef9cb8591190c51680ef455239aad01c1dd0d6102ea"}
{"level":"info","ts":"2026-07-03T14:53:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3510ee3ad77b0ce57bc5b07b4e0cb3a9f1bc309636ce17c5aad1736e486200e6"}
{"level":"info","ts":"2026-07-03T14:53:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/920e4c1210dc265839f110b328943dbc173ad6c5981a8a9120e53d85546bed06"}
{"level":"info","ts":"2026-07-03T14:53:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/46d58e2d92e7a8de3e6b687a4f6836f6508bd2b32ce20dc71caf294c4c8c85ae"}
{"level":"info","ts":"2026-07-03T14:53:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ba7b45676f26150acbb1921543ad6f5970e3d4c083702f0cc623caa999b7ba53"}
{"level":"info","ts":"2026-07-03T14:53:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7dd0b0bcc90e1ed3f9abdf28f381ef5d746765ecc242096db53e80d7b6b42afd"}
{"level":"info","ts":"2026-07-03T14:53:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/208414aa4c4ad56954710d6fcd41f2d736d6e28b5886dfdafffca9485dd51ef2"}
{"level":"info","ts":"2026-07-03T14:53:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/09d7eb4d38906bd528eca00e6b2e4f23928cde8137d5b2a65b6022ca33980bec"}
{"level":"info","ts":"2026-07-03T14:53:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e08d48dffd4e56e22c392d89b56b0467c1716f941e7a7bd5b3af198e2edf1b1d"}
{"level":"info","ts":"2026-07-03T14:53:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1111181e5388815f5618ccc1bbb67ae9343ad40ff34d1fe98d081a03101265c9"}
{"level":"info","ts":"2026-07-03T14:53:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7eb0a04c9228b7afa214d023216691661548b6d1e9e12715b08b7b7226339a7d"}
{"level":"info","ts":"2026-07-03T14:53:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c198d2d11832fe77d501e1e986a71beb0bdec9d1475c9fab26a3a68c0c39abda"}
{"level":"info","ts":"2026-07-03T14:53:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e62aeece99f4da9b6bf25205f6f2b6f1fd71db52ec01737a5ebbfb7d70902133"}
{"level":"info","ts":"2026-07-03T14:53:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/638a593d4d8d18aa0843e1d8ad2956d8560651a06746e98426eea7ce5850f322"}
{"level":"info","ts":"2026-07-03T14:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/72fa94488914449a91242ee66b39aefb8fc61ec53ad224fa7af511146678f878"}
{"level":"info","ts":"2026-07-03T14:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c081c27dc685dd75fe3f8352c9def11cb0ca562c389fef10c042164db52c8f6b"}