--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"info","ts":"2026-07-07T22:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76f1c0b0f016640bcfddf984608a259b2ea44558b5ffb94387ef1c24c44f9efb"}
{"level":"debug","ts":"2026-07-07T22:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d38fbf2c5357d325a382939175e7bc43b30a9f696bb0c7249dc1bbf43a6ca5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:39:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:39:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d38fbf2c5357d325a382939175e7bc43b30a9f696bb0c7249dc1bbf43a6ca5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d38fbf2c5357d325a382939175e7bc43b30a9f696bb0c7249dc1bbf43a6ca5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d38fbf2c5357d325a382939175e7bc43b30a9f696bb0c7249dc1bbf43a6ca5a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d38fbf2c5357d325a382939175e7bc43b30a9f696bb0c7249dc1bbf43a6ca5a"}
{"level":"debug","ts":"2026-07-07T22:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d38fbf2c5357d325a382939175e7bc43b30a9f696bb0c7249dc1bbf43a6ca5a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d38fbf2c5357d325a382939175e7bc43b30a9f696bb0c7249dc1bbf43a6ca5a"}
{"level":"debug","ts":"2026-07-07T22:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d38fbf2c5357d325a382939175e7bc43b30a9f696bb0c7249dc1bbf43a6ca5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:39:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:39:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d38fbf2c5357d325a382939175e7bc43b30a9f696bb0c7249dc1bbf43a6ca5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d38fbf2c5357d325a382939175e7bc43b30a9f696bb0c7249dc1bbf43a6ca5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d38fbf2c5357d325a382939175e7bc43b30a9f696bb0c7249dc1bbf43a6ca5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f6aced2c294dead7e973149c3774ec59ce062265ac8d13782b05060d520f8d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:39:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:39:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d38fbf2c5357d325a382939175e7bc43b30a9f696bb0c7249dc1bbf43a6ca5a"}
{"level":"info","ts":"2026-07-07T22:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f6aced2c294dead7e973149c3774ec59ce062265ac8d13782b05060d520f8d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f6aced2c294dead7e973149c3774ec59ce062265ac8d13782b05060d520f8d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:39:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:39:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f6aced2c294dead7e973149c3774ec59ce062265ac8d13782b05060d520f8d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f6aced2c294dead7e973149c3774ec59ce062265ac8d13782b05060d520f8d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:39:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:39:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f6aced2c294dead7e973149c3774ec59ce062265ac8d13782b05060d520f8d2"}
{"level":"error","ts":"2026-07-07T22:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3f6aced2c294dead7e973149c3774ec59ce062265ac8d13782b05060d520f8d2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3f6aced2c294dead7e973149c3774ec59ce062265ac8d13782b05060d520f8d2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T22:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f6aced2c294dead7e973149c3774ec59ce062265ac8d13782b05060d520f8d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f6aced2c294dead7e973149c3774ec59ce062265ac8d13782b05060d520f8d2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f6aced2c294dead7e973149c3774ec59ce062265ac8d13782b05060d520f8d2"}
{"level":"debug","ts":"2026-07-07T22:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52f76a3036bcb130a1dfaa9c3496e735f179a747ca07f6247a9336cb179f83ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:39:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:39:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52f76a3036bcb130a1dfaa9c3496e735f179a747ca07f6247a9336cb179f83ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f7d37e08026814ff806c6c58f5b8d67454d7c414e72f8cd161e42f41b994b22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:39:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:39:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52f76a3036bcb130a1dfaa9c3496e735f179a747ca07f6247a9336cb179f83ca"}
{"level":"info","ts":"2026-07-07T22:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f7d37e08026814ff806c6c58f5b8d67454d7c414e72f8cd161e42f41b994b22","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52f76a3036bcb130a1dfaa9c3496e735f179a747ca07f6247a9336cb179f83ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:39:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:39:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52f76a3036bcb130a1dfaa9c3496e735f179a747ca07f6247a9336cb179f83ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52f76a3036bcb130a1dfaa9c3496e735f179a747ca07f6247a9336cb179f83ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f6aced2c294dead7e973149c3774ec59ce062265ac8d13782b05060d520f8d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:39:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:39:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f6aced2c294dead7e973149c3774ec59ce062265ac8d13782b05060d520f8d2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f7d37e08026814ff806c6c58f5b8d67454d7c414e72f8cd161e42f41b994b22"}
{"level":"info","ts":"2026-07-07T22:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f6aced2c294dead7e973149c3774ec59ce062265ac8d13782b05060d520f8d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f7d37e08026814ff806c6c58f5b8d67454d7c414e72f8cd161e42f41b994b22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:39:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:39:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f7d37e08026814ff806c6c58f5b8d67454d7c414e72f8cd161e42f41b994b22"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f7d37e08026814ff806c6c58f5b8d67454d7c414e72f8cd161e42f41b994b22","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52f76a3036bcb130a1dfaa9c3496e735f179a747ca07f6247a9336cb179f83ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:39:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:39:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52f76a3036bcb130a1dfaa9c3496e735f179a747ca07f6247a9336cb179f83ca"}
{"level":"info","ts":"2026-07-07T22:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52f76a3036bcb130a1dfaa9c3496e735f179a747ca07f6247a9336cb179f83ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f6aced2c294dead7e973149c3774ec59ce062265ac8d13782b05060d520f8d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f7d37e08026814ff806c6c58f5b8d67454d7c414e72f8cd161e42f41b994b22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:39:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:39:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f7d37e08026814ff806c6c58f5b8d67454d7c414e72f8cd161e42f41b994b22","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52f76a3036bcb130a1dfaa9c3496e735f179a747ca07f6247a9336cb179f83ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:39:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:39:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52f76a3036bcb130a1dfaa9c3496e735f179a747ca07f6247a9336cb179f83ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f7d37e08026814ff806c6c58f5b8d67454d7c414e72f8cd161e42f41b994b22"}
{"level":"info","ts":"2026-07-07T22:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52f76a3036bcb130a1dfaa9c3496e735f179a747ca07f6247a9336cb179f83ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f7d37e08026814ff806c6c58f5b8d67454d7c414e72f8cd161e42f41b994b22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:39:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:39:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f7d37e08026814ff806c6c58f5b8d67454d7c414e72f8cd161e42f41b994b22"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f7d37e08026814ff806c6c58f5b8d67454d7c414e72f8cd161e42f41b994b22","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52f76a3036bcb130a1dfaa9c3496e735f179a747ca07f6247a9336cb179f83ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a8567710872db35882e39159253d625ee92e29486331d26f348f7d45fdc1a08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:39:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:39:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f6aced2c294dead7e973149c3774ec59ce062265ac8d13782b05060d520f8d2"}
{"level":"info","ts":"2026-07-07T22:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a8567710872db35882e39159253d625ee92e29486331d26f348f7d45fdc1a08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f7d37e08026814ff806c6c58f5b8d67454d7c414e72f8cd161e42f41b994b22","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a8567710872db35882e39159253d625ee92e29486331d26f348f7d45fdc1a08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a8567710872db35882e39159253d625ee92e29486331d26f348f7d45fdc1a08","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52f76a3036bcb130a1dfaa9c3496e735f179a747ca07f6247a9336cb179f83ca"}
{"level":"debug","ts":"2026-07-07T22:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a8567710872db35882e39159253d625ee92e29486331d26f348f7d45fdc1a08","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f7d37e08026814ff806c6c58f5b8d67454d7c414e72f8cd161e42f41b994b22"}
{"level":"info","ts":"2026-07-07T22:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a8567710872db35882e39159253d625ee92e29486331d26f348f7d45fdc1a08"}
{"level":"debug","ts":"2026-07-07T22:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a8567710872db35882e39159253d625ee92e29486331d26f348f7d45fdc1a08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:39:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:39:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a8567710872db35882e39159253d625ee92e29486331d26f348f7d45fdc1a08"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a8567710872db35882e39159253d625ee92e29486331d26f348f7d45fdc1a08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a8567710872db35882e39159253d625ee92e29486331d26f348f7d45fdc1a08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f335ea392a0cc6c7ef2c0f1f1829624adca5db4594bd385d2dea4ded95707352","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:39:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:39:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f335ea392a0cc6c7ef2c0f1f1829624adca5db4594bd385d2dea4ded95707352","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f335ea392a0cc6c7ef2c0f1f1829624adca5db4594bd385d2dea4ded95707352","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f335ea392a0cc6c7ef2c0f1f1829624adca5db4594bd385d2dea4ded95707352","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a8567710872db35882e39159253d625ee92e29486331d26f348f7d45fdc1a08"}
{"level":"debug","ts":"2026-07-07T22:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f335ea392a0cc6c7ef2c0f1f1829624adca5db4594bd385d2dea4ded95707352","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:39:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:39:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f335ea392a0cc6c7ef2c0f1f1829624adca5db4594bd385d2dea4ded95707352"}
{"level":"info","ts":"2026-07-07T22:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f335ea392a0cc6c7ef2c0f1f1829624adca5db4594bd385d2dea4ded95707352","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f335ea392a0cc6c7ef2c0f1f1829624adca5db4594bd385d2dea4ded95707352","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:39:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:39:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f335ea392a0cc6c7ef2c0f1f1829624adca5db4594bd385d2dea4ded95707352"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f335ea392a0cc6c7ef2c0f1f1829624adca5db4594bd385d2dea4ded95707352","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f335ea392a0cc6c7ef2c0f1f1829624adca5db4594bd385d2dea4ded95707352","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:39:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:39:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f335ea392a0cc6c7ef2c0f1f1829624adca5db4594bd385d2dea4ded95707352"}
{"level":"info","ts":"2026-07-07T22:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f335ea392a0cc6c7ef2c0f1f1829624adca5db4594bd385d2dea4ded95707352","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f335ea392a0cc6c7ef2c0f1f1829624adca5db4594bd385d2dea4ded95707352","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f335ea392a0cc6c7ef2c0f1f1829624adca5db4594bd385d2dea4ded95707352","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f335ea392a0cc6c7ef2c0f1f1829624adca5db4594bd385d2dea4ded95707352"}
{"level":"debug","ts":"2026-07-07T22:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:39:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:39:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f335ea392a0cc6c7ef2c0f1f1829624adca5db4594bd385d2dea4ded95707352","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f335ea392a0cc6c7ef2c0f1f1829624adca5db4594bd385d2dea4ded95707352"}
{"level":"debug","ts":"2026-07-07T22:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:39:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:39:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f335ea392a0cc6c7ef2c0f1f1829624adca5db4594bd385d2dea4ded95707352","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:39:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:39:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f335ea392a0cc6c7ef2c0f1f1829624adca5db4594bd385d2dea4ded95707352"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f335ea392a0cc6c7ef2c0f1f1829624adca5db4594bd385d2dea4ded95707352","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f335ea392a0cc6c7ef2c0f1f1829624adca5db4594bd385d2dea4ded95707352","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89"}
{"level":"info","ts":"2026-07-07T22:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f335ea392a0cc6c7ef2c0f1f1829624adca5db4594bd385d2dea4ded95707352"}
{"level":"debug","ts":"2026-07-07T22:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89"}
{"level":"debug","ts":"2026-07-07T22:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:39:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:39:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:39:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:39:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89"}
{"level":"debug","ts":"2026-07-07T22:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89"}
{"level":"debug","ts":"2026-07-07T22:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:39:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:39:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:39:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:39:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89"}
{"level":"debug","ts":"2026-07-07T22:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89"}
{"level":"debug","ts":"2026-07-07T22:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:39:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:39:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:39:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:39:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89"}
{"level":"debug","ts":"2026-07-07T22:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89"}
{"level":"debug","ts":"2026-07-07T22:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:39:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:39:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:39:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:39:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89"}
{"level":"debug","ts":"2026-07-07T22:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89"}
{"level":"debug","ts":"2026-07-07T22:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:39:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:39:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:39:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:39:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89"}
{"level":"debug","ts":"2026-07-07T22:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89"}
{"level":"debug","ts":"2026-07-07T22:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:39:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:39:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:39:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:39:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89"}
{"level":"debug","ts":"2026-07-07T22:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89"}
{"level":"debug","ts":"2026-07-07T22:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:39:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:39:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:39:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:39:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89"}
{"level":"debug","ts":"2026-07-07T22:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89"}
{"level":"debug","ts":"2026-07-07T22:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:39:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:39:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:39:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:39:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89"}
{"level":"debug","ts":"2026-07-07T22:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89"}
{"level":"debug","ts":"2026-07-07T22:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:39:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:39:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89"}
{"level":"debug","ts":"2026-07-07T22:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cfd2c4dfd8ac4373a7f6c9890e7d89898ba6b3b63ca97806ce9f945a3c92502","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:39:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:39:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6cfd2c4dfd8ac4373a7f6c9890e7d89898ba6b3b63ca97806ce9f945a3c92502","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6cfd2c4dfd8ac4373a7f6c9890e7d89898ba6b3b63ca97806ce9f945a3c92502","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6cfd2c4dfd8ac4373a7f6c9890e7d89898ba6b3b63ca97806ce9f945a3c92502","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6cfd2c4dfd8ac4373a7f6c9890e7d89898ba6b3b63ca97806ce9f945a3c92502"}
{"level":"debug","ts":"2026-07-07T22:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6cfd2c4dfd8ac4373a7f6c9890e7d89898ba6b3b63ca97806ce9f945a3c92502","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6cfd2c4dfd8ac4373a7f6c9890e7d89898ba6b3b63ca97806ce9f945a3c92502"}
{"level":"debug","ts":"2026-07-07T22:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cfd2c4dfd8ac4373a7f6c9890e7d89898ba6b3b63ca97806ce9f945a3c92502","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:39:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:39:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6cfd2c4dfd8ac4373a7f6c9890e7d89898ba6b3b63ca97806ce9f945a3c92502"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6cfd2c4dfd8ac4373a7f6c9890e7d89898ba6b3b63ca97806ce9f945a3c92502","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cfd2c4dfd8ac4373a7f6c9890e7d89898ba6b3b63ca97806ce9f945a3c92502","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:39:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:39:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6cfd2c4dfd8ac4373a7f6c9890e7d89898ba6b3b63ca97806ce9f945a3c92502","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6cfd2c4dfd8ac4373a7f6c9890e7d89898ba6b3b63ca97806ce9f945a3c92502","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6cfd2c4dfd8ac4373a7f6c9890e7d89898ba6b3b63ca97806ce9f945a3c92502","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6cfd2c4dfd8ac4373a7f6c9890e7d89898ba6b3b63ca97806ce9f945a3c92502"}
{"level":"debug","ts":"2026-07-07T22:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6cfd2c4dfd8ac4373a7f6c9890e7d89898ba6b3b63ca97806ce9f945a3c92502","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6cfd2c4dfd8ac4373a7f6c9890e7d89898ba6b3b63ca97806ce9f945a3c92502"}
{"level":"debug","ts":"2026-07-07T22:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6cfd2c4dfd8ac4373a7f6c9890e7d89898ba6b3b63ca97806ce9f945a3c92502","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:39:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:39:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6cfd2c4dfd8ac4373a7f6c9890e7d89898ba6b3b63ca97806ce9f945a3c92502"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6cfd2c4dfd8ac4373a7f6c9890e7d89898ba6b3b63ca97806ce9f945a3c92502","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6cfd2c4dfd8ac4373a7f6c9890e7d89898ba6b3b63ca97806ce9f945a3c92502","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6cfd2c4dfd8ac4373a7f6c9890e7d89898ba6b3b63ca97806ce9f945a3c92502"}
{"level":"debug","ts":"2026-07-07T22:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4bcff1fdf9caa7efcde5d4e78cba0999575f3683e2a0788c6d3246a0ae0c8e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:39:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:39:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4bcff1fdf9caa7efcde5d4e78cba0999575f3683e2a0788c6d3246a0ae0c8e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4bcff1fdf9caa7efcde5d4e78cba0999575f3683e2a0788c6d3246a0ae0c8e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4bcff1fdf9caa7efcde5d4e78cba0999575f3683e2a0788c6d3246a0ae0c8e1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4bcff1fdf9caa7efcde5d4e78cba0999575f3683e2a0788c6d3246a0ae0c8e1"}
{"level":"debug","ts":"2026-07-07T22:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4bcff1fdf9caa7efcde5d4e78cba0999575f3683e2a0788c6d3246a0ae0c8e1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4bcff1fdf9caa7efcde5d4e78cba0999575f3683e2a0788c6d3246a0ae0c8e1"}
{"level":"debug","ts":"2026-07-07T22:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4bcff1fdf9caa7efcde5d4e78cba0999575f3683e2a0788c6d3246a0ae0c8e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:39:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:39:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c4bcff1fdf9caa7efcde5d4e78cba0999575f3683e2a0788c6d3246a0ae0c8e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4bcff1fdf9caa7efcde5d4e78cba0999575f3683e2a0788c6d3246a0ae0c8e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4bcff1fdf9caa7efcde5d4e78cba0999575f3683e2a0788c6d3246a0ae0c8e1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4bcff1fdf9caa7efcde5d4e78cba0999575f3683e2a0788c6d3246a0ae0c8e1"}
{"level":"debug","ts":"2026-07-07T22:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf00188803c7d63f01d6738c0cbb115dbc708689b217668fd751c50b54f12def","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:39:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:39:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf00188803c7d63f01d6738c0cbb115dbc708689b217668fd751c50b54f12def","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf00188803c7d63f01d6738c0cbb115dbc708689b217668fd751c50b54f12def","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf00188803c7d63f01d6738c0cbb115dbc708689b217668fd751c50b54f12def","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf00188803c7d63f01d6738c0cbb115dbc708689b217668fd751c50b54f12def"}
{"level":"debug","ts":"2026-07-07T22:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf00188803c7d63f01d6738c0cbb115dbc708689b217668fd751c50b54f12def","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf00188803c7d63f01d6738c0cbb115dbc708689b217668fd751c50b54f12def"}
{"level":"debug","ts":"2026-07-07T22:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf00188803c7d63f01d6738c0cbb115dbc708689b217668fd751c50b54f12def","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:39:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:39:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bf00188803c7d63f01d6738c0cbb115dbc708689b217668fd751c50b54f12def"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf00188803c7d63f01d6738c0cbb115dbc708689b217668fd751c50b54f12def","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf00188803c7d63f01d6738c0cbb115dbc708689b217668fd751c50b54f12def","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7ff2581e8e63a9b257f0a636dae9036f6688dd047f742529bc472b57a7ef418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:39:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:39:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf00188803c7d63f01d6738c0cbb115dbc708689b217668fd751c50b54f12def"}
{"level":"info","ts":"2026-07-07T22:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7ff2581e8e63a9b257f0a636dae9036f6688dd047f742529bc472b57a7ef418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29d50430366dffb7baa5506cee3415d8e7f8539e83044007a3b573b8bd429bb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:39:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:39:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29d50430366dffb7baa5506cee3415d8e7f8539e83044007a3b573b8bd429bb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7ff2581e8e63a9b257f0a636dae9036f6688dd047f742529bc472b57a7ef418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:39:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:39:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7ff2581e8e63a9b257f0a636dae9036f6688dd047f742529bc472b57a7ef418"}
{"level":"info","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7ff2581e8e63a9b257f0a636dae9036f6688dd047f742529bc472b57a7ef418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29d50430366dffb7baa5506cee3415d8e7f8539e83044007a3b573b8bd429bb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:39:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:39:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29d50430366dffb7baa5506cee3415d8e7f8539e83044007a3b573b8bd429bb3"}
{"level":"info","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29d50430366dffb7baa5506cee3415d8e7f8539e83044007a3b573b8bd429bb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7ff2581e8e63a9b257f0a636dae9036f6688dd047f742529bc472b57a7ef418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29d50430366dffb7baa5506cee3415d8e7f8539e83044007a3b573b8bd429bb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:39:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:39:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29d50430366dffb7baa5506cee3415d8e7f8539e83044007a3b573b8bd429bb3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29d50430366dffb7baa5506cee3415d8e7f8539e83044007a3b573b8bd429bb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29d50430366dffb7baa5506cee3415d8e7f8539e83044007a3b573b8bd429bb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:39:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:39:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29d50430366dffb7baa5506cee3415d8e7f8539e83044007a3b573b8bd429bb3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7ff2581e8e63a9b257f0a636dae9036f6688dd047f742529bc472b57a7ef418"}
{"level":"error","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"29d50430366dffb7baa5506cee3415d8e7f8539e83044007a3b573b8bd429bb3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"29d50430366dffb7baa5506cee3415d8e7f8539e83044007a3b573b8bd429bb3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7ff2581e8e63a9b257f0a636dae9036f6688dd047f742529bc472b57a7ef418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:39:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:39:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c7ff2581e8e63a9b257f0a636dae9036f6688dd047f742529bc472b57a7ef418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7ff2581e8e63a9b257f0a636dae9036f6688dd047f742529bc472b57a7ef418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29d50430366dffb7baa5506cee3415d8e7f8539e83044007a3b573b8bd429bb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:39:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:39:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29d50430366dffb7baa5506cee3415d8e7f8539e83044007a3b573b8bd429bb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7ff2581e8e63a9b257f0a636dae9036f6688dd047f742529bc472b57a7ef418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"640042a87499b5ecbdbc27a1364d54ceaaece23e8d7690594d7b126b7cfbb3c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:39:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:39:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"640042a87499b5ecbdbc27a1364d54ceaaece23e8d7690594d7b126b7cfbb3c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29d50430366dffb7baa5506cee3415d8e7f8539e83044007a3b573b8bd429bb3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29d50430366dffb7baa5506cee3415d8e7f8539e83044007a3b573b8bd429bb3"}
{"level":"debug","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"640042a87499b5ecbdbc27a1364d54ceaaece23e8d7690594d7b126b7cfbb3c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"640042a87499b5ecbdbc27a1364d54ceaaece23e8d7690594d7b126b7cfbb3c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29d50430366dffb7baa5506cee3415d8e7f8539e83044007a3b573b8bd429bb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:39:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:39:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29d50430366dffb7baa5506cee3415d8e7f8539e83044007a3b573b8bd429bb3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29d50430366dffb7baa5506cee3415d8e7f8539e83044007a3b573b8bd429bb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"640042a87499b5ecbdbc27a1364d54ceaaece23e8d7690594d7b126b7cfbb3c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29d50430366dffb7baa5506cee3415d8e7f8539e83044007a3b573b8bd429bb3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7ff2581e8e63a9b257f0a636dae9036f6688dd047f742529bc472b57a7ef418"}
{"level":"info","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/640042a87499b5ecbdbc27a1364d54ceaaece23e8d7690594d7b126b7cfbb3c5"}
{"level":"debug","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb6677a84f2011c8778e746156db2939d5a85331d1da5327e5a965925b8554bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:39:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:39:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb6677a84f2011c8778e746156db2939d5a85331d1da5327e5a965925b8554bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"640042a87499b5ecbdbc27a1364d54ceaaece23e8d7690594d7b126b7cfbb3c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:39:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:39:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["640042a87499b5ecbdbc27a1364d54ceaaece23e8d7690594d7b126b7cfbb3c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29d50430366dffb7baa5506cee3415d8e7f8539e83044007a3b573b8bd429bb3"}
{"level":"info","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"640042a87499b5ecbdbc27a1364d54ceaaece23e8d7690594d7b126b7cfbb3c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a381ef84795049e53ccfc27eaf9e3cb72f34c5e61e5932e68dbcdc29b57ed81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:39:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:39:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a381ef84795049e53ccfc27eaf9e3cb72f34c5e61e5932e68dbcdc29b57ed81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb6677a84f2011c8778e746156db2939d5a85331d1da5327e5a965925b8554bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:39:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:39:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb6677a84f2011c8778e746156db2939d5a85331d1da5327e5a965925b8554bd"}
{"level":"info","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb6677a84f2011c8778e746156db2939d5a85331d1da5327e5a965925b8554bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"640042a87499b5ecbdbc27a1364d54ceaaece23e8d7690594d7b126b7cfbb3c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a381ef84795049e53ccfc27eaf9e3cb72f34c5e61e5932e68dbcdc29b57ed81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:39:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:39:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a381ef84795049e53ccfc27eaf9e3cb72f34c5e61e5932e68dbcdc29b57ed81","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a381ef84795049e53ccfc27eaf9e3cb72f34c5e61e5932e68dbcdc29b57ed81"}
{"level":"debug","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb6677a84f2011c8778e746156db2939d5a85331d1da5327e5a965925b8554bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:39:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:39:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb6677a84f2011c8778e746156db2939d5a85331d1da5327e5a965925b8554bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb6677a84f2011c8778e746156db2939d5a85331d1da5327e5a965925b8554bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a381ef84795049e53ccfc27eaf9e3cb72f34c5e61e5932e68dbcdc29b57ed81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:39:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:39:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a381ef84795049e53ccfc27eaf9e3cb72f34c5e61e5932e68dbcdc29b57ed81"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/640042a87499b5ecbdbc27a1364d54ceaaece23e8d7690594d7b126b7cfbb3c5"}
{"level":"info","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a381ef84795049e53ccfc27eaf9e3cb72f34c5e61e5932e68dbcdc29b57ed81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb6677a84f2011c8778e746156db2939d5a85331d1da5327e5a965925b8554bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:39:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:39:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb6677a84f2011c8778e746156db2939d5a85331d1da5327e5a965925b8554bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a381ef84795049e53ccfc27eaf9e3cb72f34c5e61e5932e68dbcdc29b57ed81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb6677a84f2011c8778e746156db2939d5a85331d1da5327e5a965925b8554bd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb6677a84f2011c8778e746156db2939d5a85331d1da5327e5a965925b8554bd"}
{"level":"debug","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb6677a84f2011c8778e746156db2939d5a85331d1da5327e5a965925b8554bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:39:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:39:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb6677a84f2011c8778e746156db2939d5a85331d1da5327e5a965925b8554bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb6677a84f2011c8778e746156db2939d5a85331d1da5327e5a965925b8554bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb6677a84f2011c8778e746156db2939d5a85331d1da5327e5a965925b8554bd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a381ef84795049e53ccfc27eaf9e3cb72f34c5e61e5932e68dbcdc29b57ed81"}
{"level":"info","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb6677a84f2011c8778e746156db2939d5a85331d1da5327e5a965925b8554bd"}
{"level":"debug","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"492311c00f56d366859f1d8158714acf56d0d2b2240f57bdf0465e7d88dc0e60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:39:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:39:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"492311c00f56d366859f1d8158714acf56d0d2b2240f57bdf0465e7d88dc0e60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"492311c00f56d366859f1d8158714acf56d0d2b2240f57bdf0465e7d88dc0e60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"492311c00f56d366859f1d8158714acf56d0d2b2240f57bdf0465e7d88dc0e60","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/492311c00f56d366859f1d8158714acf56d0d2b2240f57bdf0465e7d88dc0e60"}
{"level":"debug","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"492311c00f56d366859f1d8158714acf56d0d2b2240f57bdf0465e7d88dc0e60","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/492311c00f56d366859f1d8158714acf56d0d2b2240f57bdf0465e7d88dc0e60"}
{"level":"debug","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"492311c00f56d366859f1d8158714acf56d0d2b2240f57bdf0465e7d88dc0e60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:39:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:39:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["492311c00f56d366859f1d8158714acf56d0d2b2240f57bdf0465e7d88dc0e60"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"492311c00f56d366859f1d8158714acf56d0d2b2240f57bdf0465e7d88dc0e60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"492311c00f56d366859f1d8158714acf56d0d2b2240f57bdf0465e7d88dc0e60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:39:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:39:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"492311c00f56d366859f1d8158714acf56d0d2b2240f57bdf0465e7d88dc0e60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec4acbc0b4834edbe694cd6ab27e4f9e7f59bd9013a484d94cd7de4a1b92357d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:39:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:39:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/492311c00f56d366859f1d8158714acf56d0d2b2240f57bdf0465e7d88dc0e60"}
{"level":"info","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec4acbc0b4834edbe694cd6ab27e4f9e7f59bd9013a484d94cd7de4a1b92357d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"492311c00f56d366859f1d8158714acf56d0d2b2240f57bdf0465e7d88dc0e60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:39:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:39:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["492311c00f56d366859f1d8158714acf56d0d2b2240f57bdf0465e7d88dc0e60"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"492311c00f56d366859f1d8158714acf56d0d2b2240f57bdf0465e7d88dc0e60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec4acbc0b4834edbe694cd6ab27e4f9e7f59bd9013a484d94cd7de4a1b92357d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:39:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:39:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec4acbc0b4834edbe694cd6ab27e4f9e7f59bd9013a484d94cd7de4a1b92357d"}
{"level":"info","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec4acbc0b4834edbe694cd6ab27e4f9e7f59bd9013a484d94cd7de4a1b92357d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"492311c00f56d366859f1d8158714acf56d0d2b2240f57bdf0465e7d88dc0e60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:39:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:39:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"492311c00f56d366859f1d8158714acf56d0d2b2240f57bdf0465e7d88dc0e60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec4acbc0b4834edbe694cd6ab27e4f9e7f59bd9013a484d94cd7de4a1b92357d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:39:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:39:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec4acbc0b4834edbe694cd6ab27e4f9e7f59bd9013a484d94cd7de4a1b92357d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/492311c00f56d366859f1d8158714acf56d0d2b2240f57bdf0465e7d88dc0e60"}
{"level":"info","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec4acbc0b4834edbe694cd6ab27e4f9e7f59bd9013a484d94cd7de4a1b92357d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"492311c00f56d366859f1d8158714acf56d0d2b2240f57bdf0465e7d88dc0e60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:39:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:39:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["492311c00f56d366859f1d8158714acf56d0d2b2240f57bdf0465e7d88dc0e60"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"492311c00f56d366859f1d8158714acf56d0d2b2240f57bdf0465e7d88dc0e60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec4acbc0b4834edbe694cd6ab27e4f9e7f59bd9013a484d94cd7de4a1b92357d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:39:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:39:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec4acbc0b4834edbe694cd6ab27e4f9e7f59bd9013a484d94cd7de4a1b92357d"}
{"level":"info","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec4acbc0b4834edbe694cd6ab27e4f9e7f59bd9013a484d94cd7de4a1b92357d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"492311c00f56d366859f1d8158714acf56d0d2b2240f57bdf0465e7d88dc0e60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:39:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:39:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/492311c00f56d366859f1d8158714acf56d0d2b2240f57bdf0465e7d88dc0e60"}
{"level":"info","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"492311c00f56d366859f1d8158714acf56d0d2b2240f57bdf0465e7d88dc0e60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec4acbc0b4834edbe694cd6ab27e4f9e7f59bd9013a484d94cd7de4a1b92357d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"492311c00f56d366859f1d8158714acf56d0d2b2240f57bdf0465e7d88dc0e60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:39:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:39:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["492311c00f56d366859f1d8158714acf56d0d2b2240f57bdf0465e7d88dc0e60"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"492311c00f56d366859f1d8158714acf56d0d2b2240f57bdf0465e7d88dc0e60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec4acbc0b4834edbe694cd6ab27e4f9e7f59bd9013a484d94cd7de4a1b92357d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"492311c00f56d366859f1d8158714acf56d0d2b2240f57bdf0465e7d88dc0e60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:39:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:39:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["492311c00f56d366859f1d8158714acf56d0d2b2240f57bdf0465e7d88dc0e60"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec4acbc0b4834edbe694cd6ab27e4f9e7f59bd9013a484d94cd7de4a1b92357d"}
{"level":"error","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"492311c00f56d366859f1d8158714acf56d0d2b2240f57bdf0465e7d88dc0e60","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"492311c00f56d366859f1d8158714acf56d0d2b2240f57bdf0465e7d88dc0e60\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"492311c00f56d366859f1d8158714acf56d0d2b2240f57bdf0465e7d88dc0e60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:39:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:39:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"492311c00f56d366859f1d8158714acf56d0d2b2240f57bdf0465e7d88dc0e60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec4acbc0b4834edbe694cd6ab27e4f9e7f59bd9013a484d94cd7de4a1b92357d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:39:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:39:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec4acbc0b4834edbe694cd6ab27e4f9e7f59bd9013a484d94cd7de4a1b92357d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/492311c00f56d366859f1d8158714acf56d0d2b2240f57bdf0465e7d88dc0e60"}
{"level":"info","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec4acbc0b4834edbe694cd6ab27e4f9e7f59bd9013a484d94cd7de4a1b92357d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"492311c00f56d366859f1d8158714acf56d0d2b2240f57bdf0465e7d88dc0e60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec4acbc0b4834edbe694cd6ab27e4f9e7f59bd9013a484d94cd7de4a1b92357d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/492311c00f56d366859f1d8158714acf56d0d2b2240f57bdf0465e7d88dc0e60"}
{"level":"debug","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"492311c00f56d366859f1d8158714acf56d0d2b2240f57bdf0465e7d88dc0e60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:39:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:39:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["492311c00f56d366859f1d8158714acf56d0d2b2240f57bdf0465e7d88dc0e60"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"492311c00f56d366859f1d8158714acf56d0d2b2240f57bdf0465e7d88dc0e60","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec4acbc0b4834edbe694cd6ab27e4f9e7f59bd9013a484d94cd7de4a1b92357d"}
{"level":"debug","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"492311c00f56d366859f1d8158714acf56d0d2b2240f57bdf0465e7d88dc0e60","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/492311c00f56d366859f1d8158714acf56d0d2b2240f57bdf0465e7d88dc0e60"}
{"level":"info","ts":"2026-07-07T22:39:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"09527d35-a7fe-4d01-9920-66a5cba343cd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:52026","PortSpecifier":{"PortValue":52026}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"09527d35-a7fe-4d01-9920-66a5cba343cd","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-41e952.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T22:39:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"09527d35-a7fe-4d01-9920-66a5cba343cd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:52026","PortSpecifier":{"PortValue":52026}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783463961,"nanos":333350376},"http":{"id":"09527d35-a7fe-4d01-9920-66a5cba343cd","method":"POST","headers":{":authority":"e2e-shared-a-41e952.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T22:39:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"09527d35-a7fe-4d01-9920-66a5cba343cd","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T22:39:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"09527d35-a7fe-4d01-9920-66a5cba343cd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bb4924e6-aa4e-47bc-bc23-287bb2409310","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20e4333-b741-405f-90ea-62e9cb59fc3b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7352d9229b8d"]}}
{"level":"debug","ts":"2026-07-07T22:39:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"09527d35-a7fe-4d01-9920-66a5cba343cd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7352d9229b8d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20e4333-b741-405f-90ea-62e9cb59fc3b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bb4924e6-aa4e-47bc-bc23-287bb2409310","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9a8567710872db35882e39159253d625ee92e29486331d26f348f7d45fdc1a08"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-41e952.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T22:39:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09527d35-a7fe-4d01-9920-66a5cba343cd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:39:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09527d35-a7fe-4d01-9920-66a5cba343cd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:39:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09527d35-a7fe-4d01-9920-66a5cba343cd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-41e952/auth-test-model-41e952\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:39:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"09527d35-a7fe-4d01-9920-66a5cba343cd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T22:39:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"09527d35-a7fe-4d01-9920-66a5cba343cd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T22:39:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"09527d35-a7fe-4d01-9920-66a5cba343cd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T22:39:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"09527d35-a7fe-4d01-9920-66a5cba343cd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T22:39:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"09527d35-a7fe-4d01-9920-66a5cba343cd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T22:39:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1082ada8-e2bb-4996-a2d3-339b599310a0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:54896","PortSpecifier":{"PortValue":54896}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1082ada8-e2bb-4996-a2d3-339b599310a0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a4bfe6.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T22:39:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1082ada8-e2bb-4996-a2d3-339b599310a0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:54896","PortSpecifier":{"PortValue":54896}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783463961,"nanos":394278623},"http":{"id":"1082ada8-e2bb-4996-a2d3-339b599310a0","method":"POST","headers":{":authority":"e2e-shared-b-a4bfe6.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T22:39:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1082ada8-e2bb-4996-a2d3-339b599310a0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T22:39:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1082ada8-e2bb-4996-a2d3-339b599310a0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bb4924e6-aa4e-47bc-bc23-287bb2409310","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20e4333-b741-405f-90ea-62e9cb59fc3b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7352d9229b8d"]}}
{"level":"debug","ts":"2026-07-07T22:39:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1082ada8-e2bb-4996-a2d3-339b599310a0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7352d9229b8d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20e4333-b741-405f-90ea-62e9cb59fc3b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bb4924e6-aa4e-47bc-bc23-287bb2409310","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"eb6677a84f2011c8778e746156db2939d5a85331d1da5327e5a965925b8554bd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a4bfe6.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T22:39:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1082ada8-e2bb-4996-a2d3-339b599310a0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:39:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1082ada8-e2bb-4996-a2d3-339b599310a0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:39:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1082ada8-e2bb-4996-a2d3-339b599310a0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a4bfe6/auth-test-model-a4bfe6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:39:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1082ada8-e2bb-4996-a2d3-339b599310a0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T22:39:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1082ada8-e2bb-4996-a2d3-339b599310a0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T22:39:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1082ada8-e2bb-4996-a2d3-339b599310a0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T22:39:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1082ada8-e2bb-4996-a2d3-339b599310a0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T22:39:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1082ada8-e2bb-4996-a2d3-339b599310a0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T22:39:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2cc1b598-18d8-49a4-a0c7-abecb28998c0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:52042","PortSpecifier":{"PortValue":52042}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2cc1b598-18d8-49a4-a0c7-abecb28998c0","method":"GET","path":"/maas-api/v1/api-keys/096e0e08-4148-4dad-a53b-8ea3aac263db","host":"e2e-shared-a-41e952.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T22:39:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2cc1b598-18d8-49a4-a0c7-abecb28998c0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:52042","PortSpecifier":{"PortValue":52042}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783463961,"nanos":464839165},"http":{"id":"2cc1b598-18d8-49a4-a0c7-abecb28998c0","method":"GET","headers":{":authority":"e2e-shared-a-41e952.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/096e0e08-4148-4dad-a53b-8ea3aac263db",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T22:39:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2cc1b598-18d8-49a4-a0c7-abecb28998c0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T22:39:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2cc1b598-18d8-49a4-a0c7-abecb28998c0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bb4924e6-aa4e-47bc-bc23-287bb2409310","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20e4333-b741-405f-90ea-62e9cb59fc3b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7352d9229b8d"]}}
{"level":"debug","ts":"2026-07-07T22:39:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2cc1b598-18d8-49a4-a0c7-abecb28998c0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7352d9229b8d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20e4333-b741-405f-90ea-62e9cb59fc3b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bb4924e6-aa4e-47bc-bc23-287bb2409310","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9a8567710872db35882e39159253d625ee92e29486331d26f348f7d45fdc1a08"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-41e952.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/096e0e08-4148-4dad-a53b-8ea3aac263db",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T22:39:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2cc1b598-18d8-49a4-a0c7-abecb28998c0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:39:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2cc1b598-18d8-49a4-a0c7-abecb28998c0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:39:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2cc1b598-18d8-49a4-a0c7-abecb28998c0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-41e952/auth-test-model-41e952\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:39:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2cc1b598-18d8-49a4-a0c7-abecb28998c0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T22:39:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2cc1b598-18d8-49a4-a0c7-abecb28998c0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T22:39:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2cc1b598-18d8-49a4-a0c7-abecb28998c0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T22:39:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2cc1b598-18d8-49a4-a0c7-abecb28998c0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T22:39:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2cc1b598-18d8-49a4-a0c7-abecb28998c0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T22:39:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b878c130-a568-4b93-940f-a68ef24ae5d7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:54910","PortSpecifier":{"PortValue":54910}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b878c130-a568-4b93-940f-a68ef24ae5d7","method":"GET","path":"/maas-api/v1/api-keys/9aad06ea-71e1-476d-bb5a-ec9806d6e41c","host":"e2e-shared-b-a4bfe6.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T22:39:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b878c130-a568-4b93-940f-a68ef24ae5d7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:54910","PortSpecifier":{"PortValue":54910}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783463961,"nanos":502502379},"http":{"id":"b878c130-a568-4b93-940f-a68ef24ae5d7","method":"GET","headers":{":authority":"e2e-shared-b-a4bfe6.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/9aad06ea-71e1-476d-bb5a-ec9806d6e41c",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T22:39:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b878c130-a568-4b93-940f-a68ef24ae5d7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T22:39:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b878c130-a568-4b93-940f-a68ef24ae5d7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bb4924e6-aa4e-47bc-bc23-287bb2409310","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20e4333-b741-405f-90ea-62e9cb59fc3b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7352d9229b8d"]}}
{"level":"debug","ts":"2026-07-07T22:39:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b878c130-a568-4b93-940f-a68ef24ae5d7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7352d9229b8d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20e4333-b741-405f-90ea-62e9cb59fc3b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bb4924e6-aa4e-47bc-bc23-287bb2409310","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"eb6677a84f2011c8778e746156db2939d5a85331d1da5327e5a965925b8554bd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a4bfe6.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/9aad06ea-71e1-476d-bb5a-ec9806d6e41c",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T22:39:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b878c130-a568-4b93-940f-a68ef24ae5d7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:39:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b878c130-a568-4b93-940f-a68ef24ae5d7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:39:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b878c130-a568-4b93-940f-a68ef24ae5d7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a4bfe6/auth-test-model-a4bfe6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:39:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b878c130-a568-4b93-940f-a68ef24ae5d7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T22:39:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b878c130-a568-4b93-940f-a68ef24ae5d7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T22:39:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b878c130-a568-4b93-940f-a68ef24ae5d7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T22:39:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b878c130-a568-4b93-940f-a68ef24ae5d7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T22:39:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b878c130-a568-4b93-940f-a68ef24ae5d7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T22:39:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"362c3dc8-2d22-422e-bb39-1a04ba9f4cbd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:39490","PortSpecifier":{"PortValue":39490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"362c3dc8-2d22-422e-bb39-1a04ba9f4cbd","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-41e952.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T22:39:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"362c3dc8-2d22-422e-bb39-1a04ba9f4cbd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:39490","PortSpecifier":{"PortValue":39490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783463978,"nanos":558140951},"http":{"id":"362c3dc8-2d22-422e-bb39-1a04ba9f4cbd","method":"POST","headers":{":authority":"e2e-shared-a-41e952.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T22:39:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"362c3dc8-2d22-422e-bb39-1a04ba9f4cbd","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T22:39:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"362c3dc8-2d22-422e-bb39-1a04ba9f4cbd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bb4924e6-aa4e-47bc-bc23-287bb2409310","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20e4333-b741-405f-90ea-62e9cb59fc3b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7352d9229b8d"]}}
{"level":"debug","ts":"2026-07-07T22:39:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"362c3dc8-2d22-422e-bb39-1a04ba9f4cbd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7352d9229b8d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20e4333-b741-405f-90ea-62e9cb59fc3b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bb4924e6-aa4e-47bc-bc23-287bb2409310","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9a8567710872db35882e39159253d625ee92e29486331d26f348f7d45fdc1a08"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-41e952.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T22:39:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"362c3dc8-2d22-422e-bb39-1a04ba9f4cbd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:39:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"362c3dc8-2d22-422e-bb39-1a04ba9f4cbd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:39:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"362c3dc8-2d22-422e-bb39-1a04ba9f4cbd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-41e952/auth-test-model-41e952\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:39:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"362c3dc8-2d22-422e-bb39-1a04ba9f4cbd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T22:39:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"362c3dc8-2d22-422e-bb39-1a04ba9f4cbd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T22:39:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"362c3dc8-2d22-422e-bb39-1a04ba9f4cbd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T22:39:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"362c3dc8-2d22-422e-bb39-1a04ba9f4cbd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T22:39:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"362c3dc8-2d22-422e-bb39-1a04ba9f4cbd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T22:39:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"407d0962-9ccd-4312-ad2d-efb8b9071cce","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:39422","PortSpecifier":{"PortValue":39422}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"407d0962-9ccd-4312-ad2d-efb8b9071cce","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a4bfe6.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T22:39:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"407d0962-9ccd-4312-ad2d-efb8b9071cce","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:39422","PortSpecifier":{"PortValue":39422}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783463978,"nanos":595061006},"http":{"id":"407d0962-9ccd-4312-ad2d-efb8b9071cce","method":"POST","headers":{":authority":"e2e-shared-b-a4bfe6.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T22:39:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"407d0962-9ccd-4312-ad2d-efb8b9071cce","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T22:39:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"407d0962-9ccd-4312-ad2d-efb8b9071cce","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bb4924e6-aa4e-47bc-bc23-287bb2409310","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20e4333-b741-405f-90ea-62e9cb59fc3b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7352d9229b8d"]}}
{"level":"debug","ts":"2026-07-07T22:39:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"407d0962-9ccd-4312-ad2d-efb8b9071cce","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7352d9229b8d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20e4333-b741-405f-90ea-62e9cb59fc3b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bb4924e6-aa4e-47bc-bc23-287bb2409310","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"eb6677a84f2011c8778e746156db2939d5a85331d1da5327e5a965925b8554bd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a4bfe6.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T22:39:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"407d0962-9ccd-4312-ad2d-efb8b9071cce","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:39:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"407d0962-9ccd-4312-ad2d-efb8b9071cce","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:39:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"407d0962-9ccd-4312-ad2d-efb8b9071cce","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a4bfe6/auth-test-model-a4bfe6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:39:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"407d0962-9ccd-4312-ad2d-efb8b9071cce","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T22:39:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"407d0962-9ccd-4312-ad2d-efb8b9071cce","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T22:39:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"407d0962-9ccd-4312-ad2d-efb8b9071cce","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T22:39:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"407d0962-9ccd-4312-ad2d-efb8b9071cce","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T22:39:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"407d0962-9ccd-4312-ad2d-efb8b9071cce","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T22:39:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fa6910ff-9325-4acb-b0f2-e69386424793","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:39500","PortSpecifier":{"PortValue":39500}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fa6910ff-9325-4acb-b0f2-e69386424793","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-41e952.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T22:39:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fa6910ff-9325-4acb-b0f2-e69386424793","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:39500","PortSpecifier":{"PortValue":39500}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783463978,"nanos":630345421},"http":{"id":"fa6910ff-9325-4acb-b0f2-e69386424793","method":"GET","headers":{":authority":"e2e-shared-a-41e952.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T22:39:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fa6910ff-9325-4acb-b0f2-e69386424793","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-4Ar0dZYr06vjCeFK_4ECZBtPuCSoaOryMaTZbgZKgAPrJ6t8L3ml6rbkmMI"}
{"level":"debug","ts":"2026-07-07T22:39:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fa6910ff-9325-4acb-b0f2-e69386424793","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-41e952.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-4Ar0dZYr06vjCeFK_4ECZBtPuCSoaOryMaTZbgZKgAPrJ6t8L3ml6rbkmMI\"}"}
{"level":"debug","ts":"2026-07-07T22:39:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fa6910ff-9325-4acb-b0f2-e69386424793","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-41e952.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b30ad3f3-aef2-496e-b813-f6bd6bd091f5","keyName":"e2e-auth-iso-a-af45d7","subscription":"e2e-auth-iso-ae2155","tenant":"e2e-shared-a-41e952","userId":"b30ad3f3-aef2-496e-b813-f6bd6bd091f5","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T22:39:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fa6910ff-9325-4acb-b0f2-e69386424793","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T22:39:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa6910ff-9325-4acb-b0f2-e69386424793","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:39:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa6910ff-9325-4acb-b0f2-e69386424793","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:39:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa6910ff-9325-4acb-b0f2-e69386424793","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-41e952/auth-test-model-41e952\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:39:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa6910ff-9325-4acb-b0f2-e69386424793","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T22:39:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa6910ff-9325-4acb-b0f2-e69386424793","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-ae2155"}
{"level":"debug","ts":"2026-07-07T22:39:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa6910ff-9325-4acb-b0f2-e69386424793","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T22:39:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fa6910ff-9325-4acb-b0f2-e69386424793","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-07T22:39:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fa6910ff-9325-4acb-b0f2-e69386424793","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T22:39:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fa6910ff-9325-4acb-b0f2-e69386424793","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T22:39:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c7c66adf-beb0-4aa6-a392-d67152f238be","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:38496","PortSpecifier":{"PortValue":38496}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c7c66adf-beb0-4aa6-a392-d67152f238be","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-41e952.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T22:39:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c7c66adf-beb0-4aa6-a392-d67152f238be","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:38496","PortSpecifier":{"PortValue":38496}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783463995,"nanos":676755728},"http":{"id":"c7c66adf-beb0-4aa6-a392-d67152f238be","method":"POST","headers":{":authority":"e2e-shared-a-41e952.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T22:39:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c7c66adf-beb0-4aa6-a392-d67152f238be","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T22:39:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c7c66adf-beb0-4aa6-a392-d67152f238be","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bb4924e6-aa4e-47bc-bc23-287bb2409310","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20e4333-b741-405f-90ea-62e9cb59fc3b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7352d9229b8d"]}}
{"level":"debug","ts":"2026-07-07T22:39:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c7c66adf-beb0-4aa6-a392-d67152f238be","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7352d9229b8d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20e4333-b741-405f-90ea-62e9cb59fc3b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bb4924e6-aa4e-47bc-bc23-287bb2409310","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9a8567710872db35882e39159253d625ee92e29486331d26f348f7d45fdc1a08"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-41e952.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T22:39:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c7c66adf-beb0-4aa6-a392-d67152f238be","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:39:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c7c66adf-beb0-4aa6-a392-d67152f238be","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:39:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c7c66adf-beb0-4aa6-a392-d67152f238be","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-41e952/auth-test-model-41e952\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:39:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c7c66adf-beb0-4aa6-a392-d67152f238be","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T22:39:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c7c66adf-beb0-4aa6-a392-d67152f238be","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T22:39:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c7c66adf-beb0-4aa6-a392-d67152f238be","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T22:39:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c7c66adf-beb0-4aa6-a392-d67152f238be","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T22:39:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c7c66adf-beb0-4aa6-a392-d67152f238be","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T22:39:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2a5ffeca-5c72-43d6-aa8d-2f726fd2fd96","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:54428","PortSpecifier":{"PortValue":54428}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2a5ffeca-5c72-43d6-aa8d-2f726fd2fd96","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a4bfe6.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T22:39:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2a5ffeca-5c72-43d6-aa8d-2f726fd2fd96","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:54428","PortSpecifier":{"PortValue":54428}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783463995,"nanos":713693272},"http":{"id":"2a5ffeca-5c72-43d6-aa8d-2f726fd2fd96","method":"POST","headers":{":authority":"e2e-shared-b-a4bfe6.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T22:39:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2a5ffeca-5c72-43d6-aa8d-2f726fd2fd96","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T22:39:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2a5ffeca-5c72-43d6-aa8d-2f726fd2fd96","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bb4924e6-aa4e-47bc-bc23-287bb2409310","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20e4333-b741-405f-90ea-62e9cb59fc3b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7352d9229b8d"]}}
{"level":"debug","ts":"2026-07-07T22:39:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2a5ffeca-5c72-43d6-aa8d-2f726fd2fd96","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7352d9229b8d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20e4333-b741-405f-90ea-62e9cb59fc3b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bb4924e6-aa4e-47bc-bc23-287bb2409310","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"eb6677a84f2011c8778e746156db2939d5a85331d1da5327e5a965925b8554bd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a4bfe6.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T22:39:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a5ffeca-5c72-43d6-aa8d-2f726fd2fd96","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:39:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a5ffeca-5c72-43d6-aa8d-2f726fd2fd96","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:39:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a5ffeca-5c72-43d6-aa8d-2f726fd2fd96","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a4bfe6/auth-test-model-a4bfe6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:39:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2a5ffeca-5c72-43d6-aa8d-2f726fd2fd96","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T22:39:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2a5ffeca-5c72-43d6-aa8d-2f726fd2fd96","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T22:39:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2a5ffeca-5c72-43d6-aa8d-2f726fd2fd96","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T22:39:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2a5ffeca-5c72-43d6-aa8d-2f726fd2fd96","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T22:39:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2a5ffeca-5c72-43d6-aa8d-2f726fd2fd96","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T22:39:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a28e056b-3976-4e49-a35f-2590981d49a7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:54434","PortSpecifier":{"PortValue":54434}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a28e056b-3976-4e49-a35f-2590981d49a7","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-a4bfe6.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T22:39:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a28e056b-3976-4e49-a35f-2590981d49a7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:54434","PortSpecifier":{"PortValue":54434}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783463995,"nanos":748937023},"http":{"id":"a28e056b-3976-4e49-a35f-2590981d49a7","method":"GET","headers":{":authority":"e2e-shared-b-a4bfe6.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T22:39:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a28e056b-3976-4e49-a35f-2590981d49a7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-HV6ECZt2c5C8qhcj_2SIIGOLFdizUXOK0i9bhCOzXMItg34Fb55Cp2rE7JS3"}
{"level":"debug","ts":"2026-07-07T22:39:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a28e056b-3976-4e49-a35f-2590981d49a7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-a4bfe6.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-HV6ECZt2c5C8qhcj_2SIIGOLFdizUXOK0i9bhCOzXMItg34Fb55Cp2rE7JS3\"}"}
{"level":"debug","ts":"2026-07-07T22:39:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a28e056b-3976-4e49-a35f-2590981d49a7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-a4bfe6.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-07T22:39:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a28e056b-3976-4e49-a35f-2590981d49a7","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"eb6677a84f2011c8778e746156db2939d5a85331d1da5327e5a965925b8554bd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a4bfe6.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T22:39:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a28e056b-3976-4e49-a35f-2590981d49a7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:39:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"a28e056b-3976-4e49-a35f-2590981d49a7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-07T22:39:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a28e056b-3976-4e49-a35f-2590981d49a7","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-07T22:39:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a28e056b-3976-4e49-a35f-2590981d49a7","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-07T22:40:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"31f68e1d-0ac4-4f51-a912-b9fa8b585a9d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:39850","PortSpecifier":{"PortValue":39850}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"31f68e1d-0ac4-4f51-a912-b9fa8b585a9d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-41e952.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T22:40:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"31f68e1d-0ac4-4f51-a912-b9fa8b585a9d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:39850","PortSpecifier":{"PortValue":39850}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783464012,"nanos":833282669},"http":{"id":"31f68e1d-0ac4-4f51-a912-b9fa8b585a9d","method":"POST","headers":{":authority":"e2e-shared-a-41e952.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T22:40:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"31f68e1d-0ac4-4f51-a912-b9fa8b585a9d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T22:40:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"31f68e1d-0ac4-4f51-a912-b9fa8b585a9d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bb4924e6-aa4e-47bc-bc23-287bb2409310","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20e4333-b741-405f-90ea-62e9cb59fc3b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7352d9229b8d"]}}
{"level":"debug","ts":"2026-07-07T22:40:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"31f68e1d-0ac4-4f51-a912-b9fa8b585a9d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7352d9229b8d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20e4333-b741-405f-90ea-62e9cb59fc3b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bb4924e6-aa4e-47bc-bc23-287bb2409310","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9a8567710872db35882e39159253d625ee92e29486331d26f348f7d45fdc1a08"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-41e952.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T22:40:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31f68e1d-0ac4-4f51-a912-b9fa8b585a9d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:40:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31f68e1d-0ac4-4f51-a912-b9fa8b585a9d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:40:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31f68e1d-0ac4-4f51-a912-b9fa8b585a9d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-41e952/auth-test-model-41e952\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:40:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"31f68e1d-0ac4-4f51-a912-b9fa8b585a9d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T22:40:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31f68e1d-0ac4-4f51-a912-b9fa8b585a9d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T22:40:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31f68e1d-0ac4-4f51-a912-b9fa8b585a9d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T22:40:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"31f68e1d-0ac4-4f51-a912-b9fa8b585a9d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T22:40:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"31f68e1d-0ac4-4f51-a912-b9fa8b585a9d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T22:40:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"688eea9d-6098-44cc-a9b7-0e0c12c779d1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:38786","PortSpecifier":{"PortValue":38786}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"688eea9d-6098-44cc-a9b7-0e0c12c779d1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a4bfe6.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T22:40:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"688eea9d-6098-44cc-a9b7-0e0c12c779d1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:38786","PortSpecifier":{"PortValue":38786}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783464012,"nanos":867802695},"http":{"id":"688eea9d-6098-44cc-a9b7-0e0c12c779d1","method":"POST","headers":{":authority":"e2e-shared-b-a4bfe6.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T22:40:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"688eea9d-6098-44cc-a9b7-0e0c12c779d1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T22:40:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"688eea9d-6098-44cc-a9b7-0e0c12c779d1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bb4924e6-aa4e-47bc-bc23-287bb2409310","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20e4333-b741-405f-90ea-62e9cb59fc3b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7352d9229b8d"]}}
{"level":"debug","ts":"2026-07-07T22:40:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"688eea9d-6098-44cc-a9b7-0e0c12c779d1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7352d9229b8d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20e4333-b741-405f-90ea-62e9cb59fc3b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bb4924e6-aa4e-47bc-bc23-287bb2409310","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"eb6677a84f2011c8778e746156db2939d5a85331d1da5327e5a965925b8554bd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a4bfe6.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T22:40:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"688eea9d-6098-44cc-a9b7-0e0c12c779d1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:40:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"688eea9d-6098-44cc-a9b7-0e0c12c779d1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:40:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"688eea9d-6098-44cc-a9b7-0e0c12c779d1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a4bfe6/auth-test-model-a4bfe6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:40:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"688eea9d-6098-44cc-a9b7-0e0c12c779d1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T22:40:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"688eea9d-6098-44cc-a9b7-0e0c12c779d1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T22:40:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"688eea9d-6098-44cc-a9b7-0e0c12c779d1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T22:40:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"688eea9d-6098-44cc-a9b7-0e0c12c779d1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T22:40:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"688eea9d-6098-44cc-a9b7-0e0c12c779d1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T22:40:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"efb0eba0-5237-4048-b14b-6282bd4fd2cf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:39864","PortSpecifier":{"PortValue":39864}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"efb0eba0-5237-4048-b14b-6282bd4fd2cf","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-41e952.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T22:40:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"efb0eba0-5237-4048-b14b-6282bd4fd2cf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:39864","PortSpecifier":{"PortValue":39864}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783464012,"nanos":907333592},"http":{"id":"efb0eba0-5237-4048-b14b-6282bd4fd2cf","method":"POST","headers":{":authority":"e2e-shared-a-41e952.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T22:40:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"efb0eba0-5237-4048-b14b-6282bd4fd2cf","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T22:40:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"efb0eba0-5237-4048-b14b-6282bd4fd2cf","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bb4924e6-aa4e-47bc-bc23-287bb2409310","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20e4333-b741-405f-90ea-62e9cb59fc3b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7352d9229b8d"]}}
{"level":"debug","ts":"2026-07-07T22:40:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"efb0eba0-5237-4048-b14b-6282bd4fd2cf","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7352d9229b8d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20e4333-b741-405f-90ea-62e9cb59fc3b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bb4924e6-aa4e-47bc-bc23-287bb2409310","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9a8567710872db35882e39159253d625ee92e29486331d26f348f7d45fdc1a08"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-41e952.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T22:40:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"efb0eba0-5237-4048-b14b-6282bd4fd2cf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:40:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"efb0eba0-5237-4048-b14b-6282bd4fd2cf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:40:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"efb0eba0-5237-4048-b14b-6282bd4fd2cf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-41e952/auth-test-model-41e952\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:40:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"efb0eba0-5237-4048-b14b-6282bd4fd2cf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T22:40:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"efb0eba0-5237-4048-b14b-6282bd4fd2cf","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T22:40:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"efb0eba0-5237-4048-b14b-6282bd4fd2cf","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T22:40:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"efb0eba0-5237-4048-b14b-6282bd4fd2cf","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T22:40:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"efb0eba0-5237-4048-b14b-6282bd4fd2cf","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T22:40:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4b4c7667-52bb-4703-acb4-af69b562b8ce","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:38790","PortSpecifier":{"PortValue":38790}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4b4c7667-52bb-4703-acb4-af69b562b8ce","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-a4bfe6.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T22:40:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4b4c7667-52bb-4703-acb4-af69b562b8ce","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:38790","PortSpecifier":{"PortValue":38790}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783464012,"nanos":942597444},"http":{"id":"4b4c7667-52bb-4703-acb4-af69b562b8ce","method":"POST","headers":{":authority":"e2e-shared-b-a4bfe6.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T22:40:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4b4c7667-52bb-4703-acb4-af69b562b8ce","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T22:40:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4b4c7667-52bb-4703-acb4-af69b562b8ce","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bb4924e6-aa4e-47bc-bc23-287bb2409310","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20e4333-b741-405f-90ea-62e9cb59fc3b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7352d9229b8d"]}}
{"level":"debug","ts":"2026-07-07T22:40:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4b4c7667-52bb-4703-acb4-af69b562b8ce","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7352d9229b8d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20e4333-b741-405f-90ea-62e9cb59fc3b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bb4924e6-aa4e-47bc-bc23-287bb2409310","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"eb6677a84f2011c8778e746156db2939d5a85331d1da5327e5a965925b8554bd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a4bfe6.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T22:40:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4b4c7667-52bb-4703-acb4-af69b562b8ce","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:40:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4b4c7667-52bb-4703-acb4-af69b562b8ce","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:40:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4b4c7667-52bb-4703-acb4-af69b562b8ce","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a4bfe6/auth-test-model-a4bfe6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:40:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4b4c7667-52bb-4703-acb4-af69b562b8ce","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T22:40:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4b4c7667-52bb-4703-acb4-af69b562b8ce","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T22:40:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4b4c7667-52bb-4703-acb4-af69b562b8ce","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T22:40:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4b4c7667-52bb-4703-acb4-af69b562b8ce","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T22:40:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4b4c7667-52bb-4703-acb4-af69b562b8ce","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T22:40:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ccff0b5f-2168-4b42-89df-917e8169be86","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56966","PortSpecifier":{"PortValue":56966}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ccff0b5f-2168-4b42-89df-917e8169be86","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-41e952.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T22:40:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ccff0b5f-2168-4b42-89df-917e8169be86","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56966","PortSpecifier":{"PortValue":56966}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783464027,"nanos":898176877},"http":{"id":"ccff0b5f-2168-4b42-89df-917e8169be86","method":"POST","headers":{":authority":"e2e-shared-a-41e952.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T22:40:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ccff0b5f-2168-4b42-89df-917e8169be86","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T22:40:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ccff0b5f-2168-4b42-89df-917e8169be86","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bb4924e6-aa4e-47bc-bc23-287bb2409310","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20e4333-b741-405f-90ea-62e9cb59fc3b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7352d9229b8d"]}}
{"level":"debug","ts":"2026-07-07T22:40:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ccff0b5f-2168-4b42-89df-917e8169be86","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7352d9229b8d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20e4333-b741-405f-90ea-62e9cb59fc3b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bb4924e6-aa4e-47bc-bc23-287bb2409310","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9a8567710872db35882e39159253d625ee92e29486331d26f348f7d45fdc1a08"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-41e952.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T22:40:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ccff0b5f-2168-4b42-89df-917e8169be86","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:40:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ccff0b5f-2168-4b42-89df-917e8169be86","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:40:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ccff0b5f-2168-4b42-89df-917e8169be86","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-41e952/auth-test-model-41e952\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:40:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ccff0b5f-2168-4b42-89df-917e8169be86","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T22:40:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ccff0b5f-2168-4b42-89df-917e8169be86","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T22:40:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ccff0b5f-2168-4b42-89df-917e8169be86","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T22:40:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ccff0b5f-2168-4b42-89df-917e8169be86","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T22:40:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ccff0b5f-2168-4b42-89df-917e8169be86","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T22:40:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e386a46f-4039-48bb-9e88-129b7949cab2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:58522","PortSpecifier":{"PortValue":58522}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e386a46f-4039-48bb-9e88-129b7949cab2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a4bfe6.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T22:40:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e386a46f-4039-48bb-9e88-129b7949cab2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:58522","PortSpecifier":{"PortValue":58522}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783464027,"nanos":934373785},"http":{"id":"e386a46f-4039-48bb-9e88-129b7949cab2","method":"POST","headers":{":authority":"e2e-shared-b-a4bfe6.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T22:40:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e386a46f-4039-48bb-9e88-129b7949cab2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T22:40:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e386a46f-4039-48bb-9e88-129b7949cab2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bb4924e6-aa4e-47bc-bc23-287bb2409310","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20e4333-b741-405f-90ea-62e9cb59fc3b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7352d9229b8d"]}}
{"level":"debug","ts":"2026-07-07T22:40:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e386a46f-4039-48bb-9e88-129b7949cab2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7352d9229b8d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20e4333-b741-405f-90ea-62e9cb59fc3b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bb4924e6-aa4e-47bc-bc23-287bb2409310","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"eb6677a84f2011c8778e746156db2939d5a85331d1da5327e5a965925b8554bd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a4bfe6.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T22:40:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e386a46f-4039-48bb-9e88-129b7949cab2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:40:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e386a46f-4039-48bb-9e88-129b7949cab2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:40:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e386a46f-4039-48bb-9e88-129b7949cab2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a4bfe6/auth-test-model-a4bfe6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:40:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e386a46f-4039-48bb-9e88-129b7949cab2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T22:40:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e386a46f-4039-48bb-9e88-129b7949cab2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T22:40:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e386a46f-4039-48bb-9e88-129b7949cab2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T22:40:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e386a46f-4039-48bb-9e88-129b7949cab2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T22:40:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e386a46f-4039-48bb-9e88-129b7949cab2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T22:40:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c07f4787-ba98-4a18-bb07-a7581aeaa940","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:58526","PortSpecifier":{"PortValue":58526}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c07f4787-ba98-4a18-bb07-a7581aeaa940","method":"GET","path":"/maas-api/v1/api-keys/99c37dfd-8701-4896-96fd-94533da3e536","host":"e2e-shared-b-a4bfe6.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T22:40:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c07f4787-ba98-4a18-bb07-a7581aeaa940","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:58526","PortSpecifier":{"PortValue":58526}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783464027,"nanos":973706393},"http":{"id":"c07f4787-ba98-4a18-bb07-a7581aeaa940","method":"GET","headers":{":authority":"e2e-shared-b-a4bfe6.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/99c37dfd-8701-4896-96fd-94533da3e536",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T22:40:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c07f4787-ba98-4a18-bb07-a7581aeaa940","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T22:40:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c07f4787-ba98-4a18-bb07-a7581aeaa940","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bb4924e6-aa4e-47bc-bc23-287bb2409310","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20e4333-b741-405f-90ea-62e9cb59fc3b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7352d9229b8d"]}}
{"level":"debug","ts":"2026-07-07T22:40:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c07f4787-ba98-4a18-bb07-a7581aeaa940","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7352d9229b8d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20e4333-b741-405f-90ea-62e9cb59fc3b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bb4924e6-aa4e-47bc-bc23-287bb2409310","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"eb6677a84f2011c8778e746156db2939d5a85331d1da5327e5a965925b8554bd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a4bfe6.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/99c37dfd-8701-4896-96fd-94533da3e536",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T22:40:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c07f4787-ba98-4a18-bb07-a7581aeaa940","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:40:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c07f4787-ba98-4a18-bb07-a7581aeaa940","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:40:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c07f4787-ba98-4a18-bb07-a7581aeaa940","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a4bfe6/auth-test-model-a4bfe6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:40:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c07f4787-ba98-4a18-bb07-a7581aeaa940","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T22:40:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c07f4787-ba98-4a18-bb07-a7581aeaa940","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T22:40:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c07f4787-ba98-4a18-bb07-a7581aeaa940","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T22:40:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c07f4787-ba98-4a18-bb07-a7581aeaa940","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T22:40:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c07f4787-ba98-4a18-bb07-a7581aeaa940","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T22:40:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2e1fdbf6-bb21-48c5-8db5-9a48fc45b327","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56982","PortSpecifier":{"PortValue":56982}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2e1fdbf6-bb21-48c5-8db5-9a48fc45b327","method":"GET","path":"/maas-api/v1/api-keys/99c37dfd-8701-4896-96fd-94533da3e536","host":"e2e-shared-a-41e952.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T22:40:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2e1fdbf6-bb21-48c5-8db5-9a48fc45b327","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56982","PortSpecifier":{"PortValue":56982}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783464028,"nanos":4018683},"http":{"id":"2e1fdbf6-bb21-48c5-8db5-9a48fc45b327","method":"GET","headers":{":authority":"e2e-shared-a-41e952.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/99c37dfd-8701-4896-96fd-94533da3e536",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T22:40:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2e1fdbf6-bb21-48c5-8db5-9a48fc45b327","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T22:40:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2e1fdbf6-bb21-48c5-8db5-9a48fc45b327","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bb4924e6-aa4e-47bc-bc23-287bb2409310","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20e4333-b741-405f-90ea-62e9cb59fc3b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7352d9229b8d"]}}
{"level":"debug","ts":"2026-07-07T22:40:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2e1fdbf6-bb21-48c5-8db5-9a48fc45b327","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7352d9229b8d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20e4333-b741-405f-90ea-62e9cb59fc3b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bb4924e6-aa4e-47bc-bc23-287bb2409310","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9a8567710872db35882e39159253d625ee92e29486331d26f348f7d45fdc1a08"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-41e952.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/99c37dfd-8701-4896-96fd-94533da3e536",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T22:40:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e1fdbf6-bb21-48c5-8db5-9a48fc45b327","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:40:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e1fdbf6-bb21-48c5-8db5-9a48fc45b327","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:40:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e1fdbf6-bb21-48c5-8db5-9a48fc45b327","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-41e952/auth-test-model-41e952\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:40:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2e1fdbf6-bb21-48c5-8db5-9a48fc45b327","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T22:40:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e1fdbf6-bb21-48c5-8db5-9a48fc45b327","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T22:40:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e1fdbf6-bb21-48c5-8db5-9a48fc45b327","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T22:40:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2e1fdbf6-bb21-48c5-8db5-9a48fc45b327","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T22:40:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2e1fdbf6-bb21-48c5-8db5-9a48fc45b327","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T22:40:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"45bd0a92-13e5-453f-9b40-fa74a1b68b88","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41250","PortSpecifier":{"PortValue":41250}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"45bd0a92-13e5-453f-9b40-fa74a1b68b88","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-41e952.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T22:40:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"45bd0a92-13e5-453f-9b40-fa74a1b68b88","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41250","PortSpecifier":{"PortValue":41250}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783464042,"nanos":972016283},"http":{"id":"45bd0a92-13e5-453f-9b40-fa74a1b68b88","method":"POST","headers":{":authority":"e2e-shared-a-41e952.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T22:40:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"45bd0a92-13e5-453f-9b40-fa74a1b68b88","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T22:40:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"45bd0a92-13e5-453f-9b40-fa74a1b68b88","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bb4924e6-aa4e-47bc-bc23-287bb2409310","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20e4333-b741-405f-90ea-62e9cb59fc3b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7352d9229b8d"]}}
{"level":"debug","ts":"2026-07-07T22:40:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"45bd0a92-13e5-453f-9b40-fa74a1b68b88","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7352d9229b8d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20e4333-b741-405f-90ea-62e9cb59fc3b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bb4924e6-aa4e-47bc-bc23-287bb2409310","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9a8567710872db35882e39159253d625ee92e29486331d26f348f7d45fdc1a08"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-41e952.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T22:40:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"45bd0a92-13e5-453f-9b40-fa74a1b68b88","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:40:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"45bd0a92-13e5-453f-9b40-fa74a1b68b88","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:40:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"45bd0a92-13e5-453f-9b40-fa74a1b68b88","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-41e952/auth-test-model-41e952\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:40:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"45bd0a92-13e5-453f-9b40-fa74a1b68b88","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T22:40:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"45bd0a92-13e5-453f-9b40-fa74a1b68b88","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T22:40:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"45bd0a92-13e5-453f-9b40-fa74a1b68b88","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T22:40:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"45bd0a92-13e5-453f-9b40-fa74a1b68b88","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T22:40:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"45bd0a92-13e5-453f-9b40-fa74a1b68b88","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T22:40:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"41ec5586-efd9-4a2f-9656-0e574de1becc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:59170","PortSpecifier":{"PortValue":59170}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"41ec5586-efd9-4a2f-9656-0e574de1becc","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a4bfe6.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T22:40:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"41ec5586-efd9-4a2f-9656-0e574de1becc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:59170","PortSpecifier":{"PortValue":59170}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783464043,"nanos":6692005},"http":{"id":"41ec5586-efd9-4a2f-9656-0e574de1becc","method":"POST","headers":{":authority":"e2e-shared-b-a4bfe6.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T22:40:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"41ec5586-efd9-4a2f-9656-0e574de1becc","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T22:40:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"41ec5586-efd9-4a2f-9656-0e574de1becc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bb4924e6-aa4e-47bc-bc23-287bb2409310","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20e4333-b741-405f-90ea-62e9cb59fc3b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7352d9229b8d"]}}
{"level":"debug","ts":"2026-07-07T22:40:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"41ec5586-efd9-4a2f-9656-0e574de1becc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7352d9229b8d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20e4333-b741-405f-90ea-62e9cb59fc3b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bb4924e6-aa4e-47bc-bc23-287bb2409310","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"eb6677a84f2011c8778e746156db2939d5a85331d1da5327e5a965925b8554bd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a4bfe6.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T22:40:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"41ec5586-efd9-4a2f-9656-0e574de1becc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:40:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"41ec5586-efd9-4a2f-9656-0e574de1becc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:40:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"41ec5586-efd9-4a2f-9656-0e574de1becc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a4bfe6/auth-test-model-a4bfe6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:40:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"41ec5586-efd9-4a2f-9656-0e574de1becc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T22:40:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"41ec5586-efd9-4a2f-9656-0e574de1becc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T22:40:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"41ec5586-efd9-4a2f-9656-0e574de1becc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T22:40:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"41ec5586-efd9-4a2f-9656-0e574de1becc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T22:40:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"41ec5586-efd9-4a2f-9656-0e574de1becc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T22:40:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d60b1e3d-f847-4f94-81cb-17edfda2ff09","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41254","PortSpecifier":{"PortValue":41254}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d60b1e3d-f847-4f94-81cb-17edfda2ff09","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-41e952.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T22:40:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d60b1e3d-f847-4f94-81cb-17edfda2ff09","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41254","PortSpecifier":{"PortValue":41254}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783464043,"nanos":45857783},"http":{"id":"d60b1e3d-f847-4f94-81cb-17edfda2ff09","method":"POST","headers":{":authority":"e2e-shared-a-41e952.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T22:40:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d60b1e3d-f847-4f94-81cb-17edfda2ff09","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-iAA0OX2IoZkTUZ1E_Mi1YCvkdUpnDrewaHIj5OPHVtDGJ7uWT7F8RHsG8DOZ"}
{"level":"debug","ts":"2026-07-07T22:40:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d60b1e3d-f847-4f94-81cb-17edfda2ff09","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-41e952.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-iAA0OX2IoZkTUZ1E_Mi1YCvkdUpnDrewaHIj5OPHVtDGJ7uWT7F8RHsG8DOZ\"}"}
{"level":"debug","ts":"2026-07-07T22:40:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d60b1e3d-f847-4f94-81cb-17edfda2ff09","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-41e952.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"50148b37-5926-415a-b8e1-faff3c958ebd","keyName":"e2e-auth-iso-a-b5d13f","subscription":"e2e-auth-iso-d20a6e","tenant":"e2e-shared-a-41e952","userId":"50148b37-5926-415a-b8e1-faff3c958ebd","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T22:40:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d60b1e3d-f847-4f94-81cb-17edfda2ff09","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T22:40:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d60b1e3d-f847-4f94-81cb-17edfda2ff09","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:40:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d60b1e3d-f847-4f94-81cb-17edfda2ff09","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:40:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d60b1e3d-f847-4f94-81cb-17edfda2ff09","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-41e952/auth-test-model-41e952\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:40:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d60b1e3d-f847-4f94-81cb-17edfda2ff09","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T22:40:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d60b1e3d-f847-4f94-81cb-17edfda2ff09","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-d20a6e"}
{"level":"debug","ts":"2026-07-07T22:40:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d60b1e3d-f847-4f94-81cb-17edfda2ff09","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T22:40:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d60b1e3d-f847-4f94-81cb-17edfda2ff09","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-07T22:40:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d60b1e3d-f847-4f94-81cb-17edfda2ff09","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T22:40:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d60b1e3d-f847-4f94-81cb-17edfda2ff09","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T22:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6cfd2c4dfd8ac4373a7f6c9890e7d89898ba6b3b63ca97806ce9f945a3c92502"}
{"level":"info","ts":"2026-07-07T22:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7468f72bc774399ade15ab837a1d1117b5da874593a51ee6e4a42030b5d4e193"}
{"level":"info","ts":"2026-07-07T22:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f1cb127cd1672fbf20cb7bb2718321126c4ad9323c23052bd84962bc812ab822"}
{"level":"info","ts":"2026-07-07T22:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3f6aced2c294dead7e973149c3774ec59ce062265ac8d13782b05060d520f8d2"}
{"level":"info","ts":"2026-07-07T22:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/29d50430366dffb7baa5506cee3415d8e7f8539e83044007a3b573b8bd429bb3"}
{"level":"info","ts":"2026-07-07T22:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f335ea392a0cc6c7ef2c0f1f1829624adca5db4594bd385d2dea4ded95707352"}
{"level":"info","ts":"2026-07-07T22:40:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/52f76a3036bcb130a1dfaa9c3496e735f179a747ca07f6247a9336cb179f83ca"}
{"level":"info","ts":"2026-07-07T22:40:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/492311c00f56d366859f1d8158714acf56d0d2b2240f57bdf0465e7d88dc0e60"}
{"level":"info","ts":"2026-07-07T22:40:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bf00188803c7d63f01d6738c0cbb115dbc708689b217668fd751c50b54f12def"}
{"level":"info","ts":"2026-07-07T22:40:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec4acbc0b4834edbe694cd6ab27e4f9e7f59bd9013a484d94cd7de4a1b92357d"}
{"level":"info","ts":"2026-07-07T22:40:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/640042a87499b5ecbdbc27a1364d54ceaaece23e8d7690594d7b126b7cfbb3c5"}
{"level":"info","ts":"2026-07-07T22:40:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/76f1c0b0f016640bcfddf984608a259b2ea44558b5ffb94387ef1c24c44f9efb"}
{"level":"info","ts":"2026-07-07T22:40:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9f7d37e08026814ff806c6c58f5b8d67454d7c414e72f8cd161e42f41b994b22"}
{"level":"info","ts":"2026-07-07T22:40:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c4bcff1fdf9caa7efcde5d4e78cba0999575f3683e2a0788c6d3246a0ae0c8e1"}
{"level":"info","ts":"2026-07-07T22:40:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2ded4f30f99e8f551c277457e933b2208691c9d1ed66af5013e699e66bcf9c89"}
{"level":"info","ts":"2026-07-07T22:40:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c7ff2581e8e63a9b257f0a636dae9036f6688dd047f742529bc472b57a7ef418"}
{"level":"debug","ts":"2026-07-07T22:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4227990af0a79d341e9784fc9409f8de102f0ade96eaa0451ab04b8e680e8c80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:41:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:41:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4227990af0a79d341e9784fc9409f8de102f0ade96eaa0451ab04b8e680e8c80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4227990af0a79d341e9784fc9409f8de102f0ade96eaa0451ab04b8e680e8c80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4227990af0a79d341e9784fc9409f8de102f0ade96eaa0451ab04b8e680e8c80","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4227990af0a79d341e9784fc9409f8de102f0ade96eaa0451ab04b8e680e8c80"}
{"level":"debug","ts":"2026-07-07T22:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4227990af0a79d341e9784fc9409f8de102f0ade96eaa0451ab04b8e680e8c80","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4227990af0a79d341e9784fc9409f8de102f0ade96eaa0451ab04b8e680e8c80"}
{"level":"debug","ts":"2026-07-07T22:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4227990af0a79d341e9784fc9409f8de102f0ade96eaa0451ab04b8e680e8c80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:41:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:41:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4227990af0a79d341e9784fc9409f8de102f0ade96eaa0451ab04b8e680e8c80"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4227990af0a79d341e9784fc9409f8de102f0ade96eaa0451ab04b8e680e8c80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4227990af0a79d341e9784fc9409f8de102f0ade96eaa0451ab04b8e680e8c80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:41:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:41:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4227990af0a79d341e9784fc9409f8de102f0ade96eaa0451ab04b8e680e8c80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4227990af0a79d341e9784fc9409f8de102f0ade96eaa0451ab04b8e680e8c80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4227990af0a79d341e9784fc9409f8de102f0ade96eaa0451ab04b8e680e8c80","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4227990af0a79d341e9784fc9409f8de102f0ade96eaa0451ab04b8e680e8c80"}
{"level":"debug","ts":"2026-07-07T22:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4227990af0a79d341e9784fc9409f8de102f0ade96eaa0451ab04b8e680e8c80","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4227990af0a79d341e9784fc9409f8de102f0ade96eaa0451ab04b8e680e8c80"}
{"level":"debug","ts":"2026-07-07T22:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4227990af0a79d341e9784fc9409f8de102f0ade96eaa0451ab04b8e680e8c80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:41:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:41:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4227990af0a79d341e9784fc9409f8de102f0ade96eaa0451ab04b8e680e8c80"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4227990af0a79d341e9784fc9409f8de102f0ade96eaa0451ab04b8e680e8c80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4227990af0a79d341e9784fc9409f8de102f0ade96eaa0451ab04b8e680e8c80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:41:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:41:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4227990af0a79d341e9784fc9409f8de102f0ade96eaa0451ab04b8e680e8c80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4227990af0a79d341e9784fc9409f8de102f0ade96eaa0451ab04b8e680e8c80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4227990af0a79d341e9784fc9409f8de102f0ade96eaa0451ab04b8e680e8c80","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4227990af0a79d341e9784fc9409f8de102f0ade96eaa0451ab04b8e680e8c80"}
{"level":"debug","ts":"2026-07-07T22:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4227990af0a79d341e9784fc9409f8de102f0ade96eaa0451ab04b8e680e8c80","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4227990af0a79d341e9784fc9409f8de102f0ade96eaa0451ab04b8e680e8c80"}
{"level":"debug","ts":"2026-07-07T22:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4227990af0a79d341e9784fc9409f8de102f0ade96eaa0451ab04b8e680e8c80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:41:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:41:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4227990af0a79d341e9784fc9409f8de102f0ade96eaa0451ab04b8e680e8c80"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4227990af0a79d341e9784fc9409f8de102f0ade96eaa0451ab04b8e680e8c80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4227990af0a79d341e9784fc9409f8de102f0ade96eaa0451ab04b8e680e8c80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:41:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:41:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4227990af0a79d341e9784fc9409f8de102f0ade96eaa0451ab04b8e680e8c80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4227990af0a79d341e9784fc9409f8de102f0ade96eaa0451ab04b8e680e8c80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4227990af0a79d341e9784fc9409f8de102f0ade96eaa0451ab04b8e680e8c80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5537b0062c252185bf00532712cbc3f55fe3f759376c0b7564641cf1be0a255","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:41:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:41:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4227990af0a79d341e9784fc9409f8de102f0ade96eaa0451ab04b8e680e8c80"}
{"level":"info","ts":"2026-07-07T22:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5537b0062c252185bf00532712cbc3f55fe3f759376c0b7564641cf1be0a255","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5537b0062c252185bf00532712cbc3f55fe3f759376c0b7564641cf1be0a255","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:41:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:41:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5537b0062c252185bf00532712cbc3f55fe3f759376c0b7564641cf1be0a255","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4227990af0a79d341e9784fc9409f8de102f0ade96eaa0451ab04b8e680e8c80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:41:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:41:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4227990af0a79d341e9784fc9409f8de102f0ade96eaa0451ab04b8e680e8c80"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5537b0062c252185bf00532712cbc3f55fe3f759376c0b7564641cf1be0a255"}
{"level":"info","ts":"2026-07-07T22:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4227990af0a79d341e9784fc9409f8de102f0ade96eaa0451ab04b8e680e8c80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5537b0062c252185bf00532712cbc3f55fe3f759376c0b7564641cf1be0a255","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:41:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:41:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5537b0062c252185bf00532712cbc3f55fe3f759376c0b7564641cf1be0a255"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5537b0062c252185bf00532712cbc3f55fe3f759376c0b7564641cf1be0a255","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4227990af0a79d341e9784fc9409f8de102f0ade96eaa0451ab04b8e680e8c80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:41:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:41:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4227990af0a79d341e9784fc9409f8de102f0ade96eaa0451ab04b8e680e8c80"}
{"level":"info","ts":"2026-07-07T22:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4227990af0a79d341e9784fc9409f8de102f0ade96eaa0451ab04b8e680e8c80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5537b0062c252185bf00532712cbc3f55fe3f759376c0b7564641cf1be0a255","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:41:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:41:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5537b0062c252185bf00532712cbc3f55fe3f759376c0b7564641cf1be0a255"}
{"level":"info","ts":"2026-07-07T22:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5537b0062c252185bf00532712cbc3f55fe3f759376c0b7564641cf1be0a255","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4227990af0a79d341e9784fc9409f8de102f0ade96eaa0451ab04b8e680e8c80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5537b0062c252185bf00532712cbc3f55fe3f759376c0b7564641cf1be0a255","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:41:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:41:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5537b0062c252185bf00532712cbc3f55fe3f759376c0b7564641cf1be0a255"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5537b0062c252185bf00532712cbc3f55fe3f759376c0b7564641cf1be0a255","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4227990af0a79d341e9784fc9409f8de102f0ade96eaa0451ab04b8e680e8c80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5537b0062c252185bf00532712cbc3f55fe3f759376c0b7564641cf1be0a255","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:41:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:41:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5537b0062c252185bf00532712cbc3f55fe3f759376c0b7564641cf1be0a255"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T22:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f5537b0062c252185bf00532712cbc3f55fe3f759376c0b7564641cf1be0a255","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f5537b0062c252185bf00532712cbc3f55fe3f759376c0b7564641cf1be0a255\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T22:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5537b0062c252185bf00532712cbc3f55fe3f759376c0b7564641cf1be0a255","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4227990af0a79d341e9784fc9409f8de102f0ade96eaa0451ab04b8e680e8c80"}
{"level":"debug","ts":"2026-07-07T22:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5537b0062c252185bf00532712cbc3f55fe3f759376c0b7564641cf1be0a255","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:41:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:41:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5537b0062c252185bf00532712cbc3f55fe3f759376c0b7564641cf1be0a255","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4227990af0a79d341e9784fc9409f8de102f0ade96eaa0451ab04b8e680e8c80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:41:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:41:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4227990af0a79d341e9784fc9409f8de102f0ade96eaa0451ab04b8e680e8c80"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5537b0062c252185bf00532712cbc3f55fe3f759376c0b7564641cf1be0a255"}
{"level":"info","ts":"2026-07-07T22:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4227990af0a79d341e9784fc9409f8de102f0ade96eaa0451ab04b8e680e8c80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5537b0062c252185bf00532712cbc3f55fe3f759376c0b7564641cf1be0a255","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4227990af0a79d341e9784fc9409f8de102f0ade96eaa0451ab04b8e680e8c80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5537b0062c252185bf00532712cbc3f55fe3f759376c0b7564641cf1be0a255","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5537b0062c252185bf00532712cbc3f55fe3f759376c0b7564641cf1be0a255"}
{"level":"debug","ts":"2026-07-07T22:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5537b0062c252185bf00532712cbc3f55fe3f759376c0b7564641cf1be0a255","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:41:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:41:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5537b0062c252185bf00532712cbc3f55fe3f759376c0b7564641cf1be0a255"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5537b0062c252185bf00532712cbc3f55fe3f759376c0b7564641cf1be0a255","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5537b0062c252185bf00532712cbc3f55fe3f759376c0b7564641cf1be0a255","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31e591741d87a60e8e8a2bc2fe02037e3b94c3f73dc0a3b48c9366ea9e88717a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:41:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:41:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31e591741d87a60e8e8a2bc2fe02037e3b94c3f73dc0a3b48c9366ea9e88717a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31e591741d87a60e8e8a2bc2fe02037e3b94c3f73dc0a3b48c9366ea9e88717a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4227990af0a79d341e9784fc9409f8de102f0ade96eaa0451ab04b8e680e8c80"}
{"level":"debug","ts":"2026-07-07T22:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31e591741d87a60e8e8a2bc2fe02037e3b94c3f73dc0a3b48c9366ea9e88717a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5537b0062c252185bf00532712cbc3f55fe3f759376c0b7564641cf1be0a255"}
{"level":"debug","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31e591741d87a60e8e8a2bc2fe02037e3b94c3f73dc0a3b48c9366ea9e88717a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:41:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:41:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31e591741d87a60e8e8a2bc2fe02037e3b94c3f73dc0a3b48c9366ea9e88717a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31e591741d87a60e8e8a2bc2fe02037e3b94c3f73dc0a3b48c9366ea9e88717a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31e591741d87a60e8e8a2bc2fe02037e3b94c3f73dc0a3b48c9366ea9e88717a"}
{"level":"info","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31e591741d87a60e8e8a2bc2fe02037e3b94c3f73dc0a3b48c9366ea9e88717a"}
{"level":"debug","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31e591741d87a60e8e8a2bc2fe02037e3b94c3f73dc0a3b48c9366ea9e88717a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:41:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:41:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31e591741d87a60e8e8a2bc2fe02037e3b94c3f73dc0a3b48c9366ea9e88717a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31e591741d87a60e8e8a2bc2fe02037e3b94c3f73dc0a3b48c9366ea9e88717a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31e591741d87a60e8e8a2bc2fe02037e3b94c3f73dc0a3b48c9366ea9e88717a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31e591741d87a60e8e8a2bc2fe02037e3b94c3f73dc0a3b48c9366ea9e88717a"}
{"level":"debug","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37853d79df333d9b381888a30e9959b7a4e3563fba31b6f0d7fb2c1d71b9480f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:41:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:41:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37853d79df333d9b381888a30e9959b7a4e3563fba31b6f0d7fb2c1d71b9480f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37853d79df333d9b381888a30e9959b7a4e3563fba31b6f0d7fb2c1d71b9480f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37853d79df333d9b381888a30e9959b7a4e3563fba31b6f0d7fb2c1d71b9480f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37853d79df333d9b381888a30e9959b7a4e3563fba31b6f0d7fb2c1d71b9480f"}
{"level":"debug","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37853d79df333d9b381888a30e9959b7a4e3563fba31b6f0d7fb2c1d71b9480f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37853d79df333d9b381888a30e9959b7a4e3563fba31b6f0d7fb2c1d71b9480f"}
{"level":"debug","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37853d79df333d9b381888a30e9959b7a4e3563fba31b6f0d7fb2c1d71b9480f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:41:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:41:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["37853d79df333d9b381888a30e9959b7a4e3563fba31b6f0d7fb2c1d71b9480f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37853d79df333d9b381888a30e9959b7a4e3563fba31b6f0d7fb2c1d71b9480f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37853d79df333d9b381888a30e9959b7a4e3563fba31b6f0d7fb2c1d71b9480f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:41:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:41:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37853d79df333d9b381888a30e9959b7a4e3563fba31b6f0d7fb2c1d71b9480f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37853d79df333d9b381888a30e9959b7a4e3563fba31b6f0d7fb2c1d71b9480f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37853d79df333d9b381888a30e9959b7a4e3563fba31b6f0d7fb2c1d71b9480f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37853d79df333d9b381888a30e9959b7a4e3563fba31b6f0d7fb2c1d71b9480f"}
{"level":"debug","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37853d79df333d9b381888a30e9959b7a4e3563fba31b6f0d7fb2c1d71b9480f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37853d79df333d9b381888a30e9959b7a4e3563fba31b6f0d7fb2c1d71b9480f"}
{"level":"debug","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37853d79df333d9b381888a30e9959b7a4e3563fba31b6f0d7fb2c1d71b9480f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:41:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:41:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["37853d79df333d9b381888a30e9959b7a4e3563fba31b6f0d7fb2c1d71b9480f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37853d79df333d9b381888a30e9959b7a4e3563fba31b6f0d7fb2c1d71b9480f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37853d79df333d9b381888a30e9959b7a4e3563fba31b6f0d7fb2c1d71b9480f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37853d79df333d9b381888a30e9959b7a4e3563fba31b6f0d7fb2c1d71b9480f"}
{"level":"debug","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a04190315e62176141c48b37d3b56a299b0a33b14dc3d2d8eb23a1d38d990ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:41:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:41:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a04190315e62176141c48b37d3b56a299b0a33b14dc3d2d8eb23a1d38d990ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a04190315e62176141c48b37d3b56a299b0a33b14dc3d2d8eb23a1d38d990ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a04190315e62176141c48b37d3b56a299b0a33b14dc3d2d8eb23a1d38d990ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a04190315e62176141c48b37d3b56a299b0a33b14dc3d2d8eb23a1d38d990ab"}
{"level":"debug","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a04190315e62176141c48b37d3b56a299b0a33b14dc3d2d8eb23a1d38d990ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a04190315e62176141c48b37d3b56a299b0a33b14dc3d2d8eb23a1d38d990ab"}
{"level":"debug","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a04190315e62176141c48b37d3b56a299b0a33b14dc3d2d8eb23a1d38d990ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:41:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:41:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a04190315e62176141c48b37d3b56a299b0a33b14dc3d2d8eb23a1d38d990ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a04190315e62176141c48b37d3b56a299b0a33b14dc3d2d8eb23a1d38d990ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a04190315e62176141c48b37d3b56a299b0a33b14dc3d2d8eb23a1d38d990ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0f8557d854a7cca4f7cc8117f54456fcf71adffaea31c1f621ba33faac554f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:41:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:41:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0f8557d854a7cca4f7cc8117f54456fcf71adffaea31c1f621ba33faac554f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"277b17bac8602d04d9469a67d743d4566caac021dc4a74a82ad0607d313fdf32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:41:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:41:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a04190315e62176141c48b37d3b56a299b0a33b14dc3d2d8eb23a1d38d990ab"}
{"level":"info","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"277b17bac8602d04d9469a67d743d4566caac021dc4a74a82ad0607d313fdf32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0f8557d854a7cca4f7cc8117f54456fcf71adffaea31c1f621ba33faac554f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:41:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:41:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0f8557d854a7cca4f7cc8117f54456fcf71adffaea31c1f621ba33faac554f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"277b17bac8602d04d9469a67d743d4566caac021dc4a74a82ad0607d313fdf32","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0f8557d854a7cca4f7cc8117f54456fcf71adffaea31c1f621ba33faac554f2"}
{"level":"debug","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0f8557d854a7cca4f7cc8117f54456fcf71adffaea31c1f621ba33faac554f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:41:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:41:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d0f8557d854a7cca4f7cc8117f54456fcf71adffaea31c1f621ba33faac554f2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0f8557d854a7cca4f7cc8117f54456fcf71adffaea31c1f621ba33faac554f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"277b17bac8602d04d9469a67d743d4566caac021dc4a74a82ad0607d313fdf32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:41:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:41:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/277b17bac8602d04d9469a67d743d4566caac021dc4a74a82ad0607d313fdf32"}
{"level":"info","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"277b17bac8602d04d9469a67d743d4566caac021dc4a74a82ad0607d313fdf32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0f8557d854a7cca4f7cc8117f54456fcf71adffaea31c1f621ba33faac554f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:41:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:41:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0f8557d854a7cca4f7cc8117f54456fcf71adffaea31c1f621ba33faac554f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"277b17bac8602d04d9469a67d743d4566caac021dc4a74a82ad0607d313fdf32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:41:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:41:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["277b17bac8602d04d9469a67d743d4566caac021dc4a74a82ad0607d313fdf32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0f8557d854a7cca4f7cc8117f54456fcf71adffaea31c1f621ba33faac554f2"}
{"level":"info","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"277b17bac8602d04d9469a67d743d4566caac021dc4a74a82ad0607d313fdf32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0f8557d854a7cca4f7cc8117f54456fcf71adffaea31c1f621ba33faac554f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:41:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:41:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d0f8557d854a7cca4f7cc8117f54456fcf71adffaea31c1f621ba33faac554f2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0f8557d854a7cca4f7cc8117f54456fcf71adffaea31c1f621ba33faac554f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"277b17bac8602d04d9469a67d743d4566caac021dc4a74a82ad0607d313fdf32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:41:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:41:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/277b17bac8602d04d9469a67d743d4566caac021dc4a74a82ad0607d313fdf32"}
{"level":"info","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"277b17bac8602d04d9469a67d743d4566caac021dc4a74a82ad0607d313fdf32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0f8557d854a7cca4f7cc8117f54456fcf71adffaea31c1f621ba33faac554f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:41:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:41:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0f8557d854a7cca4f7cc8117f54456fcf71adffaea31c1f621ba33faac554f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e8cf96c9536f07185b3239cfe87ad9ade58fff7f91979418b53d7c9c761de6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:41:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:41:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0f8557d854a7cca4f7cc8117f54456fcf71adffaea31c1f621ba33faac554f2"}
{"level":"info","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e8cf96c9536f07185b3239cfe87ad9ade58fff7f91979418b53d7c9c761de6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"277b17bac8602d04d9469a67d743d4566caac021dc4a74a82ad0607d313fdf32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:41:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:41:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["277b17bac8602d04d9469a67d743d4566caac021dc4a74a82ad0607d313fdf32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e8cf96c9536f07185b3239cfe87ad9ade58fff7f91979418b53d7c9c761de6b"}
{"level":"info","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"277b17bac8602d04d9469a67d743d4566caac021dc4a74a82ad0607d313fdf32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0f8557d854a7cca4f7cc8117f54456fcf71adffaea31c1f621ba33faac554f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:41:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:41:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d0f8557d854a7cca4f7cc8117f54456fcf71adffaea31c1f621ba33faac554f2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0f8557d854a7cca4f7cc8117f54456fcf71adffaea31c1f621ba33faac554f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e8cf96c9536f07185b3239cfe87ad9ade58fff7f91979418b53d7c9c761de6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:41:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:41:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e8cf96c9536f07185b3239cfe87ad9ade58fff7f91979418b53d7c9c761de6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/277b17bac8602d04d9469a67d743d4566caac021dc4a74a82ad0607d313fdf32"}
{"level":"info","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e8cf96c9536f07185b3239cfe87ad9ade58fff7f91979418b53d7c9c761de6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"277b17bac8602d04d9469a67d743d4566caac021dc4a74a82ad0607d313fdf32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0f8557d854a7cca4f7cc8117f54456fcf71adffaea31c1f621ba33faac554f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:41:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:41:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0f8557d854a7cca4f7cc8117f54456fcf71adffaea31c1f621ba33faac554f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e8cf96c9536f07185b3239cfe87ad9ade58fff7f91979418b53d7c9c761de6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0f8557d854a7cca4f7cc8117f54456fcf71adffaea31c1f621ba33faac554f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0f8557d854a7cca4f7cc8117f54456fcf71adffaea31c1f621ba33faac554f2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0f8557d854a7cca4f7cc8117f54456fcf71adffaea31c1f621ba33faac554f2"}
{"level":"debug","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0f8557d854a7cca4f7cc8117f54456fcf71adffaea31c1f621ba33faac554f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:41:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:41:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d0f8557d854a7cca4f7cc8117f54456fcf71adffaea31c1f621ba33faac554f2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e8cf96c9536f07185b3239cfe87ad9ade58fff7f91979418b53d7c9c761de6b"}
{"level":"info","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0f8557d854a7cca4f7cc8117f54456fcf71adffaea31c1f621ba33faac554f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0f8557d854a7cca4f7cc8117f54456fcf71adffaea31c1f621ba33faac554f2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/277b17bac8602d04d9469a67d743d4566caac021dc4a74a82ad0607d313fdf32"}
{"level":"info","ts":"2026-07-07T22:41:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0f8557d854a7cca4f7cc8117f54456fcf71adffaea31c1f621ba33faac554f2"}
{"level":"debug","ts":"2026-07-07T22:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f9a528d779ab0446d14dbfc7327ee61c3aefc743a4859cf06116678b8e87a4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:41:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:41:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f9a528d779ab0446d14dbfc7327ee61c3aefc743a4859cf06116678b8e87a4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f9a528d779ab0446d14dbfc7327ee61c3aefc743a4859cf06116678b8e87a4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f9a528d779ab0446d14dbfc7327ee61c3aefc743a4859cf06116678b8e87a4f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f9a528d779ab0446d14dbfc7327ee61c3aefc743a4859cf06116678b8e87a4f"}
{"level":"debug","ts":"2026-07-07T22:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f9a528d779ab0446d14dbfc7327ee61c3aefc743a4859cf06116678b8e87a4f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f9a528d779ab0446d14dbfc7327ee61c3aefc743a4859cf06116678b8e87a4f"}
{"level":"debug","ts":"2026-07-07T22:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f9a528d779ab0446d14dbfc7327ee61c3aefc743a4859cf06116678b8e87a4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:41:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:41:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f9a528d779ab0446d14dbfc7327ee61c3aefc743a4859cf06116678b8e87a4f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f9a528d779ab0446d14dbfc7327ee61c3aefc743a4859cf06116678b8e87a4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f9a528d779ab0446d14dbfc7327ee61c3aefc743a4859cf06116678b8e87a4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:41:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:41:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f9a528d779ab0446d14dbfc7327ee61c3aefc743a4859cf06116678b8e87a4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f9a528d779ab0446d14dbfc7327ee61c3aefc743a4859cf06116678b8e87a4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f9a528d779ab0446d14dbfc7327ee61c3aefc743a4859cf06116678b8e87a4f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f9a528d779ab0446d14dbfc7327ee61c3aefc743a4859cf06116678b8e87a4f"}
{"level":"debug","ts":"2026-07-07T22:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f9a528d779ab0446d14dbfc7327ee61c3aefc743a4859cf06116678b8e87a4f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f9a528d779ab0446d14dbfc7327ee61c3aefc743a4859cf06116678b8e87a4f"}
{"level":"debug","ts":"2026-07-07T22:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f9a528d779ab0446d14dbfc7327ee61c3aefc743a4859cf06116678b8e87a4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:41:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:41:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f9a528d779ab0446d14dbfc7327ee61c3aefc743a4859cf06116678b8e87a4f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f9a528d779ab0446d14dbfc7327ee61c3aefc743a4859cf06116678b8e87a4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f9a528d779ab0446d14dbfc7327ee61c3aefc743a4859cf06116678b8e87a4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:41:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:41:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f9a528d779ab0446d14dbfc7327ee61c3aefc743a4859cf06116678b8e87a4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f9a528d779ab0446d14dbfc7327ee61c3aefc743a4859cf06116678b8e87a4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f9a528d779ab0446d14dbfc7327ee61c3aefc743a4859cf06116678b8e87a4f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f9a528d779ab0446d14dbfc7327ee61c3aefc743a4859cf06116678b8e87a4f"}
{"level":"debug","ts":"2026-07-07T22:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f9a528d779ab0446d14dbfc7327ee61c3aefc743a4859cf06116678b8e87a4f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f9a528d779ab0446d14dbfc7327ee61c3aefc743a4859cf06116678b8e87a4f"}
{"level":"debug","ts":"2026-07-07T22:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f9a528d779ab0446d14dbfc7327ee61c3aefc743a4859cf06116678b8e87a4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:41:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:41:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f9a528d779ab0446d14dbfc7327ee61c3aefc743a4859cf06116678b8e87a4f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f9a528d779ab0446d14dbfc7327ee61c3aefc743a4859cf06116678b8e87a4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f9a528d779ab0446d14dbfc7327ee61c3aefc743a4859cf06116678b8e87a4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:41:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:41:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f9a528d779ab0446d14dbfc7327ee61c3aefc743a4859cf06116678b8e87a4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f9a528d779ab0446d14dbfc7327ee61c3aefc743a4859cf06116678b8e87a4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f9a528d779ab0446d14dbfc7327ee61c3aefc743a4859cf06116678b8e87a4f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f9a528d779ab0446d14dbfc7327ee61c3aefc743a4859cf06116678b8e87a4f"}
{"level":"debug","ts":"2026-07-07T22:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f9a528d779ab0446d14dbfc7327ee61c3aefc743a4859cf06116678b8e87a4f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f9a528d779ab0446d14dbfc7327ee61c3aefc743a4859cf06116678b8e87a4f"}
{"level":"debug","ts":"2026-07-07T22:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f9a528d779ab0446d14dbfc7327ee61c3aefc743a4859cf06116678b8e87a4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:41:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:41:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f9a528d779ab0446d14dbfc7327ee61c3aefc743a4859cf06116678b8e87a4f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f9a528d779ab0446d14dbfc7327ee61c3aefc743a4859cf06116678b8e87a4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f9a528d779ab0446d14dbfc7327ee61c3aefc743a4859cf06116678b8e87a4f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f9a528d779ab0446d14dbfc7327ee61c3aefc743a4859cf06116678b8e87a4f"}
{"level":"debug","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e2ca75333d5ac09b8e37553c107cea359be1795fcb1a0099836da39b69acd83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:41:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:41:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e2ca75333d5ac09b8e37553c107cea359be1795fcb1a0099836da39b69acd83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d29e3539e095498403aa76a27e84bd89a19f271190f1fc5bed985126a7f1eaf8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:41:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:41:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e2ca75333d5ac09b8e37553c107cea359be1795fcb1a0099836da39b69acd83"}
{"level":"info","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d29e3539e095498403aa76a27e84bd89a19f271190f1fc5bed985126a7f1eaf8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e2ca75333d5ac09b8e37553c107cea359be1795fcb1a0099836da39b69acd83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:41:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:41:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e2ca75333d5ac09b8e37553c107cea359be1795fcb1a0099836da39b69acd83"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e2ca75333d5ac09b8e37553c107cea359be1795fcb1a0099836da39b69acd83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d29e3539e095498403aa76a27e84bd89a19f271190f1fc5bed985126a7f1eaf8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:41:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:41:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d29e3539e095498403aa76a27e84bd89a19f271190f1fc5bed985126a7f1eaf8"}
{"level":"info","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d29e3539e095498403aa76a27e84bd89a19f271190f1fc5bed985126a7f1eaf8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e2ca75333d5ac09b8e37553c107cea359be1795fcb1a0099836da39b69acd83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:41:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:41:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e2ca75333d5ac09b8e37553c107cea359be1795fcb1a0099836da39b69acd83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d29e3539e095498403aa76a27e84bd89a19f271190f1fc5bed985126a7f1eaf8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:41:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:41:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d29e3539e095498403aa76a27e84bd89a19f271190f1fc5bed985126a7f1eaf8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e2ca75333d5ac09b8e37553c107cea359be1795fcb1a0099836da39b69acd83"}
{"level":"info","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d29e3539e095498403aa76a27e84bd89a19f271190f1fc5bed985126a7f1eaf8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e2ca75333d5ac09b8e37553c107cea359be1795fcb1a0099836da39b69acd83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:41:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:41:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e2ca75333d5ac09b8e37553c107cea359be1795fcb1a0099836da39b69acd83"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d29e3539e095498403aa76a27e84bd89a19f271190f1fc5bed985126a7f1eaf8"}
{"level":"info","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e2ca75333d5ac09b8e37553c107cea359be1795fcb1a0099836da39b69acd83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d29e3539e095498403aa76a27e84bd89a19f271190f1fc5bed985126a7f1eaf8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e2ca75333d5ac09b8e37553c107cea359be1795fcb1a0099836da39b69acd83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:41:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:41:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e2ca75333d5ac09b8e37553c107cea359be1795fcb1a0099836da39b69acd83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e13121aea70836ad2879bd94b40389bff5aa9bb63fff1bc659d1693d4b3a7f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:41:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:41:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e2ca75333d5ac09b8e37553c107cea359be1795fcb1a0099836da39b69acd83"}
{"level":"info","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e13121aea70836ad2879bd94b40389bff5aa9bb63fff1bc659d1693d4b3a7f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e2ca75333d5ac09b8e37553c107cea359be1795fcb1a0099836da39b69acd83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:41:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:41:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e2ca75333d5ac09b8e37553c107cea359be1795fcb1a0099836da39b69acd83"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e2ca75333d5ac09b8e37553c107cea359be1795fcb1a0099836da39b69acd83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e13121aea70836ad2879bd94b40389bff5aa9bb63fff1bc659d1693d4b3a7f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e2ca75333d5ac09b8e37553c107cea359be1795fcb1a0099836da39b69acd83","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d29e3539e095498403aa76a27e84bd89a19f271190f1fc5bed985126a7f1eaf8"}
{"level":"debug","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e13121aea70836ad2879bd94b40389bff5aa9bb63fff1bc659d1693d4b3a7f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:41:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:41:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e13121aea70836ad2879bd94b40389bff5aa9bb63fff1bc659d1693d4b3a7f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e13121aea70836ad2879bd94b40389bff5aa9bb63fff1bc659d1693d4b3a7f5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e13121aea70836ad2879bd94b40389bff5aa9bb63fff1bc659d1693d4b3a7f5"}
{"level":"debug","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e13121aea70836ad2879bd94b40389bff5aa9bb63fff1bc659d1693d4b3a7f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:41:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:41:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e13121aea70836ad2879bd94b40389bff5aa9bb63fff1bc659d1693d4b3a7f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e2ca75333d5ac09b8e37553c107cea359be1795fcb1a0099836da39b69acd83"}
{"level":"info","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e13121aea70836ad2879bd94b40389bff5aa9bb63fff1bc659d1693d4b3a7f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e13121aea70836ad2879bd94b40389bff5aa9bb63fff1bc659d1693d4b3a7f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:41:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:41:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e13121aea70836ad2879bd94b40389bff5aa9bb63fff1bc659d1693d4b3a7f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e13121aea70836ad2879bd94b40389bff5aa9bb63fff1bc659d1693d4b3a7f5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e13121aea70836ad2879bd94b40389bff5aa9bb63fff1bc659d1693d4b3a7f5"}
{"level":"debug","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e13121aea70836ad2879bd94b40389bff5aa9bb63fff1bc659d1693d4b3a7f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22c9005ed7b6e4103a87801b1a8779f551e7a01224e25f3363e5845aaacba4ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:41:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:41:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22c9005ed7b6e4103a87801b1a8779f551e7a01224e25f3363e5845aaacba4ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22c9005ed7b6e4103a87801b1a8779f551e7a01224e25f3363e5845aaacba4ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e13121aea70836ad2879bd94b40389bff5aa9bb63fff1bc659d1693d4b3a7f5"}
{"level":"debug","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22c9005ed7b6e4103a87801b1a8779f551e7a01224e25f3363e5845aaacba4ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:41:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:41:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22c9005ed7b6e4103a87801b1a8779f551e7a01224e25f3363e5845aaacba4ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e13121aea70836ad2879bd94b40389bff5aa9bb63fff1bc659d1693d4b3a7f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:41:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:41:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e13121aea70836ad2879bd94b40389bff5aa9bb63fff1bc659d1693d4b3a7f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22c9005ed7b6e4103a87801b1a8779f551e7a01224e25f3363e5845aaacba4ee"}
{"level":"info","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e13121aea70836ad2879bd94b40389bff5aa9bb63fff1bc659d1693d4b3a7f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22c9005ed7b6e4103a87801b1a8779f551e7a01224e25f3363e5845aaacba4ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e13121aea70836ad2879bd94b40389bff5aa9bb63fff1bc659d1693d4b3a7f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22c9005ed7b6e4103a87801b1a8779f551e7a01224e25f3363e5845aaacba4ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22c9005ed7b6e4103a87801b1a8779f551e7a01224e25f3363e5845aaacba4ee"}
{"level":"info","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e13121aea70836ad2879bd94b40389bff5aa9bb63fff1bc659d1693d4b3a7f5"}
{"level":"debug","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c52b10756581e097131951869d6d49312326a971331c4cd5c47bfb7edd799a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:41:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:41:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c52b10756581e097131951869d6d49312326a971331c4cd5c47bfb7edd799a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c52b10756581e097131951869d6d49312326a971331c4cd5c47bfb7edd799a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c52b10756581e097131951869d6d49312326a971331c4cd5c47bfb7edd799a6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c52b10756581e097131951869d6d49312326a971331c4cd5c47bfb7edd799a6"}
{"level":"debug","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c52b10756581e097131951869d6d49312326a971331c4cd5c47bfb7edd799a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22c9005ed7b6e4103a87801b1a8779f551e7a01224e25f3363e5845aaacba4ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:41:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:41:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["22c9005ed7b6e4103a87801b1a8779f551e7a01224e25f3363e5845aaacba4ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c52b10756581e097131951869d6d49312326a971331c4cd5c47bfb7edd799a6"}
{"level":"info","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22c9005ed7b6e4103a87801b1a8779f551e7a01224e25f3363e5845aaacba4ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22c9005ed7b6e4103a87801b1a8779f551e7a01224e25f3363e5845aaacba4ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22c9005ed7b6e4103a87801b1a8779f551e7a01224e25f3363e5845aaacba4ee"}
{"level":"debug","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c52b10756581e097131951869d6d49312326a971331c4cd5c47bfb7edd799a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:41:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:41:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c52b10756581e097131951869d6d49312326a971331c4cd5c47bfb7edd799a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c52b10756581e097131951869d6d49312326a971331c4cd5c47bfb7edd799a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c52b10756581e097131951869d6d49312326a971331c4cd5c47bfb7edd799a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8822a0446f18df868d5c22e614ab0957ad355ab22ee72c271a8e4de39e685e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:41:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:41:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8822a0446f18df868d5c22e614ab0957ad355ab22ee72c271a8e4de39e685e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8822a0446f18df868d5c22e614ab0957ad355ab22ee72c271a8e4de39e685e8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c52b10756581e097131951869d6d49312326a971331c4cd5c47bfb7edd799a6"}
{"level":"debug","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8822a0446f18df868d5c22e614ab0957ad355ab22ee72c271a8e4de39e685e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:41:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:41:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8822a0446f18df868d5c22e614ab0957ad355ab22ee72c271a8e4de39e685e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8822a0446f18df868d5c22e614ab0957ad355ab22ee72c271a8e4de39e685e8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8822a0446f18df868d5c22e614ab0957ad355ab22ee72c271a8e4de39e685e8"}
{"level":"debug","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8822a0446f18df868d5c22e614ab0957ad355ab22ee72c271a8e4de39e685e8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8822a0446f18df868d5c22e614ab0957ad355ab22ee72c271a8e4de39e685e8"}
{"level":"debug","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65138f9e832d977a709c711a2c0b5e1fd41ab1dc3e0e5d9bdde004da3a596edc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:41:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:41:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65138f9e832d977a709c711a2c0b5e1fd41ab1dc3e0e5d9bdde004da3a596edc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65138f9e832d977a709c711a2c0b5e1fd41ab1dc3e0e5d9bdde004da3a596edc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65138f9e832d977a709c711a2c0b5e1fd41ab1dc3e0e5d9bdde004da3a596edc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65138f9e832d977a709c711a2c0b5e1fd41ab1dc3e0e5d9bdde004da3a596edc"}
{"level":"debug","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8822a0446f18df868d5c22e614ab0957ad355ab22ee72c271a8e4de39e685e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:41:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:41:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8822a0446f18df868d5c22e614ab0957ad355ab22ee72c271a8e4de39e685e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8822a0446f18df868d5c22e614ab0957ad355ab22ee72c271a8e4de39e685e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65138f9e832d977a709c711a2c0b5e1fd41ab1dc3e0e5d9bdde004da3a596edc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8822a0446f18df868d5c22e614ab0957ad355ab22ee72c271a8e4de39e685e8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65138f9e832d977a709c711a2c0b5e1fd41ab1dc3e0e5d9bdde004da3a596edc"}
{"level":"info","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8822a0446f18df868d5c22e614ab0957ad355ab22ee72c271a8e4de39e685e8"}
{"level":"debug","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65138f9e832d977a709c711a2c0b5e1fd41ab1dc3e0e5d9bdde004da3a596edc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:41:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:41:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["65138f9e832d977a709c711a2c0b5e1fd41ab1dc3e0e5d9bdde004da3a596edc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65138f9e832d977a709c711a2c0b5e1fd41ab1dc3e0e5d9bdde004da3a596edc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65138f9e832d977a709c711a2c0b5e1fd41ab1dc3e0e5d9bdde004da3a596edc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:41:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:41:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65138f9e832d977a709c711a2c0b5e1fd41ab1dc3e0e5d9bdde004da3a596edc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65138f9e832d977a709c711a2c0b5e1fd41ab1dc3e0e5d9bdde004da3a596edc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65138f9e832d977a709c711a2c0b5e1fd41ab1dc3e0e5d9bdde004da3a596edc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65138f9e832d977a709c711a2c0b5e1fd41ab1dc3e0e5d9bdde004da3a596edc"}
{"level":"debug","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65138f9e832d977a709c711a2c0b5e1fd41ab1dc3e0e5d9bdde004da3a596edc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65138f9e832d977a709c711a2c0b5e1fd41ab1dc3e0e5d9bdde004da3a596edc"}
{"level":"debug","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65138f9e832d977a709c711a2c0b5e1fd41ab1dc3e0e5d9bdde004da3a596edc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:41:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:41:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["65138f9e832d977a709c711a2c0b5e1fd41ab1dc3e0e5d9bdde004da3a596edc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65138f9e832d977a709c711a2c0b5e1fd41ab1dc3e0e5d9bdde004da3a596edc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65138f9e832d977a709c711a2c0b5e1fd41ab1dc3e0e5d9bdde004da3a596edc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:41:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:41:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65138f9e832d977a709c711a2c0b5e1fd41ab1dc3e0e5d9bdde004da3a596edc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65138f9e832d977a709c711a2c0b5e1fd41ab1dc3e0e5d9bdde004da3a596edc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65138f9e832d977a709c711a2c0b5e1fd41ab1dc3e0e5d9bdde004da3a596edc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65138f9e832d977a709c711a2c0b5e1fd41ab1dc3e0e5d9bdde004da3a596edc"}
{"level":"debug","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65138f9e832d977a709c711a2c0b5e1fd41ab1dc3e0e5d9bdde004da3a596edc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65138f9e832d977a709c711a2c0b5e1fd41ab1dc3e0e5d9bdde004da3a596edc"}
{"level":"debug","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65138f9e832d977a709c711a2c0b5e1fd41ab1dc3e0e5d9bdde004da3a596edc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:41:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:41:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["65138f9e832d977a709c711a2c0b5e1fd41ab1dc3e0e5d9bdde004da3a596edc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65138f9e832d977a709c711a2c0b5e1fd41ab1dc3e0e5d9bdde004da3a596edc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65138f9e832d977a709c711a2c0b5e1fd41ab1dc3e0e5d9bdde004da3a596edc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:41:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:41:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65138f9e832d977a709c711a2c0b5e1fd41ab1dc3e0e5d9bdde004da3a596edc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65138f9e832d977a709c711a2c0b5e1fd41ab1dc3e0e5d9bdde004da3a596edc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65138f9e832d977a709c711a2c0b5e1fd41ab1dc3e0e5d9bdde004da3a596edc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65138f9e832d977a709c711a2c0b5e1fd41ab1dc3e0e5d9bdde004da3a596edc"}
{"level":"debug","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65138f9e832d977a709c711a2c0b5e1fd41ab1dc3e0e5d9bdde004da3a596edc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65138f9e832d977a709c711a2c0b5e1fd41ab1dc3e0e5d9bdde004da3a596edc"}
{"level":"debug","ts":"2026-07-07T22:41:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65138f9e832d977a709c711a2c0b5e1fd41ab1dc3e0e5d9bdde004da3a596edc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:41:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:41:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["65138f9e832d977a709c711a2c0b5e1fd41ab1dc3e0e5d9bdde004da3a596edc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65138f9e832d977a709c711a2c0b5e1fd41ab1dc3e0e5d9bdde004da3a596edc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65138f9e832d977a709c711a2c0b5e1fd41ab1dc3e0e5d9bdde004da3a596edc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:41:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:41:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65138f9e832d977a709c711a2c0b5e1fd41ab1dc3e0e5d9bdde004da3a596edc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65138f9e832d977a709c711a2c0b5e1fd41ab1dc3e0e5d9bdde004da3a596edc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65138f9e832d977a709c711a2c0b5e1fd41ab1dc3e0e5d9bdde004da3a596edc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:41:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65138f9e832d977a709c711a2c0b5e1fd41ab1dc3e0e5d9bdde004da3a596edc"}
{"level":"debug","ts":"2026-07-07T22:41:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65138f9e832d977a709c711a2c0b5e1fd41ab1dc3e0e5d9bdde004da3a596edc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:41:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65138f9e832d977a709c711a2c0b5e1fd41ab1dc3e0e5d9bdde004da3a596edc"}
{"level":"debug","ts":"2026-07-07T22:41:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65138f9e832d977a709c711a2c0b5e1fd41ab1dc3e0e5d9bdde004da3a596edc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:41:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:41:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["65138f9e832d977a709c711a2c0b5e1fd41ab1dc3e0e5d9bdde004da3a596edc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65138f9e832d977a709c711a2c0b5e1fd41ab1dc3e0e5d9bdde004da3a596edc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65138f9e832d977a709c711a2c0b5e1fd41ab1dc3e0e5d9bdde004da3a596edc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:41:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:41:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65138f9e832d977a709c711a2c0b5e1fd41ab1dc3e0e5d9bdde004da3a596edc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65138f9e832d977a709c711a2c0b5e1fd41ab1dc3e0e5d9bdde004da3a596edc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65138f9e832d977a709c711a2c0b5e1fd41ab1dc3e0e5d9bdde004da3a596edc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:41:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65138f9e832d977a709c711a2c0b5e1fd41ab1dc3e0e5d9bdde004da3a596edc"}
{"level":"debug","ts":"2026-07-07T22:41:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65138f9e832d977a709c711a2c0b5e1fd41ab1dc3e0e5d9bdde004da3a596edc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:41:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65138f9e832d977a709c711a2c0b5e1fd41ab1dc3e0e5d9bdde004da3a596edc"}
{"level":"debug","ts":"2026-07-07T22:41:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65138f9e832d977a709c711a2c0b5e1fd41ab1dc3e0e5d9bdde004da3a596edc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:41:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:41:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["65138f9e832d977a709c711a2c0b5e1fd41ab1dc3e0e5d9bdde004da3a596edc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65138f9e832d977a709c711a2c0b5e1fd41ab1dc3e0e5d9bdde004da3a596edc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65138f9e832d977a709c711a2c0b5e1fd41ab1dc3e0e5d9bdde004da3a596edc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:41:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65138f9e832d977a709c711a2c0b5e1fd41ab1dc3e0e5d9bdde004da3a596edc"}
{"level":"debug","ts":"2026-07-07T22:41:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31e591741d87a60e8e8a2bc2fe02037e3b94c3f73dc0a3b48c9366ea9e88717a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:41:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:41:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31e591741d87a60e8e8a2bc2fe02037e3b94c3f73dc0a3b48c9366ea9e88717a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31e591741d87a60e8e8a2bc2fe02037e3b94c3f73dc0a3b48c9366ea9e88717a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31e591741d87a60e8e8a2bc2fe02037e3b94c3f73dc0a3b48c9366ea9e88717a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:41:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31e591741d87a60e8e8a2bc2fe02037e3b94c3f73dc0a3b48c9366ea9e88717a"}
{"level":"debug","ts":"2026-07-07T22:41:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31e591741d87a60e8e8a2bc2fe02037e3b94c3f73dc0a3b48c9366ea9e88717a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:41:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31e591741d87a60e8e8a2bc2fe02037e3b94c3f73dc0a3b48c9366ea9e88717a"}
{"level":"debug","ts":"2026-07-07T22:41:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31e591741d87a60e8e8a2bc2fe02037e3b94c3f73dc0a3b48c9366ea9e88717a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:41:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:41:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31e591741d87a60e8e8a2bc2fe02037e3b94c3f73dc0a3b48c9366ea9e88717a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31e591741d87a60e8e8a2bc2fe02037e3b94c3f73dc0a3b48c9366ea9e88717a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31e591741d87a60e8e8a2bc2fe02037e3b94c3f73dc0a3b48c9366ea9e88717a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4227990af0a79d341e9784fc9409f8de102f0ade96eaa0451ab04b8e680e8c80","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:41:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31e591741d87a60e8e8a2bc2fe02037e3b94c3f73dc0a3b48c9366ea9e88717a"}
{"level":"info","ts":"2026-07-07T22:41:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4227990af0a79d341e9784fc9409f8de102f0ade96eaa0451ab04b8e680e8c80"}
{"level":"debug","ts":"2026-07-07T22:41:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e13121aea70836ad2879bd94b40389bff5aa9bb63fff1bc659d1693d4b3a7f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:41:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:41:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e13121aea70836ad2879bd94b40389bff5aa9bb63fff1bc659d1693d4b3a7f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e13121aea70836ad2879bd94b40389bff5aa9bb63fff1bc659d1693d4b3a7f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e13121aea70836ad2879bd94b40389bff5aa9bb63fff1bc659d1693d4b3a7f5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:41:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e13121aea70836ad2879bd94b40389bff5aa9bb63fff1bc659d1693d4b3a7f5"}
{"level":"debug","ts":"2026-07-07T22:41:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e13121aea70836ad2879bd94b40389bff5aa9bb63fff1bc659d1693d4b3a7f5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:41:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e13121aea70836ad2879bd94b40389bff5aa9bb63fff1bc659d1693d4b3a7f5"}
{"level":"debug","ts":"2026-07-07T22:41:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e13121aea70836ad2879bd94b40389bff5aa9bb63fff1bc659d1693d4b3a7f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:41:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:41:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e13121aea70836ad2879bd94b40389bff5aa9bb63fff1bc659d1693d4b3a7f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e13121aea70836ad2879bd94b40389bff5aa9bb63fff1bc659d1693d4b3a7f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e13121aea70836ad2879bd94b40389bff5aa9bb63fff1bc659d1693d4b3a7f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:41:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:41:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e13121aea70836ad2879bd94b40389bff5aa9bb63fff1bc659d1693d4b3a7f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"277b17bac8602d04d9469a67d743d4566caac021dc4a74a82ad0607d313fdf32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e13121aea70836ad2879bd94b40389bff5aa9bb63fff1bc659d1693d4b3a7f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e13121aea70836ad2879bd94b40389bff5aa9bb63fff1bc659d1693d4b3a7f5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:41:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e13121aea70836ad2879bd94b40389bff5aa9bb63fff1bc659d1693d4b3a7f5"}
{"level":"debug","ts":"2026-07-07T22:41:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e13121aea70836ad2879bd94b40389bff5aa9bb63fff1bc659d1693d4b3a7f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:41:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:41:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e13121aea70836ad2879bd94b40389bff5aa9bb63fff1bc659d1693d4b3a7f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/277b17bac8602d04d9469a67d743d4566caac021dc4a74a82ad0607d313fdf32"}
{"level":"info","ts":"2026-07-07T22:41:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e13121aea70836ad2879bd94b40389bff5aa9bb63fff1bc659d1693d4b3a7f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e13121aea70836ad2879bd94b40389bff5aa9bb63fff1bc659d1693d4b3a7f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:41:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:41:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e13121aea70836ad2879bd94b40389bff5aa9bb63fff1bc659d1693d4b3a7f5"}
{"level":"info","ts":"2026-07-07T22:41:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e13121aea70836ad2879bd94b40389bff5aa9bb63fff1bc659d1693d4b3a7f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e13121aea70836ad2879bd94b40389bff5aa9bb63fff1bc659d1693d4b3a7f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e13121aea70836ad2879bd94b40389bff5aa9bb63fff1bc659d1693d4b3a7f5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:41:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e13121aea70836ad2879bd94b40389bff5aa9bb63fff1bc659d1693d4b3a7f5"}
{"level":"debug","ts":"2026-07-07T22:41:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e13121aea70836ad2879bd94b40389bff5aa9bb63fff1bc659d1693d4b3a7f5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:41:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e13121aea70836ad2879bd94b40389bff5aa9bb63fff1bc659d1693d4b3a7f5"}
{"level":"debug","ts":"2026-07-07T22:41:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb6677a84f2011c8778e746156db2939d5a85331d1da5327e5a965925b8554bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e13121aea70836ad2879bd94b40389bff5aa9bb63fff1bc659d1693d4b3a7f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:41:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:41:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e13121aea70836ad2879bd94b40389bff5aa9bb63fff1bc659d1693d4b3a7f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb6677a84f2011c8778e746156db2939d5a85331d1da5327e5a965925b8554bd"}
{"level":"info","ts":"2026-07-07T22:41:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e13121aea70836ad2879bd94b40389bff5aa9bb63fff1bc659d1693d4b3a7f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e13121aea70836ad2879bd94b40389bff5aa9bb63fff1bc659d1693d4b3a7f5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:41:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e13121aea70836ad2879bd94b40389bff5aa9bb63fff1bc659d1693d4b3a7f5"}
{"level":"debug","ts":"2026-07-07T22:41:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e2ca75333d5ac09b8e37553c107cea359be1795fcb1a0099836da39b69acd83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:41:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:41:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e2ca75333d5ac09b8e37553c107cea359be1795fcb1a0099836da39b69acd83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e2ca75333d5ac09b8e37553c107cea359be1795fcb1a0099836da39b69acd83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e2ca75333d5ac09b8e37553c107cea359be1795fcb1a0099836da39b69acd83","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:41:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e2ca75333d5ac09b8e37553c107cea359be1795fcb1a0099836da39b69acd83"}
{"level":"debug","ts":"2026-07-07T22:41:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e2ca75333d5ac09b8e37553c107cea359be1795fcb1a0099836da39b69acd83","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:41:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e2ca75333d5ac09b8e37553c107cea359be1795fcb1a0099836da39b69acd83"}
{"level":"debug","ts":"2026-07-07T22:41:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e2ca75333d5ac09b8e37553c107cea359be1795fcb1a0099836da39b69acd83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:41:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:41:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e2ca75333d5ac09b8e37553c107cea359be1795fcb1a0099836da39b69acd83"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e2ca75333d5ac09b8e37553c107cea359be1795fcb1a0099836da39b69acd83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e2ca75333d5ac09b8e37553c107cea359be1795fcb1a0099836da39b69acd83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d38fbf2c5357d325a382939175e7bc43b30a9f696bb0c7249dc1bbf43a6ca5a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:41:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e2ca75333d5ac09b8e37553c107cea359be1795fcb1a0099836da39b69acd83"}
{"level":"info","ts":"2026-07-07T22:41:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d38fbf2c5357d325a382939175e7bc43b30a9f696bb0c7249dc1bbf43a6ca5a"}
{"level":"debug","ts":"2026-07-07T22:41:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65138f9e832d977a709c711a2c0b5e1fd41ab1dc3e0e5d9bdde004da3a596edc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:41:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:41:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65138f9e832d977a709c711a2c0b5e1fd41ab1dc3e0e5d9bdde004da3a596edc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65138f9e832d977a709c711a2c0b5e1fd41ab1dc3e0e5d9bdde004da3a596edc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65138f9e832d977a709c711a2c0b5e1fd41ab1dc3e0e5d9bdde004da3a596edc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:41:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65138f9e832d977a709c711a2c0b5e1fd41ab1dc3e0e5d9bdde004da3a596edc"}
{"level":"debug","ts":"2026-07-07T22:41:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65138f9e832d977a709c711a2c0b5e1fd41ab1dc3e0e5d9bdde004da3a596edc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:41:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65138f9e832d977a709c711a2c0b5e1fd41ab1dc3e0e5d9bdde004da3a596edc"}
{"level":"debug","ts":"2026-07-07T22:41:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"65138f9e832d977a709c711a2c0b5e1fd41ab1dc3e0e5d9bdde004da3a596edc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:41:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:41:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["65138f9e832d977a709c711a2c0b5e1fd41ab1dc3e0e5d9bdde004da3a596edc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"65138f9e832d977a709c711a2c0b5e1fd41ab1dc3e0e5d9bdde004da3a596edc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"65138f9e832d977a709c711a2c0b5e1fd41ab1dc3e0e5d9bdde004da3a596edc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a381ef84795049e53ccfc27eaf9e3cb72f34c5e61e5932e68dbcdc29b57ed81","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:41:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/65138f9e832d977a709c711a2c0b5e1fd41ab1dc3e0e5d9bdde004da3a596edc"}
{"level":"debug","ts":"2026-07-07T22:41:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5537b0062c252185bf00532712cbc3f55fe3f759376c0b7564641cf1be0a255","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37853d79df333d9b381888a30e9959b7a4e3563fba31b6f0d7fb2c1d71b9480f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:41:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a381ef84795049e53ccfc27eaf9e3cb72f34c5e61e5932e68dbcdc29b57ed81"}
{"level":"info","ts":"2026-07-07T22:41:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5537b0062c252185bf00532712cbc3f55fe3f759376c0b7564641cf1be0a255"}
{"level":"info","ts":"2026-07-07T22:41:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37853d79df333d9b381888a30e9959b7a4e3563fba31b6f0d7fb2c1d71b9480f"}
{"level":"debug","ts":"2026-07-07T22:41:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f9a528d779ab0446d14dbfc7327ee61c3aefc743a4859cf06116678b8e87a4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:41:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:41:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f9a528d779ab0446d14dbfc7327ee61c3aefc743a4859cf06116678b8e87a4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e8cf96c9536f07185b3239cfe87ad9ade58fff7f91979418b53d7c9c761de6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f9a528d779ab0446d14dbfc7327ee61c3aefc743a4859cf06116678b8e87a4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f9a528d779ab0446d14dbfc7327ee61c3aefc743a4859cf06116678b8e87a4f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:41:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f9a528d779ab0446d14dbfc7327ee61c3aefc743a4859cf06116678b8e87a4f"}
{"level":"debug","ts":"2026-07-07T22:41:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22c9005ed7b6e4103a87801b1a8779f551e7a01224e25f3363e5845aaacba4ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f9a528d779ab0446d14dbfc7327ee61c3aefc743a4859cf06116678b8e87a4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:41:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:41:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f9a528d779ab0446d14dbfc7327ee61c3aefc743a4859cf06116678b8e87a4f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e8cf96c9536f07185b3239cfe87ad9ade58fff7f91979418b53d7c9c761de6b"}
{"level":"info","ts":"2026-07-07T22:41:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f9a528d779ab0446d14dbfc7327ee61c3aefc743a4859cf06116678b8e87a4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a8567710872db35882e39159253d625ee92e29486331d26f348f7d45fdc1a08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f9a528d779ab0446d14dbfc7327ee61c3aefc743a4859cf06116678b8e87a4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:41:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:41:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f9a528d779ab0446d14dbfc7327ee61c3aefc743a4859cf06116678b8e87a4f"}
{"level":"info","ts":"2026-07-07T22:41:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f9a528d779ab0446d14dbfc7327ee61c3aefc743a4859cf06116678b8e87a4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f9a528d779ab0446d14dbfc7327ee61c3aefc743a4859cf06116678b8e87a4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:41:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:41:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f9a528d779ab0446d14dbfc7327ee61c3aefc743a4859cf06116678b8e87a4f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f9a528d779ab0446d14dbfc7327ee61c3aefc743a4859cf06116678b8e87a4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f9a528d779ab0446d14dbfc7327ee61c3aefc743a4859cf06116678b8e87a4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:41:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:41:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f9a528d779ab0446d14dbfc7327ee61c3aefc743a4859cf06116678b8e87a4f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:41:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22c9005ed7b6e4103a87801b1a8779f551e7a01224e25f3363e5845aaacba4ee"}
{"level":"error","ts":"2026-07-07T22:41:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5f9a528d779ab0446d14dbfc7327ee61c3aefc743a4859cf06116678b8e87a4f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5f9a528d779ab0446d14dbfc7327ee61c3aefc743a4859cf06116678b8e87a4f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T22:41:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f9a528d779ab0446d14dbfc7327ee61c3aefc743a4859cf06116678b8e87a4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f9a528d779ab0446d14dbfc7327ee61c3aefc743a4859cf06116678b8e87a4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c52b10756581e097131951869d6d49312326a971331c4cd5c47bfb7edd799a6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:41:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a8567710872db35882e39159253d625ee92e29486331d26f348f7d45fdc1a08"}
{"level":"debug","ts":"2026-07-07T22:41:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8822a0446f18df868d5c22e614ab0957ad355ab22ee72c271a8e4de39e685e8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:41:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f9a528d779ab0446d14dbfc7327ee61c3aefc743a4859cf06116678b8e87a4f"}
{"level":"debug","ts":"2026-07-07T22:41:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0f8557d854a7cca4f7cc8117f54456fcf71adffaea31c1f621ba33faac554f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:41:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d29e3539e095498403aa76a27e84bd89a19f271190f1fc5bed985126a7f1eaf8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:41:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c52b10756581e097131951869d6d49312326a971331c4cd5c47bfb7edd799a6"}
{"level":"debug","ts":"2026-07-07T22:41:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a04190315e62176141c48b37d3b56a299b0a33b14dc3d2d8eb23a1d38d990ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:41:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8822a0446f18df868d5c22e614ab0957ad355ab22ee72c271a8e4de39e685e8"}
{"level":"info","ts":"2026-07-07T22:41:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0f8557d854a7cca4f7cc8117f54456fcf71adffaea31c1f621ba33faac554f2"}
{"level":"info","ts":"2026-07-07T22:41:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d29e3539e095498403aa76a27e84bd89a19f271190f1fc5bed985126a7f1eaf8"}
{"level":"info","ts":"2026-07-07T22:41:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a04190315e62176141c48b37d3b56a299b0a33b14dc3d2d8eb23a1d38d990ab"}
{"level":"info","ts":"2026-07-07T22:42:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a3a0b3e7-da53-4d67-8748-277e0213ac5e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:40290","PortSpecifier":{"PortValue":40290}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a3a0b3e7-da53-4d67-8748-277e0213ac5e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-41e952.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T22:42:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a3a0b3e7-da53-4d67-8748-277e0213ac5e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:40290","PortSpecifier":{"PortValue":40290}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783464121,"nanos":33002304},"http":{"id":"a3a0b3e7-da53-4d67-8748-277e0213ac5e","method":"POST","headers":{":authority":"e2e-shared-a-41e952.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T22:42:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a3a0b3e7-da53-4d67-8748-277e0213ac5e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T22:42:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a3a0b3e7-da53-4d67-8748-277e0213ac5e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bb4924e6-aa4e-47bc-bc23-287bb2409310","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20e4333-b741-405f-90ea-62e9cb59fc3b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7352d9229b8d"]}}
{"level":"debug","ts":"2026-07-07T22:42:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a3a0b3e7-da53-4d67-8748-277e0213ac5e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7352d9229b8d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20e4333-b741-405f-90ea-62e9cb59fc3b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bb4924e6-aa4e-47bc-bc23-287bb2409310","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9a8567710872db35882e39159253d625ee92e29486331d26f348f7d45fdc1a08"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-41e952.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T22:42:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a3a0b3e7-da53-4d67-8748-277e0213ac5e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:42:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a3a0b3e7-da53-4d67-8748-277e0213ac5e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:42:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a3a0b3e7-da53-4d67-8748-277e0213ac5e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-41e952/sub-test-model-41e952\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:42:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a3a0b3e7-da53-4d67-8748-277e0213ac5e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T22:42:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a3a0b3e7-da53-4d67-8748-277e0213ac5e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T22:42:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a3a0b3e7-da53-4d67-8748-277e0213ac5e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T22:42:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a3a0b3e7-da53-4d67-8748-277e0213ac5e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T22:42:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a3a0b3e7-da53-4d67-8748-277e0213ac5e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T22:42:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cf41b7ba-8be0-435c-a537-69154e2cc9b0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41608","PortSpecifier":{"PortValue":41608}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cf41b7ba-8be0-435c-a537-69154e2cc9b0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a4bfe6.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T22:42:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cf41b7ba-8be0-435c-a537-69154e2cc9b0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41608","PortSpecifier":{"PortValue":41608}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783464121,"nanos":72947046},"http":{"id":"cf41b7ba-8be0-435c-a537-69154e2cc9b0","method":"POST","headers":{":authority":"e2e-shared-b-a4bfe6.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T22:42:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cf41b7ba-8be0-435c-a537-69154e2cc9b0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T22:42:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cf41b7ba-8be0-435c-a537-69154e2cc9b0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bb4924e6-aa4e-47bc-bc23-287bb2409310","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20e4333-b741-405f-90ea-62e9cb59fc3b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7352d9229b8d"]}}
{"level":"debug","ts":"2026-07-07T22:42:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cf41b7ba-8be0-435c-a537-69154e2cc9b0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7352d9229b8d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20e4333-b741-405f-90ea-62e9cb59fc3b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bb4924e6-aa4e-47bc-bc23-287bb2409310","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"eb6677a84f2011c8778e746156db2939d5a85331d1da5327e5a965925b8554bd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a4bfe6.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T22:42:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cf41b7ba-8be0-435c-a537-69154e2cc9b0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:42:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cf41b7ba-8be0-435c-a537-69154e2cc9b0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:42:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cf41b7ba-8be0-435c-a537-69154e2cc9b0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a4bfe6/sub-test-model-a4bfe6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:42:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cf41b7ba-8be0-435c-a537-69154e2cc9b0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T22:42:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cf41b7ba-8be0-435c-a537-69154e2cc9b0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T22:42:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cf41b7ba-8be0-435c-a537-69154e2cc9b0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T22:42:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cf41b7ba-8be0-435c-a537-69154e2cc9b0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T22:42:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cf41b7ba-8be0-435c-a537-69154e2cc9b0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T22:42:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"03662950-0774-4b45-a0cf-c022f7623958","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:40296","PortSpecifier":{"PortValue":40296}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"03662950-0774-4b45-a0cf-c022f7623958","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-41e952.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T22:42:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"03662950-0774-4b45-a0cf-c022f7623958","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:40296","PortSpecifier":{"PortValue":40296}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783464121,"nanos":114343588},"http":{"id":"03662950-0774-4b45-a0cf-c022f7623958","method":"GET","headers":{":authority":"e2e-shared-a-41e952.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T22:42:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"03662950-0774-4b45-a0cf-c022f7623958","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1TIyKHy2z0cSQl9zV_EQS9wGlaYXDk98rghoNCpzUPZknoMub8WSK1xbEjb9r"}
{"level":"debug","ts":"2026-07-07T22:42:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"03662950-0774-4b45-a0cf-c022f7623958","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-41e952.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1TIyKHy2z0cSQl9zV_EQS9wGlaYXDk98rghoNCpzUPZknoMub8WSK1xbEjb9r\"}"}
{"level":"debug","ts":"2026-07-07T22:42:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"03662950-0774-4b45-a0cf-c022f7623958","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-41e952.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"de8c1c1b-eb52-4797-b75f-cdf92e84eb2d","keyName":"e2e-sub-iso-bee37a","subscription":"e2e-a-only-9296b6","tenant":"e2e-shared-a-41e952","userId":"de8c1c1b-eb52-4797-b75f-cdf92e84eb2d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T22:42:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"03662950-0774-4b45-a0cf-c022f7623958","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T22:42:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03662950-0774-4b45-a0cf-c022f7623958","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:42:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03662950-0774-4b45-a0cf-c022f7623958","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:42:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03662950-0774-4b45-a0cf-c022f7623958","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-41e952/sub-test-model-41e952\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:42:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03662950-0774-4b45-a0cf-c022f7623958","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T22:42:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"03662950-0774-4b45-a0cf-c022f7623958","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T22:42:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03662950-0774-4b45-a0cf-c022f7623958","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-9296b6"}
{"level":"debug","ts":"2026-07-07T22:42:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03662950-0774-4b45-a0cf-c022f7623958","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T22:42:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"03662950-0774-4b45-a0cf-c022f7623958","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T22:42:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"03662950-0774-4b45-a0cf-c022f7623958","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T22:42:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"79e24e10-e732-4d19-9160-f76dc82bfd84","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41624","PortSpecifier":{"PortValue":41624}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"79e24e10-e732-4d19-9160-f76dc82bfd84","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-a4bfe6.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T22:42:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"79e24e10-e732-4d19-9160-f76dc82bfd84","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41624","PortSpecifier":{"PortValue":41624}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783464121,"nanos":156891945},"http":{"id":"79e24e10-e732-4d19-9160-f76dc82bfd84","method":"GET","headers":{":authority":"e2e-shared-b-a4bfe6.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T22:42:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"79e24e10-e732-4d19-9160-f76dc82bfd84","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-OobjQK1OQTbPNzUS_duEEini3bSU6oVZXpoWUuxNbGMs9vER78xJTTUBTxgV"}
{"level":"debug","ts":"2026-07-07T22:42:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"79e24e10-e732-4d19-9160-f76dc82bfd84","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-a4bfe6.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-OobjQK1OQTbPNzUS_duEEini3bSU6oVZXpoWUuxNbGMs9vER78xJTTUBTxgV\"}"}
{"level":"debug","ts":"2026-07-07T22:42:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"79e24e10-e732-4d19-9160-f76dc82bfd84","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-a4bfe6.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"eeadf44d-b1be-4929-ad7a-7013ea3874b4","keyName":"e2e-sub-iso-328add","subscription":"e2e-b-only-9296b6","tenant":"e2e-shared-b-a4bfe6","userId":"eeadf44d-b1be-4929-ad7a-7013ea3874b4","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T22:42:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"79e24e10-e732-4d19-9160-f76dc82bfd84","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T22:42:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79e24e10-e732-4d19-9160-f76dc82bfd84","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:42:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79e24e10-e732-4d19-9160-f76dc82bfd84","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:42:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79e24e10-e732-4d19-9160-f76dc82bfd84","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a4bfe6/sub-test-model-a4bfe6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:42:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79e24e10-e732-4d19-9160-f76dc82bfd84","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T22:42:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"79e24e10-e732-4d19-9160-f76dc82bfd84","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T22:42:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79e24e10-e732-4d19-9160-f76dc82bfd84","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-9296b6"}
{"level":"debug","ts":"2026-07-07T22:42:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79e24e10-e732-4d19-9160-f76dc82bfd84","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T22:42:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"79e24e10-e732-4d19-9160-f76dc82bfd84","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T22:42:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"79e24e10-e732-4d19-9160-f76dc82bfd84","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T22:42:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f3a81ca8-6a0c-4bb4-bd31-7682ad9edc01","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:55112","PortSpecifier":{"PortValue":55112}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f3a81ca8-6a0c-4bb4-bd31-7682ad9edc01","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-41e952.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T22:42:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f3a81ca8-6a0c-4bb4-bd31-7682ad9edc01","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:55112","PortSpecifier":{"PortValue":55112}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783464137,"nanos":459051367},"http":{"id":"f3a81ca8-6a0c-4bb4-bd31-7682ad9edc01","method":"POST","headers":{":authority":"e2e-shared-a-41e952.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T22:42:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f3a81ca8-6a0c-4bb4-bd31-7682ad9edc01","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T22:42:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f3a81ca8-6a0c-4bb4-bd31-7682ad9edc01","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bb4924e6-aa4e-47bc-bc23-287bb2409310","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20e4333-b741-405f-90ea-62e9cb59fc3b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7352d9229b8d"]}}
{"level":"debug","ts":"2026-07-07T22:42:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f3a81ca8-6a0c-4bb4-bd31-7682ad9edc01","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7352d9229b8d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20e4333-b741-405f-90ea-62e9cb59fc3b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bb4924e6-aa4e-47bc-bc23-287bb2409310","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9a8567710872db35882e39159253d625ee92e29486331d26f348f7d45fdc1a08"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-41e952.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T22:42:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f3a81ca8-6a0c-4bb4-bd31-7682ad9edc01","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:42:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f3a81ca8-6a0c-4bb4-bd31-7682ad9edc01","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:42:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f3a81ca8-6a0c-4bb4-bd31-7682ad9edc01","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-41e952/sub-test-model-41e952\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:42:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f3a81ca8-6a0c-4bb4-bd31-7682ad9edc01","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T22:42:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f3a81ca8-6a0c-4bb4-bd31-7682ad9edc01","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T22:42:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f3a81ca8-6a0c-4bb4-bd31-7682ad9edc01","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T22:42:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f3a81ca8-6a0c-4bb4-bd31-7682ad9edc01","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T22:42:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f3a81ca8-6a0c-4bb4-bd31-7682ad9edc01","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T22:42:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"def68afe-1fdb-4b72-9884-c16c34b2a134","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56524","PortSpecifier":{"PortValue":56524}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"def68afe-1fdb-4b72-9884-c16c34b2a134","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a4bfe6.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T22:42:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"def68afe-1fdb-4b72-9884-c16c34b2a134","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56524","PortSpecifier":{"PortValue":56524}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783464137,"nanos":493561349},"http":{"id":"def68afe-1fdb-4b72-9884-c16c34b2a134","method":"POST","headers":{":authority":"e2e-shared-b-a4bfe6.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T22:42:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"def68afe-1fdb-4b72-9884-c16c34b2a134","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T22:42:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"def68afe-1fdb-4b72-9884-c16c34b2a134","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bb4924e6-aa4e-47bc-bc23-287bb2409310","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20e4333-b741-405f-90ea-62e9cb59fc3b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7352d9229b8d"]}}
{"level":"debug","ts":"2026-07-07T22:42:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"def68afe-1fdb-4b72-9884-c16c34b2a134","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7352d9229b8d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20e4333-b741-405f-90ea-62e9cb59fc3b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bb4924e6-aa4e-47bc-bc23-287bb2409310","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"eb6677a84f2011c8778e746156db2939d5a85331d1da5327e5a965925b8554bd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a4bfe6.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T22:42:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"def68afe-1fdb-4b72-9884-c16c34b2a134","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:42:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"def68afe-1fdb-4b72-9884-c16c34b2a134","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:42:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"def68afe-1fdb-4b72-9884-c16c34b2a134","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a4bfe6/sub-test-model-a4bfe6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:42:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"def68afe-1fdb-4b72-9884-c16c34b2a134","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T22:42:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"def68afe-1fdb-4b72-9884-c16c34b2a134","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T22:42:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"def68afe-1fdb-4b72-9884-c16c34b2a134","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T22:42:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"def68afe-1fdb-4b72-9884-c16c34b2a134","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T22:42:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"def68afe-1fdb-4b72-9884-c16c34b2a134","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T22:42:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"af74bfc2-593e-47ec-8401-f8e75535260e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:55124","PortSpecifier":{"PortValue":55124}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"af74bfc2-593e-47ec-8401-f8e75535260e","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-41e952.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T22:42:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"af74bfc2-593e-47ec-8401-f8e75535260e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:55124","PortSpecifier":{"PortValue":55124}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783464137,"nanos":531060591},"http":{"id":"af74bfc2-593e-47ec-8401-f8e75535260e","method":"POST","headers":{":authority":"e2e-shared-a-41e952.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T22:42:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"af74bfc2-593e-47ec-8401-f8e75535260e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1HGk6OXWp264cwbkR_DD2hu5wdwLYWiDyZ01EmA8jCMhvVTSClyXvU4Fh1m6i"}
{"level":"debug","ts":"2026-07-07T22:42:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"af74bfc2-593e-47ec-8401-f8e75535260e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-41e952.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1HGk6OXWp264cwbkR_DD2hu5wdwLYWiDyZ01EmA8jCMhvVTSClyXvU4Fh1m6i\"}"}
{"level":"debug","ts":"2026-07-07T22:42:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"af74bfc2-593e-47ec-8401-f8e75535260e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-41e952.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cde28c78-655e-449a-917b-5927e4311767","keyName":"e2e-sub-iso-669ddb","subscription":"e2e-shared-sub-f0ea1c","tenant":"e2e-shared-a-41e952","userId":"cde28c78-655e-449a-917b-5927e4311767","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T22:42:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"af74bfc2-593e-47ec-8401-f8e75535260e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T22:42:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af74bfc2-593e-47ec-8401-f8e75535260e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:42:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af74bfc2-593e-47ec-8401-f8e75535260e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:42:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af74bfc2-593e-47ec-8401-f8e75535260e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-41e952/sub-test-model-41e952\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:42:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"af74bfc2-593e-47ec-8401-f8e75535260e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T22:42:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"af74bfc2-593e-47ec-8401-f8e75535260e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-f0ea1c"}
{"level":"debug","ts":"2026-07-07T22:42:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"af74bfc2-593e-47ec-8401-f8e75535260e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T22:42:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"af74bfc2-593e-47ec-8401-f8e75535260e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T22:42:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"af74bfc2-593e-47ec-8401-f8e75535260e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T22:42:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"af74bfc2-593e-47ec-8401-f8e75535260e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T22:42:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5f1458eb-1ebf-430c-98ee-553c0d463315","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56534","PortSpecifier":{"PortValue":56534}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5f1458eb-1ebf-430c-98ee-553c0d463315","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-a4bfe6.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T22:42:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5f1458eb-1ebf-430c-98ee-553c0d463315","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:56534","PortSpecifier":{"PortValue":56534}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783464137,"nanos":563654700},"http":{"id":"5f1458eb-1ebf-430c-98ee-553c0d463315","method":"POST","headers":{":authority":"e2e-shared-b-a4bfe6.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T22:42:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5f1458eb-1ebf-430c-98ee-553c0d463315","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1SoR3beJO3ZkMyFWG_OB3wZd4fyv6vxiR4dzXdbGryyI2qUXrSrYLoxilYESN"}
{"level":"debug","ts":"2026-07-07T22:42:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5f1458eb-1ebf-430c-98ee-553c0d463315","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-a4bfe6.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1SoR3beJO3ZkMyFWG_OB3wZd4fyv6vxiR4dzXdbGryyI2qUXrSrYLoxilYESN\"}"}
{"level":"debug","ts":"2026-07-07T22:42:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5f1458eb-1ebf-430c-98ee-553c0d463315","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-a4bfe6.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"732fee06-3581-4390-a95b-f5d976d92eb9","keyName":"e2e-sub-iso-685220","subscription":"e2e-shared-sub-f0ea1c","tenant":"e2e-shared-b-a4bfe6","userId":"732fee06-3581-4390-a95b-f5d976d92eb9","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T22:42:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5f1458eb-1ebf-430c-98ee-553c0d463315","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T22:42:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f1458eb-1ebf-430c-98ee-553c0d463315","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:42:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f1458eb-1ebf-430c-98ee-553c0d463315","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:42:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f1458eb-1ebf-430c-98ee-553c0d463315","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a4bfe6/sub-test-model-a4bfe6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:42:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f1458eb-1ebf-430c-98ee-553c0d463315","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T22:42:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5f1458eb-1ebf-430c-98ee-553c0d463315","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T22:42:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f1458eb-1ebf-430c-98ee-553c0d463315","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T22:42:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f1458eb-1ebf-430c-98ee-553c0d463315","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-f0ea1c"}
{"level":"info","ts":"2026-07-07T22:42:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5f1458eb-1ebf-430c-98ee-553c0d463315","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T22:42:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5f1458eb-1ebf-430c-98ee-553c0d463315","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T22:42:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d0f8557d854a7cca4f7cc8117f54456fcf71adffaea31c1f621ba33faac554f2"}
{"level":"info","ts":"2026-07-07T22:42:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/37853d79df333d9b381888a30e9959b7a4e3563fba31b6f0d7fb2c1d71b9480f"}
{"level":"info","ts":"2026-07-07T22:42:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3a04190315e62176141c48b37d3b56a299b0a33b14dc3d2d8eb23a1d38d990ab"}
{"level":"info","ts":"2026-07-07T22:42:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4227990af0a79d341e9784fc9409f8de102f0ade96eaa0451ab04b8e680e8c80"}
{"level":"info","ts":"2026-07-07T22:42:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/31e591741d87a60e8e8a2bc2fe02037e3b94c3f73dc0a3b48c9366ea9e88717a"}
{"level":"info","ts":"2026-07-07T22:42:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f5537b0062c252185bf00532712cbc3f55fe3f759376c0b7564641cf1be0a255"}
{"level":"info","ts":"2026-07-07T22:42:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/277b17bac8602d04d9469a67d743d4566caac021dc4a74a82ad0607d313fdf32"}
{"level":"info","ts":"2026-07-07T22:42:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5e8cf96c9536f07185b3239cfe87ad9ade58fff7f91979418b53d7c9c761de6b"}
{"level":"info","ts":"2026-07-07T22:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/65138f9e832d977a709c711a2c0b5e1fd41ab1dc3e0e5d9bdde004da3a596edc"}
{"level":"info","ts":"2026-07-07T22:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f8822a0446f18df868d5c22e614ab0957ad355ab22ee72c271a8e4de39e685e8"}
{"level":"info","ts":"2026-07-07T22:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3e13121aea70836ad2879bd94b40389bff5aa9bb63fff1bc659d1693d4b3a7f5"}
{"level":"info","ts":"2026-07-07T22:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/22c9005ed7b6e4103a87801b1a8779f551e7a01224e25f3363e5845aaacba4ee"}
{"level":"info","ts":"2026-07-07T22:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9c52b10756581e097131951869d6d49312326a971331c4cd5c47bfb7edd799a6"}
{"level":"info","ts":"2026-07-07T22:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d29e3539e095498403aa76a27e84bd89a19f271190f1fc5bed985126a7f1eaf8"}
{"level":"info","ts":"2026-07-07T22:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6e2ca75333d5ac09b8e37553c107cea359be1795fcb1a0099836da39b69acd83"}
{"level":"info","ts":"2026-07-07T22:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5f9a528d779ab0446d14dbfc7327ee61c3aefc743a4859cf06116678b8e87a4f"}
{"level":"debug","ts":"2026-07-07T22:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb9f3794828bc493dd23d246d4f008fa508f782d8f0494e7bfd35c2bdfb4ecc8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:42:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:42:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb9f3794828bc493dd23d246d4f008fa508f782d8f0494e7bfd35c2bdfb4ecc8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb9f3794828bc493dd23d246d4f008fa508f782d8f0494e7bfd35c2bdfb4ecc8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:42:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:42:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb9f3794828bc493dd23d246d4f008fa508f782d8f0494e7bfd35c2bdfb4ecc8"}
{"level":"info","ts":"2026-07-07T22:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb9f3794828bc493dd23d246d4f008fa508f782d8f0494e7bfd35c2bdfb4ecc8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb9f3794828bc493dd23d246d4f008fa508f782d8f0494e7bfd35c2bdfb4ecc8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:42:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:42:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T22:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"fb9f3794828bc493dd23d246d4f008fa508f782d8f0494e7bfd35c2bdfb4ecc8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"fb9f3794828bc493dd23d246d4f008fa508f782d8f0494e7bfd35c2bdfb4ecc8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T22:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb9f3794828bc493dd23d246d4f008fa508f782d8f0494e7bfd35c2bdfb4ecc8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb9f3794828bc493dd23d246d4f008fa508f782d8f0494e7bfd35c2bdfb4ecc8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb9f3794828bc493dd23d246d4f008fa508f782d8f0494e7bfd35c2bdfb4ecc8"}
{"level":"info","ts":"2026-07-07T22:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb9f3794828bc493dd23d246d4f008fa508f782d8f0494e7bfd35c2bdfb4ecc8"}
{"level":"debug","ts":"2026-07-07T22:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb9f3794828bc493dd23d246d4f008fa508f782d8f0494e7bfd35c2bdfb4ecc8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:42:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:42:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fb9f3794828bc493dd23d246d4f008fa508f782d8f0494e7bfd35c2bdfb4ecc8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb9f3794828bc493dd23d246d4f008fa508f782d8f0494e7bfd35c2bdfb4ecc8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb9f3794828bc493dd23d246d4f008fa508f782d8f0494e7bfd35c2bdfb4ecc8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:42:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:42:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb9f3794828bc493dd23d246d4f008fa508f782d8f0494e7bfd35c2bdfb4ecc8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb9f3794828bc493dd23d246d4f008fa508f782d8f0494e7bfd35c2bdfb4ecc8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb9f3794828bc493dd23d246d4f008fa508f782d8f0494e7bfd35c2bdfb4ecc8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb9f3794828bc493dd23d246d4f008fa508f782d8f0494e7bfd35c2bdfb4ecc8"}
{"level":"debug","ts":"2026-07-07T22:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb9f3794828bc493dd23d246d4f008fa508f782d8f0494e7bfd35c2bdfb4ecc8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb9f3794828bc493dd23d246d4f008fa508f782d8f0494e7bfd35c2bdfb4ecc8"}
{"level":"debug","ts":"2026-07-07T22:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ce83f609dcfe400b54e0a76c4a85fda2b09af080d7d4474d301a28676264cf7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:42:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:42:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ce83f609dcfe400b54e0a76c4a85fda2b09af080d7d4474d301a28676264cf7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb9f3794828bc493dd23d246d4f008fa508f782d8f0494e7bfd35c2bdfb4ecc8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:42:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:42:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fb9f3794828bc493dd23d246d4f008fa508f782d8f0494e7bfd35c2bdfb4ecc8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb9f3794828bc493dd23d246d4f008fa508f782d8f0494e7bfd35c2bdfb4ecc8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ce83f609dcfe400b54e0a76c4a85fda2b09af080d7d4474d301a28676264cf7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb9f3794828bc493dd23d246d4f008fa508f782d8f0494e7bfd35c2bdfb4ecc8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ce83f609dcfe400b54e0a76c4a85fda2b09af080d7d4474d301a28676264cf7"}
{"level":"debug","ts":"2026-07-07T22:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ce83f609dcfe400b54e0a76c4a85fda2b09af080d7d4474d301a28676264cf7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:42:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:42:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ce83f609dcfe400b54e0a76c4a85fda2b09af080d7d4474d301a28676264cf7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb9f3794828bc493dd23d246d4f008fa508f782d8f0494e7bfd35c2bdfb4ecc8"}
{"level":"info","ts":"2026-07-07T22:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ce83f609dcfe400b54e0a76c4a85fda2b09af080d7d4474d301a28676264cf7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ce83f609dcfe400b54e0a76c4a85fda2b09af080d7d4474d301a28676264cf7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:42:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:42:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ce83f609dcfe400b54e0a76c4a85fda2b09af080d7d4474d301a28676264cf7"}
{"level":"info","ts":"2026-07-07T22:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ce83f609dcfe400b54e0a76c4a85fda2b09af080d7d4474d301a28676264cf7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ce83f609dcfe400b54e0a76c4a85fda2b09af080d7d4474d301a28676264cf7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ce83f609dcfe400b54e0a76c4a85fda2b09af080d7d4474d301a28676264cf7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ce83f609dcfe400b54e0a76c4a85fda2b09af080d7d4474d301a28676264cf7"}
{"level":"debug","ts":"2026-07-07T22:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ce83f609dcfe400b54e0a76c4a85fda2b09af080d7d4474d301a28676264cf7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ce83f609dcfe400b54e0a76c4a85fda2b09af080d7d4474d301a28676264cf7"}
{"level":"debug","ts":"2026-07-07T22:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ce83f609dcfe400b54e0a76c4a85fda2b09af080d7d4474d301a28676264cf7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:42:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:42:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ce83f609dcfe400b54e0a76c4a85fda2b09af080d7d4474d301a28676264cf7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ce83f609dcfe400b54e0a76c4a85fda2b09af080d7d4474d301a28676264cf7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bcb797645fe5e47cd6e2885312f786747d66763e405987d9dda625f3038904e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:42:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:42:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bcb797645fe5e47cd6e2885312f786747d66763e405987d9dda625f3038904e"}
{"level":"info","ts":"2026-07-07T22:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bcb797645fe5e47cd6e2885312f786747d66763e405987d9dda625f3038904e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ce83f609dcfe400b54e0a76c4a85fda2b09af080d7d4474d301a28676264cf7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:42:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:42:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ce83f609dcfe400b54e0a76c4a85fda2b09af080d7d4474d301a28676264cf7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bcb797645fe5e47cd6e2885312f786747d66763e405987d9dda625f3038904e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:42:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:42:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2bcb797645fe5e47cd6e2885312f786747d66763e405987d9dda625f3038904e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ce83f609dcfe400b54e0a76c4a85fda2b09af080d7d4474d301a28676264cf7"}
{"level":"info","ts":"2026-07-07T22:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bcb797645fe5e47cd6e2885312f786747d66763e405987d9dda625f3038904e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ce83f609dcfe400b54e0a76c4a85fda2b09af080d7d4474d301a28676264cf7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:42:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:42:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ce83f609dcfe400b54e0a76c4a85fda2b09af080d7d4474d301a28676264cf7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ce83f609dcfe400b54e0a76c4a85fda2b09af080d7d4474d301a28676264cf7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bcb797645fe5e47cd6e2885312f786747d66763e405987d9dda625f3038904e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:42:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:42:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bcb797645fe5e47cd6e2885312f786747d66763e405987d9dda625f3038904e"}
{"level":"info","ts":"2026-07-07T22:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bcb797645fe5e47cd6e2885312f786747d66763e405987d9dda625f3038904e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ce83f609dcfe400b54e0a76c4a85fda2b09af080d7d4474d301a28676264cf7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:42:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:42:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ce83f609dcfe400b54e0a76c4a85fda2b09af080d7d4474d301a28676264cf7"}
{"level":"info","ts":"2026-07-07T22:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ce83f609dcfe400b54e0a76c4a85fda2b09af080d7d4474d301a28676264cf7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bcb797645fe5e47cd6e2885312f786747d66763e405987d9dda625f3038904e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ce83f609dcfe400b54e0a76c4a85fda2b09af080d7d4474d301a28676264cf7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:42:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:42:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ce83f609dcfe400b54e0a76c4a85fda2b09af080d7d4474d301a28676264cf7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ce83f609dcfe400b54e0a76c4a85fda2b09af080d7d4474d301a28676264cf7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bcb797645fe5e47cd6e2885312f786747d66763e405987d9dda625f3038904e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ce83f609dcfe400b54e0a76c4a85fda2b09af080d7d4474d301a28676264cf7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:42:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:42:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ce83f609dcfe400b54e0a76c4a85fda2b09af080d7d4474d301a28676264cf7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T22:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8ce83f609dcfe400b54e0a76c4a85fda2b09af080d7d4474d301a28676264cf7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8ce83f609dcfe400b54e0a76c4a85fda2b09af080d7d4474d301a28676264cf7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T22:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ce83f609dcfe400b54e0a76c4a85fda2b09af080d7d4474d301a28676264cf7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bcb797645fe5e47cd6e2885312f786747d66763e405987d9dda625f3038904e"}
{"level":"debug","ts":"2026-07-07T22:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ce83f609dcfe400b54e0a76c4a85fda2b09af080d7d4474d301a28676264cf7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:42:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:42:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ce83f609dcfe400b54e0a76c4a85fda2b09af080d7d4474d301a28676264cf7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bcb797645fe5e47cd6e2885312f786747d66763e405987d9dda625f3038904e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:42:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:42:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2bcb797645fe5e47cd6e2885312f786747d66763e405987d9dda625f3038904e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ce83f609dcfe400b54e0a76c4a85fda2b09af080d7d4474d301a28676264cf7"}
{"level":"info","ts":"2026-07-07T22:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bcb797645fe5e47cd6e2885312f786747d66763e405987d9dda625f3038904e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ce83f609dcfe400b54e0a76c4a85fda2b09af080d7d4474d301a28676264cf7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bcb797645fe5e47cd6e2885312f786747d66763e405987d9dda625f3038904e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ce83f609dcfe400b54e0a76c4a85fda2b09af080d7d4474d301a28676264cf7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ce83f609dcfe400b54e0a76c4a85fda2b09af080d7d4474d301a28676264cf7"}
{"level":"debug","ts":"2026-07-07T22:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ce83f609dcfe400b54e0a76c4a85fda2b09af080d7d4474d301a28676264cf7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:42:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:42:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ce83f609dcfe400b54e0a76c4a85fda2b09af080d7d4474d301a28676264cf7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bcb797645fe5e47cd6e2885312f786747d66763e405987d9dda625f3038904e"}
{"level":"info","ts":"2026-07-07T22:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ce83f609dcfe400b54e0a76c4a85fda2b09af080d7d4474d301a28676264cf7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ce83f609dcfe400b54e0a76c4a85fda2b09af080d7d4474d301a28676264cf7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:42:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:42:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ce83f609dcfe400b54e0a76c4a85fda2b09af080d7d4474d301a28676264cf7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ce83f609dcfe400b54e0a76c4a85fda2b09af080d7d4474d301a28676264cf7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ce83f609dcfe400b54e0a76c4a85fda2b09af080d7d4474d301a28676264cf7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ce83f609dcfe400b54e0a76c4a85fda2b09af080d7d4474d301a28676264cf7"}
{"level":"debug","ts":"2026-07-07T22:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ce83f609dcfe400b54e0a76c4a85fda2b09af080d7d4474d301a28676264cf7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ce83f609dcfe400b54e0a76c4a85fda2b09af080d7d4474d301a28676264cf7"}
{"level":"debug","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ce83f609dcfe400b54e0a76c4a85fda2b09af080d7d4474d301a28676264cf7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:42:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:42:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ce83f609dcfe400b54e0a76c4a85fda2b09af080d7d4474d301a28676264cf7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ce83f609dcfe400b54e0a76c4a85fda2b09af080d7d4474d301a28676264cf7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ce83f609dcfe400b54e0a76c4a85fda2b09af080d7d4474d301a28676264cf7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:42:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:42:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ce83f609dcfe400b54e0a76c4a85fda2b09af080d7d4474d301a28676264cf7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ce83f609dcfe400b54e0a76c4a85fda2b09af080d7d4474d301a28676264cf7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b629cfd64cae59244768bdc9e5f6a6a35bee33e9a112db902b74acd1fbcc764","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:42:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:42:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ce83f609dcfe400b54e0a76c4a85fda2b09af080d7d4474d301a28676264cf7"}
{"level":"info","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b629cfd64cae59244768bdc9e5f6a6a35bee33e9a112db902b74acd1fbcc764","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ce83f609dcfe400b54e0a76c4a85fda2b09af080d7d4474d301a28676264cf7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:42:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:42:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ce83f609dcfe400b54e0a76c4a85fda2b09af080d7d4474d301a28676264cf7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ce83f609dcfe400b54e0a76c4a85fda2b09af080d7d4474d301a28676264cf7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b629cfd64cae59244768bdc9e5f6a6a35bee33e9a112db902b74acd1fbcc764","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:42:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:42:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b629cfd64cae59244768bdc9e5f6a6a35bee33e9a112db902b74acd1fbcc764"}
{"level":"info","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b629cfd64cae59244768bdc9e5f6a6a35bee33e9a112db902b74acd1fbcc764","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ce83f609dcfe400b54e0a76c4a85fda2b09af080d7d4474d301a28676264cf7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:42:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:42:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ce83f609dcfe400b54e0a76c4a85fda2b09af080d7d4474d301a28676264cf7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b629cfd64cae59244768bdc9e5f6a6a35bee33e9a112db902b74acd1fbcc764","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:42:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:42:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b629cfd64cae59244768bdc9e5f6a6a35bee33e9a112db902b74acd1fbcc764"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ce83f609dcfe400b54e0a76c4a85fda2b09af080d7d4474d301a28676264cf7"}
{"level":"info","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b629cfd64cae59244768bdc9e5f6a6a35bee33e9a112db902b74acd1fbcc764","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ce83f609dcfe400b54e0a76c4a85fda2b09af080d7d4474d301a28676264cf7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:42:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:42:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ce83f609dcfe400b54e0a76c4a85fda2b09af080d7d4474d301a28676264cf7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ce83f609dcfe400b54e0a76c4a85fda2b09af080d7d4474d301a28676264cf7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b629cfd64cae59244768bdc9e5f6a6a35bee33e9a112db902b74acd1fbcc764","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:42:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:42:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b629cfd64cae59244768bdc9e5f6a6a35bee33e9a112db902b74acd1fbcc764"}
{"level":"info","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b629cfd64cae59244768bdc9e5f6a6a35bee33e9a112db902b74acd1fbcc764","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ce83f609dcfe400b54e0a76c4a85fda2b09af080d7d4474d301a28676264cf7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:42:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:42:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ce83f609dcfe400b54e0a76c4a85fda2b09af080d7d4474d301a28676264cf7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b629cfd64cae59244768bdc9e5f6a6a35bee33e9a112db902b74acd1fbcc764","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:42:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:42:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b629cfd64cae59244768bdc9e5f6a6a35bee33e9a112db902b74acd1fbcc764"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ce83f609dcfe400b54e0a76c4a85fda2b09af080d7d4474d301a28676264cf7"}
{"level":"info","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b629cfd64cae59244768bdc9e5f6a6a35bee33e9a112db902b74acd1fbcc764","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ce83f609dcfe400b54e0a76c4a85fda2b09af080d7d4474d301a28676264cf7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:42:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:42:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ce83f609dcfe400b54e0a76c4a85fda2b09af080d7d4474d301a28676264cf7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ce83f609dcfe400b54e0a76c4a85fda2b09af080d7d4474d301a28676264cf7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"915cd1c390dc31ed035f8a8efd60dc86c2c462f873e58636b566b3f80e68c715","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:42:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:42:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b629cfd64cae59244768bdc9e5f6a6a35bee33e9a112db902b74acd1fbcc764"}
{"level":"info","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"915cd1c390dc31ed035f8a8efd60dc86c2c462f873e58636b566b3f80e68c715","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b629cfd64cae59244768bdc9e5f6a6a35bee33e9a112db902b74acd1fbcc764","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ce83f609dcfe400b54e0a76c4a85fda2b09af080d7d4474d301a28676264cf7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"915cd1c390dc31ed035f8a8efd60dc86c2c462f873e58636b566b3f80e68c715","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:42:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:42:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"915cd1c390dc31ed035f8a8efd60dc86c2c462f873e58636b566b3f80e68c715","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"915cd1c390dc31ed035f8a8efd60dc86c2c462f873e58636b566b3f80e68c715","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:42:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:42:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/915cd1c390dc31ed035f8a8efd60dc86c2c462f873e58636b566b3f80e68c715"}
{"level":"error","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"915cd1c390dc31ed035f8a8efd60dc86c2c462f873e58636b566b3f80e68c715","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"915cd1c390dc31ed035f8a8efd60dc86c2c462f873e58636b566b3f80e68c715\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"915cd1c390dc31ed035f8a8efd60dc86c2c462f873e58636b566b3f80e68c715","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:42:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:42:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["915cd1c390dc31ed035f8a8efd60dc86c2c462f873e58636b566b3f80e68c715"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"915cd1c390dc31ed035f8a8efd60dc86c2c462f873e58636b566b3f80e68c715","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"915cd1c390dc31ed035f8a8efd60dc86c2c462f873e58636b566b3f80e68c715","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:42:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:42:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["915cd1c390dc31ed035f8a8efd60dc86c2c462f873e58636b566b3f80e68c715"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ce83f609dcfe400b54e0a76c4a85fda2b09af080d7d4474d301a28676264cf7"}
{"level":"error","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"915cd1c390dc31ed035f8a8efd60dc86c2c462f873e58636b566b3f80e68c715","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"915cd1c390dc31ed035f8a8efd60dc86c2c462f873e58636b566b3f80e68c715\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"915cd1c390dc31ed035f8a8efd60dc86c2c462f873e58636b566b3f80e68c715","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"915cd1c390dc31ed035f8a8efd60dc86c2c462f873e58636b566b3f80e68c715","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b629cfd64cae59244768bdc9e5f6a6a35bee33e9a112db902b74acd1fbcc764"}
{"level":"info","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/915cd1c390dc31ed035f8a8efd60dc86c2c462f873e58636b566b3f80e68c715"}
{"level":"debug","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f495b00a13ca18a774cc8756429484a6789dee774595fe4fb9e2ce95a125d3e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:42:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:42:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f495b00a13ca18a774cc8756429484a6789dee774595fe4fb9e2ce95a125d3e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f495b00a13ca18a774cc8756429484a6789dee774595fe4fb9e2ce95a125d3e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f495b00a13ca18a774cc8756429484a6789dee774595fe4fb9e2ce95a125d3e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f495b00a13ca18a774cc8756429484a6789dee774595fe4fb9e2ce95a125d3e"}
{"level":"debug","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f495b00a13ca18a774cc8756429484a6789dee774595fe4fb9e2ce95a125d3e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f495b00a13ca18a774cc8756429484a6789dee774595fe4fb9e2ce95a125d3e"}
{"level":"debug","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f495b00a13ca18a774cc8756429484a6789dee774595fe4fb9e2ce95a125d3e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:42:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:42:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f495b00a13ca18a774cc8756429484a6789dee774595fe4fb9e2ce95a125d3e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f495b00a13ca18a774cc8756429484a6789dee774595fe4fb9e2ce95a125d3e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f495b00a13ca18a774cc8756429484a6789dee774595fe4fb9e2ce95a125d3e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:42:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:42:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f495b00a13ca18a774cc8756429484a6789dee774595fe4fb9e2ce95a125d3e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e5d92dee0f169f3c6d564d220aea73e8b166cb0ad6e1dfca1f360493d80910f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:42:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:42:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f495b00a13ca18a774cc8756429484a6789dee774595fe4fb9e2ce95a125d3e"}
{"level":"info","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e5d92dee0f169f3c6d564d220aea73e8b166cb0ad6e1dfca1f360493d80910f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f495b00a13ca18a774cc8756429484a6789dee774595fe4fb9e2ce95a125d3e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:42:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:42:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f495b00a13ca18a774cc8756429484a6789dee774595fe4fb9e2ce95a125d3e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f495b00a13ca18a774cc8756429484a6789dee774595fe4fb9e2ce95a125d3e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87bf5b8955ff4146107c38fa804a280767b67ff65bf70de5c51a191288803ad3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:42:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:42:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e5d92dee0f169f3c6d564d220aea73e8b166cb0ad6e1dfca1f360493d80910f"}
{"level":"info","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87bf5b8955ff4146107c38fa804a280767b67ff65bf70de5c51a191288803ad3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e5d92dee0f169f3c6d564d220aea73e8b166cb0ad6e1dfca1f360493d80910f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:42:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:42:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9e5d92dee0f169f3c6d564d220aea73e8b166cb0ad6e1dfca1f360493d80910f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e5d92dee0f169f3c6d564d220aea73e8b166cb0ad6e1dfca1f360493d80910f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f495b00a13ca18a774cc8756429484a6789dee774595fe4fb9e2ce95a125d3e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:42:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:42:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f495b00a13ca18a774cc8756429484a6789dee774595fe4fb9e2ce95a125d3e"}
{"level":"info","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f495b00a13ca18a774cc8756429484a6789dee774595fe4fb9e2ce95a125d3e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87bf5b8955ff4146107c38fa804a280767b67ff65bf70de5c51a191288803ad3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:42:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:42:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87bf5b8955ff4146107c38fa804a280767b67ff65bf70de5c51a191288803ad3"}
{"level":"info","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87bf5b8955ff4146107c38fa804a280767b67ff65bf70de5c51a191288803ad3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e5d92dee0f169f3c6d564d220aea73e8b166cb0ad6e1dfca1f360493d80910f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:42:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:42:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e5d92dee0f169f3c6d564d220aea73e8b166cb0ad6e1dfca1f360493d80910f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f495b00a13ca18a774cc8756429484a6789dee774595fe4fb9e2ce95a125d3e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:42:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:42:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f495b00a13ca18a774cc8756429484a6789dee774595fe4fb9e2ce95a125d3e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e5d92dee0f169f3c6d564d220aea73e8b166cb0ad6e1dfca1f360493d80910f"}
{"level":"info","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f495b00a13ca18a774cc8756429484a6789dee774595fe4fb9e2ce95a125d3e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87bf5b8955ff4146107c38fa804a280767b67ff65bf70de5c51a191288803ad3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:42:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:42:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["87bf5b8955ff4146107c38fa804a280767b67ff65bf70de5c51a191288803ad3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87bf5b8955ff4146107c38fa804a280767b67ff65bf70de5c51a191288803ad3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e5d92dee0f169f3c6d564d220aea73e8b166cb0ad6e1dfca1f360493d80910f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:42:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:42:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9e5d92dee0f169f3c6d564d220aea73e8b166cb0ad6e1dfca1f360493d80910f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f495b00a13ca18a774cc8756429484a6789dee774595fe4fb9e2ce95a125d3e"}
{"level":"info","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e5d92dee0f169f3c6d564d220aea73e8b166cb0ad6e1dfca1f360493d80910f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f495b00a13ca18a774cc8756429484a6789dee774595fe4fb9e2ce95a125d3e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87bf5b8955ff4146107c38fa804a280767b67ff65bf70de5c51a191288803ad3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:42:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:42:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87bf5b8955ff4146107c38fa804a280767b67ff65bf70de5c51a191288803ad3"}
{"level":"info","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87bf5b8955ff4146107c38fa804a280767b67ff65bf70de5c51a191288803ad3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e5d92dee0f169f3c6d564d220aea73e8b166cb0ad6e1dfca1f360493d80910f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:42:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:42:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e5d92dee0f169f3c6d564d220aea73e8b166cb0ad6e1dfca1f360493d80910f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87bf5b8955ff4146107c38fa804a280767b67ff65bf70de5c51a191288803ad3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:42:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:42:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["87bf5b8955ff4146107c38fa804a280767b67ff65bf70de5c51a191288803ad3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87bf5b8955ff4146107c38fa804a280767b67ff65bf70de5c51a191288803ad3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e5d92dee0f169f3c6d564d220aea73e8b166cb0ad6e1dfca1f360493d80910f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e5d92dee0f169f3c6d564d220aea73e8b166cb0ad6e1dfca1f360493d80910f"}
{"level":"debug","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87bf5b8955ff4146107c38fa804a280767b67ff65bf70de5c51a191288803ad3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e5d92dee0f169f3c6d564d220aea73e8b166cb0ad6e1dfca1f360493d80910f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:42:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:42:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9e5d92dee0f169f3c6d564d220aea73e8b166cb0ad6e1dfca1f360493d80910f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e5d92dee0f169f3c6d564d220aea73e8b166cb0ad6e1dfca1f360493d80910f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e5d92dee0f169f3c6d564d220aea73e8b166cb0ad6e1dfca1f360493d80910f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f495b00a13ca18a774cc8756429484a6789dee774595fe4fb9e2ce95a125d3e"}
{"level":"info","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87bf5b8955ff4146107c38fa804a280767b67ff65bf70de5c51a191288803ad3"}
{"level":"info","ts":"2026-07-07T22:42:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e5d92dee0f169f3c6d564d220aea73e8b166cb0ad6e1dfca1f360493d80910f"}
{"level":"debug","ts":"2026-07-07T22:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c029c45bc858b1ee6f98e11cc3dfd00592a5a63edaff2871468acb37bb074b63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:42:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:42:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c029c45bc858b1ee6f98e11cc3dfd00592a5a63edaff2871468acb37bb074b63","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c029c45bc858b1ee6f98e11cc3dfd00592a5a63edaff2871468acb37bb074b63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:42:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:42:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c029c45bc858b1ee6f98e11cc3dfd00592a5a63edaff2871468acb37bb074b63"}
{"level":"info","ts":"2026-07-07T22:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c029c45bc858b1ee6f98e11cc3dfd00592a5a63edaff2871468acb37bb074b63","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c029c45bc858b1ee6f98e11cc3dfd00592a5a63edaff2871468acb37bb074b63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:42:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:42:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T22:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c029c45bc858b1ee6f98e11cc3dfd00592a5a63edaff2871468acb37bb074b63","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c029c45bc858b1ee6f98e11cc3dfd00592a5a63edaff2871468acb37bb074b63\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T22:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c029c45bc858b1ee6f98e11cc3dfd00592a5a63edaff2871468acb37bb074b63","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c029c45bc858b1ee6f98e11cc3dfd00592a5a63edaff2871468acb37bb074b63","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c029c45bc858b1ee6f98e11cc3dfd00592a5a63edaff2871468acb37bb074b63"}
{"level":"info","ts":"2026-07-07T22:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c029c45bc858b1ee6f98e11cc3dfd00592a5a63edaff2871468acb37bb074b63"}
{"level":"debug","ts":"2026-07-07T22:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c029c45bc858b1ee6f98e11cc3dfd00592a5a63edaff2871468acb37bb074b63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:42:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:42:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c029c45bc858b1ee6f98e11cc3dfd00592a5a63edaff2871468acb37bb074b63"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c029c45bc858b1ee6f98e11cc3dfd00592a5a63edaff2871468acb37bb074b63","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c029c45bc858b1ee6f98e11cc3dfd00592a5a63edaff2871468acb37bb074b63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:42:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:42:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c029c45bc858b1ee6f98e11cc3dfd00592a5a63edaff2871468acb37bb074b63","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c029c45bc858b1ee6f98e11cc3dfd00592a5a63edaff2871468acb37bb074b63","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c029c45bc858b1ee6f98e11cc3dfd00592a5a63edaff2871468acb37bb074b63","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c029c45bc858b1ee6f98e11cc3dfd00592a5a63edaff2871468acb37bb074b63"}
{"level":"debug","ts":"2026-07-07T22:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c029c45bc858b1ee6f98e11cc3dfd00592a5a63edaff2871468acb37bb074b63","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c029c45bc858b1ee6f98e11cc3dfd00592a5a63edaff2871468acb37bb074b63"}
{"level":"debug","ts":"2026-07-07T22:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c029c45bc858b1ee6f98e11cc3dfd00592a5a63edaff2871468acb37bb074b63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:42:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:42:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c029c45bc858b1ee6f98e11cc3dfd00592a5a63edaff2871468acb37bb074b63"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c029c45bc858b1ee6f98e11cc3dfd00592a5a63edaff2871468acb37bb074b63","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c029c45bc858b1ee6f98e11cc3dfd00592a5a63edaff2871468acb37bb074b63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:42:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:42:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c029c45bc858b1ee6f98e11cc3dfd00592a5a63edaff2871468acb37bb074b63","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c029c45bc858b1ee6f98e11cc3dfd00592a5a63edaff2871468acb37bb074b63","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c029c45bc858b1ee6f98e11cc3dfd00592a5a63edaff2871468acb37bb074b63","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c029c45bc858b1ee6f98e11cc3dfd00592a5a63edaff2871468acb37bb074b63"}
{"level":"debug","ts":"2026-07-07T22:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c029c45bc858b1ee6f98e11cc3dfd00592a5a63edaff2871468acb37bb074b63","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c029c45bc858b1ee6f98e11cc3dfd00592a5a63edaff2871468acb37bb074b63"}
{"level":"debug","ts":"2026-07-07T22:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c029c45bc858b1ee6f98e11cc3dfd00592a5a63edaff2871468acb37bb074b63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:42:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:42:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c029c45bc858b1ee6f98e11cc3dfd00592a5a63edaff2871468acb37bb074b63"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c029c45bc858b1ee6f98e11cc3dfd00592a5a63edaff2871468acb37bb074b63","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c029c45bc858b1ee6f98e11cc3dfd00592a5a63edaff2871468acb37bb074b63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:42:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:42:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c029c45bc858b1ee6f98e11cc3dfd00592a5a63edaff2871468acb37bb074b63","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c029c45bc858b1ee6f98e11cc3dfd00592a5a63edaff2871468acb37bb074b63","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c029c45bc858b1ee6f98e11cc3dfd00592a5a63edaff2871468acb37bb074b63","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c029c45bc858b1ee6f98e11cc3dfd00592a5a63edaff2871468acb37bb074b63"}
{"level":"debug","ts":"2026-07-07T22:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c029c45bc858b1ee6f98e11cc3dfd00592a5a63edaff2871468acb37bb074b63","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c029c45bc858b1ee6f98e11cc3dfd00592a5a63edaff2871468acb37bb074b63"}
{"level":"debug","ts":"2026-07-07T22:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c029c45bc858b1ee6f98e11cc3dfd00592a5a63edaff2871468acb37bb074b63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:42:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:42:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c029c45bc858b1ee6f98e11cc3dfd00592a5a63edaff2871468acb37bb074b63"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c029c45bc858b1ee6f98e11cc3dfd00592a5a63edaff2871468acb37bb074b63","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c029c45bc858b1ee6f98e11cc3dfd00592a5a63edaff2871468acb37bb074b63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:42:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:42:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c029c45bc858b1ee6f98e11cc3dfd00592a5a63edaff2871468acb37bb074b63","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c029c45bc858b1ee6f98e11cc3dfd00592a5a63edaff2871468acb37bb074b63","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c029c45bc858b1ee6f98e11cc3dfd00592a5a63edaff2871468acb37bb074b63","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c029c45bc858b1ee6f98e11cc3dfd00592a5a63edaff2871468acb37bb074b63"}
{"level":"debug","ts":"2026-07-07T22:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c029c45bc858b1ee6f98e11cc3dfd00592a5a63edaff2871468acb37bb074b63","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c029c45bc858b1ee6f98e11cc3dfd00592a5a63edaff2871468acb37bb074b63"}
{"level":"debug","ts":"2026-07-07T22:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c029c45bc858b1ee6f98e11cc3dfd00592a5a63edaff2871468acb37bb074b63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:42:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:42:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c029c45bc858b1ee6f98e11cc3dfd00592a5a63edaff2871468acb37bb074b63"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c029c45bc858b1ee6f98e11cc3dfd00592a5a63edaff2871468acb37bb074b63","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c029c45bc858b1ee6f98e11cc3dfd00592a5a63edaff2871468acb37bb074b63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:42:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:42:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c029c45bc858b1ee6f98e11cc3dfd00592a5a63edaff2871468acb37bb074b63","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c029c45bc858b1ee6f98e11cc3dfd00592a5a63edaff2871468acb37bb074b63","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c029c45bc858b1ee6f98e11cc3dfd00592a5a63edaff2871468acb37bb074b63","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:42:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c029c45bc858b1ee6f98e11cc3dfd00592a5a63edaff2871468acb37bb074b63"}
{"level":"debug","ts":"2026-07-07T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c029c45bc858b1ee6f98e11cc3dfd00592a5a63edaff2871468acb37bb074b63","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c029c45bc858b1ee6f98e11cc3dfd00592a5a63edaff2871468acb37bb074b63"}
{"level":"debug","ts":"2026-07-07T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c029c45bc858b1ee6f98e11cc3dfd00592a5a63edaff2871468acb37bb074b63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:42:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:42:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c029c45bc858b1ee6f98e11cc3dfd00592a5a63edaff2871468acb37bb074b63"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c029c45bc858b1ee6f98e11cc3dfd00592a5a63edaff2871468acb37bb074b63","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:42:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:42:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c029c45bc858b1ee6f98e11cc3dfd00592a5a63edaff2871468acb37bb074b63","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf"}
{"level":"debug","ts":"2026-07-07T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:42:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:42:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c029c45bc858b1ee6f98e11cc3dfd00592a5a63edaff2871468acb37bb074b63"}
{"level":"info","ts":"2026-07-07T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf"}
{"level":"debug","ts":"2026-07-07T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37c848544fbf721a00bd83a4cbf714a418c37835955df6db151199ad83b3b33d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:42:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:42:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37c848544fbf721a00bd83a4cbf714a418c37835955df6db151199ad83b3b33d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37c848544fbf721a00bd83a4cbf714a418c37835955df6db151199ad83b3b33d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:42:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:42:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37c848544fbf721a00bd83a4cbf714a418c37835955df6db151199ad83b3b33d"}
{"level":"info","ts":"2026-07-07T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37c848544fbf721a00bd83a4cbf714a418c37835955df6db151199ad83b3b33d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37c848544fbf721a00bd83a4cbf714a418c37835955df6db151199ad83b3b33d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:42:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:42:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"37c848544fbf721a00bd83a4cbf714a418c37835955df6db151199ad83b3b33d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"37c848544fbf721a00bd83a4cbf714a418c37835955df6db151199ad83b3b33d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37c848544fbf721a00bd83a4cbf714a418c37835955df6db151199ad83b3b33d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37c848544fbf721a00bd83a4cbf714a418c37835955df6db151199ad83b3b33d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37c848544fbf721a00bd83a4cbf714a418c37835955df6db151199ad83b3b33d"}
{"level":"info","ts":"2026-07-07T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37c848544fbf721a00bd83a4cbf714a418c37835955df6db151199ad83b3b33d"}
{"level":"debug","ts":"2026-07-07T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37c848544fbf721a00bd83a4cbf714a418c37835955df6db151199ad83b3b33d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:42:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:42:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["37c848544fbf721a00bd83a4cbf714a418c37835955df6db151199ad83b3b33d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37c848544fbf721a00bd83a4cbf714a418c37835955df6db151199ad83b3b33d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37c848544fbf721a00bd83a4cbf714a418c37835955df6db151199ad83b3b33d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:42:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:42:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37c848544fbf721a00bd83a4cbf714a418c37835955df6db151199ad83b3b33d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37c848544fbf721a00bd83a4cbf714a418c37835955df6db151199ad83b3b33d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37c848544fbf721a00bd83a4cbf714a418c37835955df6db151199ad83b3b33d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37c848544fbf721a00bd83a4cbf714a418c37835955df6db151199ad83b3b33d"}
{"level":"debug","ts":"2026-07-07T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37c848544fbf721a00bd83a4cbf714a418c37835955df6db151199ad83b3b33d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37c848544fbf721a00bd83a4cbf714a418c37835955df6db151199ad83b3b33d"}
{"level":"debug","ts":"2026-07-07T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37c848544fbf721a00bd83a4cbf714a418c37835955df6db151199ad83b3b33d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:42:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:42:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["37c848544fbf721a00bd83a4cbf714a418c37835955df6db151199ad83b3b33d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37c848544fbf721a00bd83a4cbf714a418c37835955df6db151199ad83b3b33d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37c848544fbf721a00bd83a4cbf714a418c37835955df6db151199ad83b3b33d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:42:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:42:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37c848544fbf721a00bd83a4cbf714a418c37835955df6db151199ad83b3b33d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37c848544fbf721a00bd83a4cbf714a418c37835955df6db151199ad83b3b33d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37c848544fbf721a00bd83a4cbf714a418c37835955df6db151199ad83b3b33d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37c848544fbf721a00bd83a4cbf714a418c37835955df6db151199ad83b3b33d"}
{"level":"debug","ts":"2026-07-07T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37c848544fbf721a00bd83a4cbf714a418c37835955df6db151199ad83b3b33d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37c848544fbf721a00bd83a4cbf714a418c37835955df6db151199ad83b3b33d"}
{"level":"debug","ts":"2026-07-07T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5868fbcf0daf8e82f1266b1d5366d560f4633a34faf9b7ab370d5af47c36faa3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:42:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:42:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5868fbcf0daf8e82f1266b1d5366d560f4633a34faf9b7ab370d5af47c36faa3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37c848544fbf721a00bd83a4cbf714a418c37835955df6db151199ad83b3b33d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:42:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:42:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["37c848544fbf721a00bd83a4cbf714a418c37835955df6db151199ad83b3b33d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5868fbcf0daf8e82f1266b1d5366d560f4633a34faf9b7ab370d5af47c36faa3"}
{"level":"info","ts":"2026-07-07T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37c848544fbf721a00bd83a4cbf714a418c37835955df6db151199ad83b3b33d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5868fbcf0daf8e82f1266b1d5366d560f4633a34faf9b7ab370d5af47c36faa3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:42:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:42:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5868fbcf0daf8e82f1266b1d5366d560f4633a34faf9b7ab370d5af47c36faa3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37c848544fbf721a00bd83a4cbf714a418c37835955df6db151199ad83b3b33d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5868fbcf0daf8e82f1266b1d5366d560f4633a34faf9b7ab370d5af47c36faa3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5868fbcf0daf8e82f1266b1d5366d560f4633a34faf9b7ab370d5af47c36faa3"}
{"level":"debug","ts":"2026-07-07T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5868fbcf0daf8e82f1266b1d5366d560f4633a34faf9b7ab370d5af47c36faa3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:42:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:42:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5868fbcf0daf8e82f1266b1d5366d560f4633a34faf9b7ab370d5af47c36faa3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5868fbcf0daf8e82f1266b1d5366d560f4633a34faf9b7ab370d5af47c36faa3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5868fbcf0daf8e82f1266b1d5366d560f4633a34faf9b7ab370d5af47c36faa3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37c848544fbf721a00bd83a4cbf714a418c37835955df6db151199ad83b3b33d"}
{"level":"info","ts":"2026-07-07T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5868fbcf0daf8e82f1266b1d5366d560f4633a34faf9b7ab370d5af47c36faa3"}
{"level":"debug","ts":"2026-07-07T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d0d328281b4681d88231fd47e645d36ae8266b1e354668f94c480d583ce3c79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:42:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:42:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d0d328281b4681d88231fd47e645d36ae8266b1e354668f94c480d583ce3c79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d0d328281b4681d88231fd47e645d36ae8266b1e354668f94c480d583ce3c79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d0d328281b4681d88231fd47e645d36ae8266b1e354668f94c480d583ce3c79","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d0d328281b4681d88231fd47e645d36ae8266b1e354668f94c480d583ce3c79"}
{"level":"debug","ts":"2026-07-07T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d0d328281b4681d88231fd47e645d36ae8266b1e354668f94c480d583ce3c79","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d0d328281b4681d88231fd47e645d36ae8266b1e354668f94c480d583ce3c79"}
{"level":"debug","ts":"2026-07-07T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d0d328281b4681d88231fd47e645d36ae8266b1e354668f94c480d583ce3c79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:42:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:42:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d0d328281b4681d88231fd47e645d36ae8266b1e354668f94c480d583ce3c79"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d0d328281b4681d88231fd47e645d36ae8266b1e354668f94c480d583ce3c79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d0d328281b4681d88231fd47e645d36ae8266b1e354668f94c480d583ce3c79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa4fc8fb726ee2ddf777caa45c4f01ba8122a2fd27f6dcfb61f20c732b4ca4ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:42:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:42:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa4fc8fb726ee2ddf777caa45c4f01ba8122a2fd27f6dcfb61f20c732b4ca4ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa4fc8fb726ee2ddf777caa45c4f01ba8122a2fd27f6dcfb61f20c732b4ca4ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa4fc8fb726ee2ddf777caa45c4f01ba8122a2fd27f6dcfb61f20c732b4ca4ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d0d328281b4681d88231fd47e645d36ae8266b1e354668f94c480d583ce3c79"}
{"level":"info","ts":"2026-07-07T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa4fc8fb726ee2ddf777caa45c4f01ba8122a2fd27f6dcfb61f20c732b4ca4ed"}
{"level":"debug","ts":"2026-07-07T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa4fc8fb726ee2ddf777caa45c4f01ba8122a2fd27f6dcfb61f20c732b4ca4ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:42:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:42:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa4fc8fb726ee2ddf777caa45c4f01ba8122a2fd27f6dcfb61f20c732b4ca4ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa4fc8fb726ee2ddf777caa45c4f01ba8122a2fd27f6dcfb61f20c732b4ca4ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa4fc8fb726ee2ddf777caa45c4f01ba8122a2fd27f6dcfb61f20c732b4ca4ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:42:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:42:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa4fc8fb726ee2ddf777caa45c4f01ba8122a2fd27f6dcfb61f20c732b4ca4ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa4fc8fb726ee2ddf777caa45c4f01ba8122a2fd27f6dcfb61f20c732b4ca4ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa4fc8fb726ee2ddf777caa45c4f01ba8122a2fd27f6dcfb61f20c732b4ca4ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa4fc8fb726ee2ddf777caa45c4f01ba8122a2fd27f6dcfb61f20c732b4ca4ed"}
{"level":"debug","ts":"2026-07-07T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa4fc8fb726ee2ddf777caa45c4f01ba8122a2fd27f6dcfb61f20c732b4ca4ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa4fc8fb726ee2ddf777caa45c4f01ba8122a2fd27f6dcfb61f20c732b4ca4ed"}
{"level":"debug","ts":"2026-07-07T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa4fc8fb726ee2ddf777caa45c4f01ba8122a2fd27f6dcfb61f20c732b4ca4ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:42:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:42:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa4fc8fb726ee2ddf777caa45c4f01ba8122a2fd27f6dcfb61f20c732b4ca4ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa4fc8fb726ee2ddf777caa45c4f01ba8122a2fd27f6dcfb61f20c732b4ca4ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa4fc8fb726ee2ddf777caa45c4f01ba8122a2fd27f6dcfb61f20c732b4ca4ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa4fc8fb726ee2ddf777caa45c4f01ba8122a2fd27f6dcfb61f20c732b4ca4ed"}
{"level":"debug","ts":"2026-07-07T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46535d5626a9121dcfac45ac163c65091295792bc0373b29a305c648bc49c9d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:42:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:42:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46535d5626a9121dcfac45ac163c65091295792bc0373b29a305c648bc49c9d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46535d5626a9121dcfac45ac163c65091295792bc0373b29a305c648bc49c9d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46535d5626a9121dcfac45ac163c65091295792bc0373b29a305c648bc49c9d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46535d5626a9121dcfac45ac163c65091295792bc0373b29a305c648bc49c9d6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46535d5626a9121dcfac45ac163c65091295792bc0373b29a305c648bc49c9d6"}
{"level":"info","ts":"2026-07-07T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46535d5626a9121dcfac45ac163c65091295792bc0373b29a305c648bc49c9d6"}
{"level":"debug","ts":"2026-07-07T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46535d5626a9121dcfac45ac163c65091295792bc0373b29a305c648bc49c9d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:42:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:42:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["46535d5626a9121dcfac45ac163c65091295792bc0373b29a305c648bc49c9d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46535d5626a9121dcfac45ac163c65091295792bc0373b29a305c648bc49c9d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46535d5626a9121dcfac45ac163c65091295792bc0373b29a305c648bc49c9d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:42:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:42:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46535d5626a9121dcfac45ac163c65091295792bc0373b29a305c648bc49c9d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efdbf10809a7d7c6aca941ce300d15bb7c1059debc608dc578e3745597be4d6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:42:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:42:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46535d5626a9121dcfac45ac163c65091295792bc0373b29a305c648bc49c9d6"}
{"level":"info","ts":"2026-07-07T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efdbf10809a7d7c6aca941ce300d15bb7c1059debc608dc578e3745597be4d6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46535d5626a9121dcfac45ac163c65091295792bc0373b29a305c648bc49c9d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:42:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:42:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["46535d5626a9121dcfac45ac163c65091295792bc0373b29a305c648bc49c9d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46535d5626a9121dcfac45ac163c65091295792bc0373b29a305c648bc49c9d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efdbf10809a7d7c6aca941ce300d15bb7c1059debc608dc578e3745597be4d6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:42:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:42:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efdbf10809a7d7c6aca941ce300d15bb7c1059debc608dc578e3745597be4d6c"}
{"level":"info","ts":"2026-07-07T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efdbf10809a7d7c6aca941ce300d15bb7c1059debc608dc578e3745597be4d6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46535d5626a9121dcfac45ac163c65091295792bc0373b29a305c648bc49c9d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:42:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:42:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46535d5626a9121dcfac45ac163c65091295792bc0373b29a305c648bc49c9d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efdbf10809a7d7c6aca941ce300d15bb7c1059debc608dc578e3745597be4d6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:42:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:42:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["efdbf10809a7d7c6aca941ce300d15bb7c1059debc608dc578e3745597be4d6c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46535d5626a9121dcfac45ac163c65091295792bc0373b29a305c648bc49c9d6"}
{"level":"info","ts":"2026-07-07T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efdbf10809a7d7c6aca941ce300d15bb7c1059debc608dc578e3745597be4d6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46535d5626a9121dcfac45ac163c65091295792bc0373b29a305c648bc49c9d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:42:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:42:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["46535d5626a9121dcfac45ac163c65091295792bc0373b29a305c648bc49c9d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46535d5626a9121dcfac45ac163c65091295792bc0373b29a305c648bc49c9d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efdbf10809a7d7c6aca941ce300d15bb7c1059debc608dc578e3745597be4d6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:42:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:42:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efdbf10809a7d7c6aca941ce300d15bb7c1059debc608dc578e3745597be4d6c"}
{"level":"info","ts":"2026-07-07T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efdbf10809a7d7c6aca941ce300d15bb7c1059debc608dc578e3745597be4d6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46535d5626a9121dcfac45ac163c65091295792bc0373b29a305c648bc49c9d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:42:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:42:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46535d5626a9121dcfac45ac163c65091295792bc0373b29a305c648bc49c9d6"}
{"level":"info","ts":"2026-07-07T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46535d5626a9121dcfac45ac163c65091295792bc0373b29a305c648bc49c9d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efdbf10809a7d7c6aca941ce300d15bb7c1059debc608dc578e3745597be4d6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46535d5626a9121dcfac45ac163c65091295792bc0373b29a305c648bc49c9d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:42:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:42:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["46535d5626a9121dcfac45ac163c65091295792bc0373b29a305c648bc49c9d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46535d5626a9121dcfac45ac163c65091295792bc0373b29a305c648bc49c9d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efdbf10809a7d7c6aca941ce300d15bb7c1059debc608dc578e3745597be4d6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46535d5626a9121dcfac45ac163c65091295792bc0373b29a305c648bc49c9d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:42:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:42:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["46535d5626a9121dcfac45ac163c65091295792bc0373b29a305c648bc49c9d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"46535d5626a9121dcfac45ac163c65091295792bc0373b29a305c648bc49c9d6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"46535d5626a9121dcfac45ac163c65091295792bc0373b29a305c648bc49c9d6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46535d5626a9121dcfac45ac163c65091295792bc0373b29a305c648bc49c9d6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efdbf10809a7d7c6aca941ce300d15bb7c1059debc608dc578e3745597be4d6c"}
{"level":"debug","ts":"2026-07-07T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46535d5626a9121dcfac45ac163c65091295792bc0373b29a305c648bc49c9d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:42:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:42:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46535d5626a9121dcfac45ac163c65091295792bc0373b29a305c648bc49c9d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efdbf10809a7d7c6aca941ce300d15bb7c1059debc608dc578e3745597be4d6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:42:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:42:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["efdbf10809a7d7c6aca941ce300d15bb7c1059debc608dc578e3745597be4d6c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46535d5626a9121dcfac45ac163c65091295792bc0373b29a305c648bc49c9d6"}
{"level":"info","ts":"2026-07-07T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efdbf10809a7d7c6aca941ce300d15bb7c1059debc608dc578e3745597be4d6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46535d5626a9121dcfac45ac163c65091295792bc0373b29a305c648bc49c9d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efdbf10809a7d7c6aca941ce300d15bb7c1059debc608dc578e3745597be4d6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46535d5626a9121dcfac45ac163c65091295792bc0373b29a305c648bc49c9d6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46535d5626a9121dcfac45ac163c65091295792bc0373b29a305c648bc49c9d6"}
{"level":"debug","ts":"2026-07-07T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46535d5626a9121dcfac45ac163c65091295792bc0373b29a305c648bc49c9d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:42:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:42:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["46535d5626a9121dcfac45ac163c65091295792bc0373b29a305c648bc49c9d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46535d5626a9121dcfac45ac163c65091295792bc0373b29a305c648bc49c9d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46535d5626a9121dcfac45ac163c65091295792bc0373b29a305c648bc49c9d6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efdbf10809a7d7c6aca941ce300d15bb7c1059debc608dc578e3745597be4d6c"}
{"level":"info","ts":"2026-07-07T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46535d5626a9121dcfac45ac163c65091295792bc0373b29a305c648bc49c9d6"}
{"level":"debug","ts":"2026-07-07T22:43:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:43:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:43:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:43:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:43:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:43:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:43:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf"}
{"level":"debug","ts":"2026-07-07T22:43:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:43:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf"}
{"level":"debug","ts":"2026-07-07T22:43:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:43:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:43:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:43:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:43:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:43:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:43:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:43:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:43:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:43:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:43:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf"}
{"level":"debug","ts":"2026-07-07T22:43:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:43:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf"}
{"level":"debug","ts":"2026-07-07T22:43:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:43:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:43:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:43:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:43:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:43:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:43:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:43:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:43:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:43:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d38fbf2c5357d325a382939175e7bc43b30a9f696bb0c7249dc1bbf43a6ca5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:43:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:43:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf"}
{"level":"debug","ts":"2026-07-07T22:43:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:43:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:43:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:43:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d38fbf2c5357d325a382939175e7bc43b30a9f696bb0c7249dc1bbf43a6ca5a"}
{"level":"info","ts":"2026-07-07T22:43:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:43:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:43:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:43:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:43:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:43:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:43:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf"}
{"level":"debug","ts":"2026-07-07T22:43:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:43:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf"}
{"level":"debug","ts":"2026-07-07T22:43:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:43:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:43:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:43:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:43:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:43:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:43:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:43:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:43:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efdbf10809a7d7c6aca941ce300d15bb7c1059debc608dc578e3745597be4d6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:43:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:43:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:43:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf"}
{"level":"debug","ts":"2026-07-07T22:43:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:43:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:43:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:43:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efdbf10809a7d7c6aca941ce300d15bb7c1059debc608dc578e3745597be4d6c"}
{"level":"info","ts":"2026-07-07T22:43:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:43:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:43:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:43:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:43:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:43:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:43:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf"}
{"level":"debug","ts":"2026-07-07T22:43:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:43:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf"}
{"level":"debug","ts":"2026-07-07T22:43:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:43:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:43:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:43:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:43:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:43:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:43:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:43:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:43:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:43:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:43:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf"}
{"level":"debug","ts":"2026-07-07T22:43:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:43:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf"}
{"level":"debug","ts":"2026-07-07T22:43:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:43:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:43:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:43:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:43:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:43:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:43:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:43:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:43:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5868fbcf0daf8e82f1266b1d5366d560f4633a34faf9b7ab370d5af47c36faa3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:43:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:43:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:43:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf"}
{"level":"debug","ts":"2026-07-07T22:43:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:43:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:43:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:43:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5868fbcf0daf8e82f1266b1d5366d560f4633a34faf9b7ab370d5af47c36faa3"}
{"level":"info","ts":"2026-07-07T22:43:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:43:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:43:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:43:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:43:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf"}
{"level":"info","ts":"2026-07-07T22:43:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:43:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:43:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:43:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf"}
{"level":"debug","ts":"2026-07-07T22:43:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:43:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf"}
{"level":"debug","ts":"2026-07-07T22:43:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e5d92dee0f169f3c6d564d220aea73e8b166cb0ad6e1dfca1f360493d80910f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:43:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e5d92dee0f169f3c6d564d220aea73e8b166cb0ad6e1dfca1f360493d80910f"}
{"level":"debug","ts":"2026-07-07T22:43:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:43:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:43:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:43:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:43:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf"}
{"level":"debug","ts":"2026-07-07T22:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf"}
{"level":"debug","ts":"2026-07-07T22:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b629cfd64cae59244768bdc9e5f6a6a35bee33e9a112db902b74acd1fbcc764","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b629cfd64cae59244768bdc9e5f6a6a35bee33e9a112db902b74acd1fbcc764"}
{"level":"debug","ts":"2026-07-07T22:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:43:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:43:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf"}
{"level":"debug","ts":"2026-07-07T22:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a8567710872db35882e39159253d625ee92e29486331d26f348f7d45fdc1a08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:43:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:43:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a8567710872db35882e39159253d625ee92e29486331d26f348f7d45fdc1a08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a8567710872db35882e39159253d625ee92e29486331d26f348f7d45fdc1a08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a8567710872db35882e39159253d625ee92e29486331d26f348f7d45fdc1a08","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a8567710872db35882e39159253d625ee92e29486331d26f348f7d45fdc1a08"}
{"level":"debug","ts":"2026-07-07T22:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a8567710872db35882e39159253d625ee92e29486331d26f348f7d45fdc1a08","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a8567710872db35882e39159253d625ee92e29486331d26f348f7d45fdc1a08"}
{"level":"debug","ts":"2026-07-07T22:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a8567710872db35882e39159253d625ee92e29486331d26f348f7d45fdc1a08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:43:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:43:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a8567710872db35882e39159253d625ee92e29486331d26f348f7d45fdc1a08"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a8567710872db35882e39159253d625ee92e29486331d26f348f7d45fdc1a08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a8567710872db35882e39159253d625ee92e29486331d26f348f7d45fdc1a08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:43:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:43:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a8567710872db35882e39159253d625ee92e29486331d26f348f7d45fdc1a08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d0d328281b4681d88231fd47e645d36ae8266b1e354668f94c480d583ce3c79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a8567710872db35882e39159253d625ee92e29486331d26f348f7d45fdc1a08","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a8567710872db35882e39159253d625ee92e29486331d26f348f7d45fdc1a08"}
{"level":"debug","ts":"2026-07-07T22:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a8567710872db35882e39159253d625ee92e29486331d26f348f7d45fdc1a08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:43:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:43:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a8567710872db35882e39159253d625ee92e29486331d26f348f7d45fdc1a08"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a8567710872db35882e39159253d625ee92e29486331d26f348f7d45fdc1a08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a8567710872db35882e39159253d625ee92e29486331d26f348f7d45fdc1a08","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d0d328281b4681d88231fd47e645d36ae8266b1e354668f94c480d583ce3c79"}
{"level":"info","ts":"2026-07-07T22:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a8567710872db35882e39159253d625ee92e29486331d26f348f7d45fdc1a08"}
{"level":"debug","ts":"2026-07-07T22:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb6677a84f2011c8778e746156db2939d5a85331d1da5327e5a965925b8554bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:43:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:43:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb6677a84f2011c8778e746156db2939d5a85331d1da5327e5a965925b8554bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb6677a84f2011c8778e746156db2939d5a85331d1da5327e5a965925b8554bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb6677a84f2011c8778e746156db2939d5a85331d1da5327e5a965925b8554bd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb6677a84f2011c8778e746156db2939d5a85331d1da5327e5a965925b8554bd"}
{"level":"debug","ts":"2026-07-07T22:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb6677a84f2011c8778e746156db2939d5a85331d1da5327e5a965925b8554bd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb6677a84f2011c8778e746156db2939d5a85331d1da5327e5a965925b8554bd"}
{"level":"debug","ts":"2026-07-07T22:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb6677a84f2011c8778e746156db2939d5a85331d1da5327e5a965925b8554bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:43:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:43:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb6677a84f2011c8778e746156db2939d5a85331d1da5327e5a965925b8554bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb6677a84f2011c8778e746156db2939d5a85331d1da5327e5a965925b8554bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb6677a84f2011c8778e746156db2939d5a85331d1da5327e5a965925b8554bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37c848544fbf721a00bd83a4cbf714a418c37835955df6db151199ad83b3b33d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb6677a84f2011c8778e746156db2939d5a85331d1da5327e5a965925b8554bd"}
{"level":"info","ts":"2026-07-07T22:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37c848544fbf721a00bd83a4cbf714a418c37835955df6db151199ad83b3b33d"}
{"level":"debug","ts":"2026-07-07T22:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bcb797645fe5e47cd6e2885312f786747d66763e405987d9dda625f3038904e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:43:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:43:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bcb797645fe5e47cd6e2885312f786747d66763e405987d9dda625f3038904e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f495b00a13ca18a774cc8756429484a6789dee774595fe4fb9e2ce95a125d3e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bcb797645fe5e47cd6e2885312f786747d66763e405987d9dda625f3038904e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bcb797645fe5e47cd6e2885312f786747d66763e405987d9dda625f3038904e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bcb797645fe5e47cd6e2885312f786747d66763e405987d9dda625f3038904e"}
{"level":"debug","ts":"2026-07-07T22:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bcb797645fe5e47cd6e2885312f786747d66763e405987d9dda625f3038904e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:43:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:43:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2bcb797645fe5e47cd6e2885312f786747d66763e405987d9dda625f3038904e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f495b00a13ca18a774cc8756429484a6789dee774595fe4fb9e2ce95a125d3e"}
{"level":"info","ts":"2026-07-07T22:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bcb797645fe5e47cd6e2885312f786747d66763e405987d9dda625f3038904e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bcb797645fe5e47cd6e2885312f786747d66763e405987d9dda625f3038904e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:43:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:43:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bcb797645fe5e47cd6e2885312f786747d66763e405987d9dda625f3038904e"}
{"level":"info","ts":"2026-07-07T22:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bcb797645fe5e47cd6e2885312f786747d66763e405987d9dda625f3038904e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bcb797645fe5e47cd6e2885312f786747d66763e405987d9dda625f3038904e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bcb797645fe5e47cd6e2885312f786747d66763e405987d9dda625f3038904e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bcb797645fe5e47cd6e2885312f786747d66763e405987d9dda625f3038904e"}
{"level":"debug","ts":"2026-07-07T22:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa4fc8fb726ee2ddf777caa45c4f01ba8122a2fd27f6dcfb61f20c732b4ca4ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bcb797645fe5e47cd6e2885312f786747d66763e405987d9dda625f3038904e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bcb797645fe5e47cd6e2885312f786747d66763e405987d9dda625f3038904e"}
{"level":"debug","ts":"2026-07-07T22:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ce83f609dcfe400b54e0a76c4a85fda2b09af080d7d4474d301a28676264cf7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa4fc8fb726ee2ddf777caa45c4f01ba8122a2fd27f6dcfb61f20c732b4ca4ed"}
{"level":"debug","ts":"2026-07-07T22:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bcb797645fe5e47cd6e2885312f786747d66763e405987d9dda625f3038904e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:43:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:43:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2bcb797645fe5e47cd6e2885312f786747d66763e405987d9dda625f3038904e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bcb797645fe5e47cd6e2885312f786747d66763e405987d9dda625f3038904e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bcb797645fe5e47cd6e2885312f786747d66763e405987d9dda625f3038904e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ce83f609dcfe400b54e0a76c4a85fda2b09af080d7d4474d301a28676264cf7"}
{"level":"info","ts":"2026-07-07T22:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bcb797645fe5e47cd6e2885312f786747d66763e405987d9dda625f3038904e"}
{"level":"debug","ts":"2026-07-07T22:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46535d5626a9121dcfac45ac163c65091295792bc0373b29a305c648bc49c9d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:43:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:43:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46535d5626a9121dcfac45ac163c65091295792bc0373b29a305c648bc49c9d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46535d5626a9121dcfac45ac163c65091295792bc0373b29a305c648bc49c9d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a381ef84795049e53ccfc27eaf9e3cb72f34c5e61e5932e68dbcdc29b57ed81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46535d5626a9121dcfac45ac163c65091295792bc0373b29a305c648bc49c9d6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:43:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46535d5626a9121dcfac45ac163c65091295792bc0373b29a305c648bc49c9d6"}
{"level":"debug","ts":"2026-07-07T22:43:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb9f3794828bc493dd23d246d4f008fa508f782d8f0494e7bfd35c2bdfb4ecc8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:43:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46535d5626a9121dcfac45ac163c65091295792bc0373b29a305c648bc49c9d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:43:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:43:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["46535d5626a9121dcfac45ac163c65091295792bc0373b29a305c648bc49c9d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:43:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a381ef84795049e53ccfc27eaf9e3cb72f34c5e61e5932e68dbcdc29b57ed81"}
{"level":"info","ts":"2026-07-07T22:43:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46535d5626a9121dcfac45ac163c65091295792bc0373b29a305c648bc49c9d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:43:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87bf5b8955ff4146107c38fa804a280767b67ff65bf70de5c51a191288803ad3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:43:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46535d5626a9121dcfac45ac163c65091295792bc0373b29a305c648bc49c9d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T22:43:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T22:43:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:43:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46535d5626a9121dcfac45ac163c65091295792bc0373b29a305c648bc49c9d6"}
{"level":"info","ts":"2026-07-07T22:43:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46535d5626a9121dcfac45ac163c65091295792bc0373b29a305c648bc49c9d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:43:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46535d5626a9121dcfac45ac163c65091295792bc0373b29a305c648bc49c9d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:43:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:43:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["46535d5626a9121dcfac45ac163c65091295792bc0373b29a305c648bc49c9d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:43:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46535d5626a9121dcfac45ac163c65091295792bc0373b29a305c648bc49c9d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:43:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46535d5626a9121dcfac45ac163c65091295792bc0373b29a305c648bc49c9d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T22:43:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T22:43:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["46535d5626a9121dcfac45ac163c65091295792bc0373b29a305c648bc49c9d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T22:43:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb9f3794828bc493dd23d246d4f008fa508f782d8f0494e7bfd35c2bdfb4ecc8"}
{"level":"error","ts":"2026-07-07T22:43:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"46535d5626a9121dcfac45ac163c65091295792bc0373b29a305c648bc49c9d6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"46535d5626a9121dcfac45ac163c65091295792bc0373b29a305c648bc49c9d6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T22:43:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46535d5626a9121dcfac45ac163c65091295792bc0373b29a305c648bc49c9d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:43:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c029c45bc858b1ee6f98e11cc3dfd00592a5a63edaff2871468acb37bb074b63","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:43:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46535d5626a9121dcfac45ac163c65091295792bc0373b29a305c648bc49c9d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T22:43:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"915cd1c390dc31ed035f8a8efd60dc86c2c462f873e58636b566b3f80e68c715","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T22:43:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87bf5b8955ff4146107c38fa804a280767b67ff65bf70de5c51a191288803ad3"}
{"level":"info","ts":"2026-07-07T22:43:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46535d5626a9121dcfac45ac163c65091295792bc0373b29a305c648bc49c9d6"}
{"level":"info","ts":"2026-07-07T22:43:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c029c45bc858b1ee6f98e11cc3dfd00592a5a63edaff2871468acb37bb074b63"}
{"level":"info","ts":"2026-07-07T22:43:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/915cd1c390dc31ed035f8a8efd60dc86c2c462f873e58636b566b3f80e68c715"}
{"level":"info","ts":"2026-07-07T22:43:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6e369672-3374-4919-9434-e54359b9e5af","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:49146","PortSpecifier":{"PortValue":49146}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6e369672-3374-4919-9434-e54359b9e5af","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-41e952.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T22:43:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6e369672-3374-4919-9434-e54359b9e5af","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:49146","PortSpecifier":{"PortValue":49146}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783464195,"nanos":906371971},"http":{"id":"6e369672-3374-4919-9434-e54359b9e5af","method":"POST","headers":{":authority":"e2e-shared-a-41e952.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T22:43:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6e369672-3374-4919-9434-e54359b9e5af","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T22:43:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6e369672-3374-4919-9434-e54359b9e5af","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bb4924e6-aa4e-47bc-bc23-287bb2409310","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20e4333-b741-405f-90ea-62e9cb59fc3b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7352d9229b8d"]}}
{"level":"debug","ts":"2026-07-07T22:43:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6e369672-3374-4919-9434-e54359b9e5af","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7352d9229b8d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20e4333-b741-405f-90ea-62e9cb59fc3b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bb4924e6-aa4e-47bc-bc23-287bb2409310","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9a8567710872db35882e39159253d625ee92e29486331d26f348f7d45fdc1a08"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-41e952.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T22:43:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6e369672-3374-4919-9434-e54359b9e5af","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:43:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6e369672-3374-4919-9434-e54359b9e5af","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:43:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6e369672-3374-4919-9434-e54359b9e5af","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-41e952/rate-test-model-41e952\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:43:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6e369672-3374-4919-9434-e54359b9e5af","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T22:43:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6e369672-3374-4919-9434-e54359b9e5af","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T22:43:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6e369672-3374-4919-9434-e54359b9e5af","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T22:43:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6e369672-3374-4919-9434-e54359b9e5af","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T22:43:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6e369672-3374-4919-9434-e54359b9e5af","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T22:43:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4a6cb2d6-3369-45ef-b5ce-e666e64ba898","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:37376","PortSpecifier":{"PortValue":37376}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4a6cb2d6-3369-45ef-b5ce-e666e64ba898","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a4bfe6.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T22:43:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4a6cb2d6-3369-45ef-b5ce-e666e64ba898","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:37376","PortSpecifier":{"PortValue":37376}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783464195,"nanos":966673677},"http":{"id":"4a6cb2d6-3369-45ef-b5ce-e666e64ba898","method":"POST","headers":{":authority":"e2e-shared-b-a4bfe6.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T22:43:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4a6cb2d6-3369-45ef-b5ce-e666e64ba898","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T22:43:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4a6cb2d6-3369-45ef-b5ce-e666e64ba898","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bb4924e6-aa4e-47bc-bc23-287bb2409310","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20e4333-b741-405f-90ea-62e9cb59fc3b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7352d9229b8d"]}}
{"level":"debug","ts":"2026-07-07T22:43:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4a6cb2d6-3369-45ef-b5ce-e666e64ba898","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7352d9229b8d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20e4333-b741-405f-90ea-62e9cb59fc3b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bb4924e6-aa4e-47bc-bc23-287bb2409310","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"eb6677a84f2011c8778e746156db2939d5a85331d1da5327e5a965925b8554bd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a4bfe6.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T22:43:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a6cb2d6-3369-45ef-b5ce-e666e64ba898","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:43:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a6cb2d6-3369-45ef-b5ce-e666e64ba898","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:43:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a6cb2d6-3369-45ef-b5ce-e666e64ba898","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a4bfe6/rate-test-model-a4bfe6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:43:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4a6cb2d6-3369-45ef-b5ce-e666e64ba898","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T22:43:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4a6cb2d6-3369-45ef-b5ce-e666e64ba898","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T22:43:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4a6cb2d6-3369-45ef-b5ce-e666e64ba898","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T22:43:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4a6cb2d6-3369-45ef-b5ce-e666e64ba898","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T22:43:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4a6cb2d6-3369-45ef-b5ce-e666e64ba898","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T22:43:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7a6ba944-2d29-40e4-92c2-3073e1641d0e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:44748","PortSpecifier":{"PortValue":44748}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7a6ba944-2d29-40e4-92c2-3073e1641d0e","method":"POST","path":"/ai-tenant-e2e-shared-a-41e952/rate-test-model-41e952/v1/completions","host":"e2e-shared-a-41e952.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T22:43:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7a6ba944-2d29-40e4-92c2-3073e1641d0e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:44748","PortSpecifier":{"PortValue":44748}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783464196,"nanos":1565885},"http":{"id":"7a6ba944-2d29-40e4-92c2-3073e1641d0e","method":"POST","headers":{":authority":"e2e-shared-a-41e952.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-41e952/rate-test-model-41e952/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T22:43:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7a6ba944-2d29-40e4-92c2-3073e1641d0e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Nx6Zk4OJ0SDjScGb_LmhCVPs7gKPa8xgysdNpr1qeEA7uYJs32kwylDgmU1b"}
{"level":"debug","ts":"2026-07-07T22:43:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7a6ba944-2d29-40e4-92c2-3073e1641d0e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-41e952.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Nx6Zk4OJ0SDjScGb_LmhCVPs7gKPa8xgysdNpr1qeEA7uYJs32kwylDgmU1b\"}"}
{"level":"debug","ts":"2026-07-07T22:43:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7a6ba944-2d29-40e4-92c2-3073e1641d0e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-41e952.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fedc55d3-34ed-43ea-ade3-6498d95bd74e","keyName":"e2e-rate-a-c80f64","subscription":"e2e-rate-iso-a-c80f64","tenant":"e2e-shared-a-41e952","userId":"fedc55d3-34ed-43ea-ade3-6498d95bd74e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T22:43:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7a6ba944-2d29-40e4-92c2-3073e1641d0e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-41e952.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-41e952/rate-test-model-41e952\",\"requestedSubscription\":\"e2e-rate-iso-a-c80f64\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T22:43:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7a6ba944-2d29-40e4-92c2-3073e1641d0e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-41e952.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-41e952","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c80f64","namespace":"ai-tenant-e2e-shared-a-41e952","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T22:43:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7a6ba944-2d29-40e4-92c2-3073e1641d0e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T22:43:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7a6ba944-2d29-40e4-92c2-3073e1641d0e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:43:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7a6ba944-2d29-40e4-92c2-3073e1641d0e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:43:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7a6ba944-2d29-40e4-92c2-3073e1641d0e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-41e952/rate-test-model-41e952\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:43:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7a6ba944-2d29-40e4-92c2-3073e1641d0e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:43:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7a6ba944-2d29-40e4-92c2-3073e1641d0e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T22:43:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7a6ba944-2d29-40e4-92c2-3073e1641d0e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c80f64"}
{"level":"debug","ts":"2026-07-07T22:43:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7a6ba944-2d29-40e4-92c2-3073e1641d0e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T22:43:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7a6ba944-2d29-40e4-92c2-3073e1641d0e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"fedc55d3-34ed-43ea-ade3-6498d95bd74e","keyName":"e2e-rate-a-c80f64","selected_subscription":"e2e-rate-iso-a-c80f64","selected_subscription_key":"ai-tenant-e2e-shared-a-41e952/e2e-rate-iso-a-c80f64@ai-tenant-e2e-shared-a-41e952/rate-test-model-41e952","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-41e952","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c80f64","namespace":"ai-tenant-e2e-shared-a-41e952","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T22:43:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7a6ba944-2d29-40e4-92c2-3073e1641d0e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T22:43:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7a6ba944-2d29-40e4-92c2-3073e1641d0e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T22:43:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"809bbf31-9018-450c-adfc-9bcf8fa6e505","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:44760","PortSpecifier":{"PortValue":44760}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"809bbf31-9018-450c-adfc-9bcf8fa6e505","method":"POST","path":"/ai-tenant-e2e-shared-a-41e952/rate-test-model-41e952/v1/completions","host":"e2e-shared-a-41e952.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T22:43:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"809bbf31-9018-450c-adfc-9bcf8fa6e505","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:44760","PortSpecifier":{"PortValue":44760}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783464197,"nanos":66102135},"http":{"id":"809bbf31-9018-450c-adfc-9bcf8fa6e505","method":"POST","headers":{":authority":"e2e-shared-a-41e952.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-41e952/rate-test-model-41e952/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T22:43:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"809bbf31-9018-450c-adfc-9bcf8fa6e505","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Nx6Zk4OJ0SDjScGb_LmhCVPs7gKPa8xgysdNpr1qeEA7uYJs32kwylDgmU1b"}
{"level":"debug","ts":"2026-07-07T22:43:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"809bbf31-9018-450c-adfc-9bcf8fa6e505","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-41e952.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Nx6Zk4OJ0SDjScGb_LmhCVPs7gKPa8xgysdNpr1qeEA7uYJs32kwylDgmU1b\"}"}
{"level":"debug","ts":"2026-07-07T22:43:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"809bbf31-9018-450c-adfc-9bcf8fa6e505","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-41e952.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fedc55d3-34ed-43ea-ade3-6498d95bd74e","keyName":"e2e-rate-a-c80f64","subscription":"e2e-rate-iso-a-c80f64","tenant":"e2e-shared-a-41e952","userId":"fedc55d3-34ed-43ea-ade3-6498d95bd74e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T22:43:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"809bbf31-9018-450c-adfc-9bcf8fa6e505","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-41e952.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-41e952/rate-test-model-41e952\",\"requestedSubscription\":\"e2e-rate-iso-a-c80f64\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T22:43:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"809bbf31-9018-450c-adfc-9bcf8fa6e505","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-41e952.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-41e952","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c80f64","namespace":"ai-tenant-e2e-shared-a-41e952","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T22:43:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"809bbf31-9018-450c-adfc-9bcf8fa6e505","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T22:43:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"809bbf31-9018-450c-adfc-9bcf8fa6e505","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:43:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"809bbf31-9018-450c-adfc-9bcf8fa6e505","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:43:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"809bbf31-9018-450c-adfc-9bcf8fa6e505","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-41e952/rate-test-model-41e952\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:43:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"809bbf31-9018-450c-adfc-9bcf8fa6e505","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:43:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"809bbf31-9018-450c-adfc-9bcf8fa6e505","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T22:43:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"809bbf31-9018-450c-adfc-9bcf8fa6e505","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c80f64"}
{"level":"debug","ts":"2026-07-07T22:43:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"809bbf31-9018-450c-adfc-9bcf8fa6e505","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T22:43:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"809bbf31-9018-450c-adfc-9bcf8fa6e505","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"fedc55d3-34ed-43ea-ade3-6498d95bd74e","keyName":"e2e-rate-a-c80f64","selected_subscription":"e2e-rate-iso-a-c80f64","selected_subscription_key":"ai-tenant-e2e-shared-a-41e952/e2e-rate-iso-a-c80f64@ai-tenant-e2e-shared-a-41e952/rate-test-model-41e952","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-41e952","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c80f64","namespace":"ai-tenant-e2e-shared-a-41e952","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T22:43:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"809bbf31-9018-450c-adfc-9bcf8fa6e505","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T22:43:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"809bbf31-9018-450c-adfc-9bcf8fa6e505","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T22:43:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b3f0bcc5-edf1-4d44-94d4-7e1249a4b4cb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:44774","PortSpecifier":{"PortValue":44774}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b3f0bcc5-edf1-4d44-94d4-7e1249a4b4cb","method":"POST","path":"/ai-tenant-e2e-shared-a-41e952/rate-test-model-41e952/v1/completions","host":"e2e-shared-a-41e952.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T22:43:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b3f0bcc5-edf1-4d44-94d4-7e1249a4b4cb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:44774","PortSpecifier":{"PortValue":44774}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783464198,"nanos":112336555},"http":{"id":"b3f0bcc5-edf1-4d44-94d4-7e1249a4b4cb","method":"POST","headers":{":authority":"e2e-shared-a-41e952.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-41e952/rate-test-model-41e952/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T22:43:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b3f0bcc5-edf1-4d44-94d4-7e1249a4b4cb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Nx6Zk4OJ0SDjScGb_LmhCVPs7gKPa8xgysdNpr1qeEA7uYJs32kwylDgmU1b"}
{"level":"debug","ts":"2026-07-07T22:43:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b3f0bcc5-edf1-4d44-94d4-7e1249a4b4cb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-41e952.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Nx6Zk4OJ0SDjScGb_LmhCVPs7gKPa8xgysdNpr1qeEA7uYJs32kwylDgmU1b\"}"}
{"level":"debug","ts":"2026-07-07T22:43:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b3f0bcc5-edf1-4d44-94d4-7e1249a4b4cb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-41e952.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fedc55d3-34ed-43ea-ade3-6498d95bd74e","keyName":"e2e-rate-a-c80f64","subscription":"e2e-rate-iso-a-c80f64","tenant":"e2e-shared-a-41e952","userId":"fedc55d3-34ed-43ea-ade3-6498d95bd74e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T22:43:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b3f0bcc5-edf1-4d44-94d4-7e1249a4b4cb","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-41e952.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-41e952/rate-test-model-41e952\",\"requestedSubscription\":\"e2e-rate-iso-a-c80f64\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T22:43:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b3f0bcc5-edf1-4d44-94d4-7e1249a4b4cb","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-41e952.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-41e952","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c80f64","namespace":"ai-tenant-e2e-shared-a-41e952","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T22:43:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b3f0bcc5-edf1-4d44-94d4-7e1249a4b4cb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T22:43:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3f0bcc5-edf1-4d44-94d4-7e1249a4b4cb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:43:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3f0bcc5-edf1-4d44-94d4-7e1249a4b4cb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:43:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3f0bcc5-edf1-4d44-94d4-7e1249a4b4cb","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:43:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3f0bcc5-edf1-4d44-94d4-7e1249a4b4cb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-41e952/rate-test-model-41e952\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:43:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b3f0bcc5-edf1-4d44-94d4-7e1249a4b4cb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T22:43:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b3f0bcc5-edf1-4d44-94d4-7e1249a4b4cb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c80f64"}
{"level":"debug","ts":"2026-07-07T22:43:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b3f0bcc5-edf1-4d44-94d4-7e1249a4b4cb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T22:43:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b3f0bcc5-edf1-4d44-94d4-7e1249a4b4cb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"fedc55d3-34ed-43ea-ade3-6498d95bd74e","keyName":"e2e-rate-a-c80f64","selected_subscription":"e2e-rate-iso-a-c80f64","selected_subscription_key":"ai-tenant-e2e-shared-a-41e952/e2e-rate-iso-a-c80f64@ai-tenant-e2e-shared-a-41e952/rate-test-model-41e952","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-41e952","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c80f64","namespace":"ai-tenant-e2e-shared-a-41e952","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T22:43:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b3f0bcc5-edf1-4d44-94d4-7e1249a4b4cb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T22:43:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b3f0bcc5-edf1-4d44-94d4-7e1249a4b4cb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T22:43:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6281e94b-5f24-425e-9b7e-d5298377b88e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:35218","PortSpecifier":{"PortValue":35218}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6281e94b-5f24-425e-9b7e-d5298377b88e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-41e952.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T22:43:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6281e94b-5f24-425e-9b7e-d5298377b88e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:35218","PortSpecifier":{"PortValue":35218}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783464206,"nanos":727114458},"http":{"id":"6281e94b-5f24-425e-9b7e-d5298377b88e","method":"POST","headers":{":authority":"e2e-shared-a-41e952.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T22:43:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6281e94b-5f24-425e-9b7e-d5298377b88e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T22:43:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6281e94b-5f24-425e-9b7e-d5298377b88e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bb4924e6-aa4e-47bc-bc23-287bb2409310","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20e4333-b741-405f-90ea-62e9cb59fc3b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7352d9229b8d"]}}
{"level":"debug","ts":"2026-07-07T22:43:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6281e94b-5f24-425e-9b7e-d5298377b88e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7352d9229b8d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20e4333-b741-405f-90ea-62e9cb59fc3b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bb4924e6-aa4e-47bc-bc23-287bb2409310","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9a8567710872db35882e39159253d625ee92e29486331d26f348f7d45fdc1a08"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-41e952.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T22:43:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6281e94b-5f24-425e-9b7e-d5298377b88e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:43:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6281e94b-5f24-425e-9b7e-d5298377b88e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:43:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6281e94b-5f24-425e-9b7e-d5298377b88e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-41e952/rate-test-model-41e952\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:43:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6281e94b-5f24-425e-9b7e-d5298377b88e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T22:43:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6281e94b-5f24-425e-9b7e-d5298377b88e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T22:43:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6281e94b-5f24-425e-9b7e-d5298377b88e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T22:43:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6281e94b-5f24-425e-9b7e-d5298377b88e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T22:43:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6281e94b-5f24-425e-9b7e-d5298377b88e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T22:43:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"330c9b50-e6b5-4cb4-b556-3ea66c667323","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:55130","PortSpecifier":{"PortValue":55130}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"330c9b50-e6b5-4cb4-b556-3ea66c667323","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a4bfe6.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T22:43:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"330c9b50-e6b5-4cb4-b556-3ea66c667323","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:55130","PortSpecifier":{"PortValue":55130}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783464206,"nanos":787457883},"http":{"id":"330c9b50-e6b5-4cb4-b556-3ea66c667323","method":"POST","headers":{":authority":"e2e-shared-b-a4bfe6.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T22:43:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"330c9b50-e6b5-4cb4-b556-3ea66c667323","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T22:43:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"330c9b50-e6b5-4cb4-b556-3ea66c667323","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bb4924e6-aa4e-47bc-bc23-287bb2409310","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20e4333-b741-405f-90ea-62e9cb59fc3b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7352d9229b8d"]}}
{"level":"debug","ts":"2026-07-07T22:43:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"330c9b50-e6b5-4cb4-b556-3ea66c667323","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7352d9229b8d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20e4333-b741-405f-90ea-62e9cb59fc3b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bb4924e6-aa4e-47bc-bc23-287bb2409310","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"eb6677a84f2011c8778e746156db2939d5a85331d1da5327e5a965925b8554bd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a4bfe6.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T22:43:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"330c9b50-e6b5-4cb4-b556-3ea66c667323","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:43:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"330c9b50-e6b5-4cb4-b556-3ea66c667323","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:43:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"330c9b50-e6b5-4cb4-b556-3ea66c667323","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a4bfe6/rate-test-model-a4bfe6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:43:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"330c9b50-e6b5-4cb4-b556-3ea66c667323","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T22:43:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"330c9b50-e6b5-4cb4-b556-3ea66c667323","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T22:43:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"330c9b50-e6b5-4cb4-b556-3ea66c667323","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T22:43:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"330c9b50-e6b5-4cb4-b556-3ea66c667323","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T22:43:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"330c9b50-e6b5-4cb4-b556-3ea66c667323","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T22:43:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4c0f1b1d-51ad-4ea1-b7a2-3568e086c2dd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:35230","PortSpecifier":{"PortValue":35230}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4c0f1b1d-51ad-4ea1-b7a2-3568e086c2dd","method":"POST","path":"/ai-tenant-e2e-shared-a-41e952/rate-test-model-41e952/v1/completions","host":"e2e-shared-a-41e952.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T22:43:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4c0f1b1d-51ad-4ea1-b7a2-3568e086c2dd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:35230","PortSpecifier":{"PortValue":35230}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783464206,"nanos":826207331},"http":{"id":"4c0f1b1d-51ad-4ea1-b7a2-3568e086c2dd","method":"POST","headers":{":authority":"e2e-shared-a-41e952.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-41e952/rate-test-model-41e952/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T22:43:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4c0f1b1d-51ad-4ea1-b7a2-3568e086c2dd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-KOdZmNj7UAsb1CO6_HVKrSgNGHLC02yeDmLsTEUu14JEh5uoOVxlWTmBh4dv"}
{"level":"debug","ts":"2026-07-07T22:43:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4c0f1b1d-51ad-4ea1-b7a2-3568e086c2dd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-41e952.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-KOdZmNj7UAsb1CO6_HVKrSgNGHLC02yeDmLsTEUu14JEh5uoOVxlWTmBh4dv\"}"}
{"level":"debug","ts":"2026-07-07T22:43:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4c0f1b1d-51ad-4ea1-b7a2-3568e086c2dd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-41e952.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5beccaf4-9d7b-4cd8-a5ce-ecbd33867090","keyName":"e2e-rate-a-d3365b","subscription":"e2e-rate-iso-a-d3365b","tenant":"e2e-shared-a-41e952","userId":"5beccaf4-9d7b-4cd8-a5ce-ecbd33867090","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T22:43:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4c0f1b1d-51ad-4ea1-b7a2-3568e086c2dd","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-41e952.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-41e952/rate-test-model-41e952\",\"requestedSubscription\":\"e2e-rate-iso-a-d3365b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T22:43:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4c0f1b1d-51ad-4ea1-b7a2-3568e086c2dd","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-41e952.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-41e952","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d3365b","namespace":"ai-tenant-e2e-shared-a-41e952","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T22:43:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4c0f1b1d-51ad-4ea1-b7a2-3568e086c2dd","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T22:43:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c0f1b1d-51ad-4ea1-b7a2-3568e086c2dd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:43:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c0f1b1d-51ad-4ea1-b7a2-3568e086c2dd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:43:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c0f1b1d-51ad-4ea1-b7a2-3568e086c2dd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-41e952/rate-test-model-41e952\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:43:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c0f1b1d-51ad-4ea1-b7a2-3568e086c2dd","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:43:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4c0f1b1d-51ad-4ea1-b7a2-3568e086c2dd","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d3365b"}
{"level":"debug","ts":"2026-07-07T22:43:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4c0f1b1d-51ad-4ea1-b7a2-3568e086c2dd","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T22:43:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4c0f1b1d-51ad-4ea1-b7a2-3568e086c2dd","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T22:43:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4c0f1b1d-51ad-4ea1-b7a2-3568e086c2dd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5beccaf4-9d7b-4cd8-a5ce-ecbd33867090","keyName":"e2e-rate-a-d3365b","selected_subscription":"e2e-rate-iso-a-d3365b","selected_subscription_key":"ai-tenant-e2e-shared-a-41e952/e2e-rate-iso-a-d3365b@ai-tenant-e2e-shared-a-41e952/rate-test-model-41e952","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-41e952","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d3365b","namespace":"ai-tenant-e2e-shared-a-41e952","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T22:43:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4c0f1b1d-51ad-4ea1-b7a2-3568e086c2dd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T22:43:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4c0f1b1d-51ad-4ea1-b7a2-3568e086c2dd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T22:43:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3b2854ad-f7e9-4209-b0e6-7e171f6a68d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:35246","PortSpecifier":{"PortValue":35246}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3b2854ad-f7e9-4209-b0e6-7e171f6a68d3","method":"POST","path":"/ai-tenant-e2e-shared-a-41e952/rate-test-model-41e952/v1/completions","host":"e2e-shared-a-41e952.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T22:43:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3b2854ad-f7e9-4209-b0e6-7e171f6a68d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:35246","PortSpecifier":{"PortValue":35246}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783464207,"nanos":863147454},"http":{"id":"3b2854ad-f7e9-4209-b0e6-7e171f6a68d3","method":"POST","headers":{":authority":"e2e-shared-a-41e952.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-41e952/rate-test-model-41e952/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T22:43:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3b2854ad-f7e9-4209-b0e6-7e171f6a68d3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-KOdZmNj7UAsb1CO6_HVKrSgNGHLC02yeDmLsTEUu14JEh5uoOVxlWTmBh4dv"}
{"level":"debug","ts":"2026-07-07T22:43:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3b2854ad-f7e9-4209-b0e6-7e171f6a68d3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-41e952.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-KOdZmNj7UAsb1CO6_HVKrSgNGHLC02yeDmLsTEUu14JEh5uoOVxlWTmBh4dv\"}"}
{"level":"debug","ts":"2026-07-07T22:43:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3b2854ad-f7e9-4209-b0e6-7e171f6a68d3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-41e952.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5beccaf4-9d7b-4cd8-a5ce-ecbd33867090","keyName":"e2e-rate-a-d3365b","subscription":"e2e-rate-iso-a-d3365b","tenant":"e2e-shared-a-41e952","userId":"5beccaf4-9d7b-4cd8-a5ce-ecbd33867090","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T22:43:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3b2854ad-f7e9-4209-b0e6-7e171f6a68d3","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-41e952.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-41e952/rate-test-model-41e952\",\"requestedSubscription\":\"e2e-rate-iso-a-d3365b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T22:43:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3b2854ad-f7e9-4209-b0e6-7e171f6a68d3","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-41e952.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-41e952","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d3365b","namespace":"ai-tenant-e2e-shared-a-41e952","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T22:43:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3b2854ad-f7e9-4209-b0e6-7e171f6a68d3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T22:43:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b2854ad-f7e9-4209-b0e6-7e171f6a68d3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:43:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b2854ad-f7e9-4209-b0e6-7e171f6a68d3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:43:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b2854ad-f7e9-4209-b0e6-7e171f6a68d3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-41e952/rate-test-model-41e952\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:43:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b2854ad-f7e9-4209-b0e6-7e171f6a68d3","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:43:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b2854ad-f7e9-4209-b0e6-7e171f6a68d3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T22:43:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b2854ad-f7e9-4209-b0e6-7e171f6a68d3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T22:43:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b2854ad-f7e9-4209-b0e6-7e171f6a68d3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d3365b"}
{"level":"debug","ts":"2026-07-07T22:43:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b2854ad-f7e9-4209-b0e6-7e171f6a68d3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5beccaf4-9d7b-4cd8-a5ce-ecbd33867090","keyName":"e2e-rate-a-d3365b","selected_subscription":"e2e-rate-iso-a-d3365b","selected_subscription_key":"ai-tenant-e2e-shared-a-41e952/e2e-rate-iso-a-d3365b@ai-tenant-e2e-shared-a-41e952/rate-test-model-41e952","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-41e952","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d3365b","namespace":"ai-tenant-e2e-shared-a-41e952","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T22:43:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3b2854ad-f7e9-4209-b0e6-7e171f6a68d3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T22:43:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3b2854ad-f7e9-4209-b0e6-7e171f6a68d3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T22:43:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"05de3150-3f62-43b3-bba5-029633336276","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:35256","PortSpecifier":{"PortValue":35256}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"05de3150-3f62-43b3-bba5-029633336276","method":"POST","path":"/ai-tenant-e2e-shared-a-41e952/rate-test-model-41e952/v1/completions","host":"e2e-shared-a-41e952.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T22:43:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"05de3150-3f62-43b3-bba5-029633336276","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:35256","PortSpecifier":{"PortValue":35256}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783464208,"nanos":907709402},"http":{"id":"05de3150-3f62-43b3-bba5-029633336276","method":"POST","headers":{":authority":"e2e-shared-a-41e952.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-41e952/rate-test-model-41e952/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T22:43:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"05de3150-3f62-43b3-bba5-029633336276","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-KOdZmNj7UAsb1CO6_HVKrSgNGHLC02yeDmLsTEUu14JEh5uoOVxlWTmBh4dv"}
{"level":"debug","ts":"2026-07-07T22:43:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"05de3150-3f62-43b3-bba5-029633336276","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-41e952.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-KOdZmNj7UAsb1CO6_HVKrSgNGHLC02yeDmLsTEUu14JEh5uoOVxlWTmBh4dv\"}"}
{"level":"debug","ts":"2026-07-07T22:43:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"05de3150-3f62-43b3-bba5-029633336276","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-41e952.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5beccaf4-9d7b-4cd8-a5ce-ecbd33867090","keyName":"e2e-rate-a-d3365b","subscription":"e2e-rate-iso-a-d3365b","tenant":"e2e-shared-a-41e952","userId":"5beccaf4-9d7b-4cd8-a5ce-ecbd33867090","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T22:43:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"05de3150-3f62-43b3-bba5-029633336276","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-41e952.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-41e952/rate-test-model-41e952\",\"requestedSubscription\":\"e2e-rate-iso-a-d3365b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T22:43:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"05de3150-3f62-43b3-bba5-029633336276","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-41e952.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-41e952","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d3365b","namespace":"ai-tenant-e2e-shared-a-41e952","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T22:43:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"05de3150-3f62-43b3-bba5-029633336276","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T22:43:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05de3150-3f62-43b3-bba5-029633336276","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:43:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05de3150-3f62-43b3-bba5-029633336276","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:43:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05de3150-3f62-43b3-bba5-029633336276","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:43:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05de3150-3f62-43b3-bba5-029633336276","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-41e952/rate-test-model-41e952\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:43:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"05de3150-3f62-43b3-bba5-029633336276","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T22:43:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"05de3150-3f62-43b3-bba5-029633336276","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d3365b"}
{"level":"debug","ts":"2026-07-07T22:43:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"05de3150-3f62-43b3-bba5-029633336276","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T22:43:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"05de3150-3f62-43b3-bba5-029633336276","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5beccaf4-9d7b-4cd8-a5ce-ecbd33867090","keyName":"e2e-rate-a-d3365b","selected_subscription":"e2e-rate-iso-a-d3365b","selected_subscription_key":"ai-tenant-e2e-shared-a-41e952/e2e-rate-iso-a-d3365b@ai-tenant-e2e-shared-a-41e952/rate-test-model-41e952","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-41e952","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d3365b","namespace":"ai-tenant-e2e-shared-a-41e952","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T22:43:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"05de3150-3f62-43b3-bba5-029633336276","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T22:43:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"05de3150-3f62-43b3-bba5-029633336276","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T22:43:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"234c5135-f75c-4d99-84a4-0121a29fc669","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:35264","PortSpecifier":{"PortValue":35264}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"234c5135-f75c-4d99-84a4-0121a29fc669","method":"POST","path":"/ai-tenant-e2e-shared-a-41e952/rate-test-model-41e952/v1/completions","host":"e2e-shared-a-41e952.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T22:43:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"234c5135-f75c-4d99-84a4-0121a29fc669","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:35264","PortSpecifier":{"PortValue":35264}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783464209,"nanos":943054526},"http":{"id":"234c5135-f75c-4d99-84a4-0121a29fc669","method":"POST","headers":{":authority":"e2e-shared-a-41e952.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-41e952/rate-test-model-41e952/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T22:43:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"234c5135-f75c-4d99-84a4-0121a29fc669","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-KOdZmNj7UAsb1CO6_HVKrSgNGHLC02yeDmLsTEUu14JEh5uoOVxlWTmBh4dv"}
{"level":"debug","ts":"2026-07-07T22:43:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"234c5135-f75c-4d99-84a4-0121a29fc669","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-41e952.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-KOdZmNj7UAsb1CO6_HVKrSgNGHLC02yeDmLsTEUu14JEh5uoOVxlWTmBh4dv\"}"}
{"level":"debug","ts":"2026-07-07T22:43:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"234c5135-f75c-4d99-84a4-0121a29fc669","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-41e952.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5beccaf4-9d7b-4cd8-a5ce-ecbd33867090","keyName":"e2e-rate-a-d3365b","subscription":"e2e-rate-iso-a-d3365b","tenant":"e2e-shared-a-41e952","userId":"5beccaf4-9d7b-4cd8-a5ce-ecbd33867090","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T22:43:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"234c5135-f75c-4d99-84a4-0121a29fc669","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-41e952.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-41e952/rate-test-model-41e952\",\"requestedSubscription\":\"e2e-rate-iso-a-d3365b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T22:43:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"234c5135-f75c-4d99-84a4-0121a29fc669","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-41e952.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-41e952","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d3365b","namespace":"ai-tenant-e2e-shared-a-41e952","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T22:43:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"234c5135-f75c-4d99-84a4-0121a29fc669","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T22:43:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"234c5135-f75c-4d99-84a4-0121a29fc669","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:43:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"234c5135-f75c-4d99-84a4-0121a29fc669","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:43:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"234c5135-f75c-4d99-84a4-0121a29fc669","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-41e952/rate-test-model-41e952\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:43:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"234c5135-f75c-4d99-84a4-0121a29fc669","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:43:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"234c5135-f75c-4d99-84a4-0121a29fc669","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T22:43:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"234c5135-f75c-4d99-84a4-0121a29fc669","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T22:43:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"234c5135-f75c-4d99-84a4-0121a29fc669","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d3365b"}
{"level":"debug","ts":"2026-07-07T22:43:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"234c5135-f75c-4d99-84a4-0121a29fc669","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5beccaf4-9d7b-4cd8-a5ce-ecbd33867090","keyName":"e2e-rate-a-d3365b","selected_subscription":"e2e-rate-iso-a-d3365b","selected_subscription_key":"ai-tenant-e2e-shared-a-41e952/e2e-rate-iso-a-d3365b@ai-tenant-e2e-shared-a-41e952/rate-test-model-41e952","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-41e952","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d3365b","namespace":"ai-tenant-e2e-shared-a-41e952","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T22:43:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"234c5135-f75c-4d99-84a4-0121a29fc669","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T22:43:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"234c5135-f75c-4d99-84a4-0121a29fc669","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T22:43:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9141d183-a0c8-4527-bd09-9a514c7940e4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:35270","PortSpecifier":{"PortValue":35270}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9141d183-a0c8-4527-bd09-9a514c7940e4","method":"POST","path":"/ai-tenant-e2e-shared-a-41e952/rate-test-model-41e952/v1/completions","host":"e2e-shared-a-41e952.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T22:43:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9141d183-a0c8-4527-bd09-9a514c7940e4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:35270","PortSpecifier":{"PortValue":35270}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783464210,"nanos":977523454},"http":{"id":"9141d183-a0c8-4527-bd09-9a514c7940e4","method":"POST","headers":{":authority":"e2e-shared-a-41e952.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-41e952/rate-test-model-41e952/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T22:43:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9141d183-a0c8-4527-bd09-9a514c7940e4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-KOdZmNj7UAsb1CO6_HVKrSgNGHLC02yeDmLsTEUu14JEh5uoOVxlWTmBh4dv"}
{"level":"debug","ts":"2026-07-07T22:43:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9141d183-a0c8-4527-bd09-9a514c7940e4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-41e952.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-KOdZmNj7UAsb1CO6_HVKrSgNGHLC02yeDmLsTEUu14JEh5uoOVxlWTmBh4dv\"}"}
{"level":"debug","ts":"2026-07-07T22:43:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9141d183-a0c8-4527-bd09-9a514c7940e4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-41e952.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5beccaf4-9d7b-4cd8-a5ce-ecbd33867090","keyName":"e2e-rate-a-d3365b","subscription":"e2e-rate-iso-a-d3365b","tenant":"e2e-shared-a-41e952","userId":"5beccaf4-9d7b-4cd8-a5ce-ecbd33867090","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T22:43:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9141d183-a0c8-4527-bd09-9a514c7940e4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-41e952.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-41e952/rate-test-model-41e952\",\"requestedSubscription\":\"e2e-rate-iso-a-d3365b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T22:43:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9141d183-a0c8-4527-bd09-9a514c7940e4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-41e952.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-41e952","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d3365b","namespace":"ai-tenant-e2e-shared-a-41e952","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T22:43:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9141d183-a0c8-4527-bd09-9a514c7940e4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T22:43:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9141d183-a0c8-4527-bd09-9a514c7940e4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:43:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9141d183-a0c8-4527-bd09-9a514c7940e4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:43:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9141d183-a0c8-4527-bd09-9a514c7940e4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:43:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9141d183-a0c8-4527-bd09-9a514c7940e4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-41e952/rate-test-model-41e952\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:43:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9141d183-a0c8-4527-bd09-9a514c7940e4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T22:43:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9141d183-a0c8-4527-bd09-9a514c7940e4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T22:43:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9141d183-a0c8-4527-bd09-9a514c7940e4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d3365b"}
{"level":"debug","ts":"2026-07-07T22:43:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9141d183-a0c8-4527-bd09-9a514c7940e4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5beccaf4-9d7b-4cd8-a5ce-ecbd33867090","keyName":"e2e-rate-a-d3365b","selected_subscription":"e2e-rate-iso-a-d3365b","selected_subscription_key":"ai-tenant-e2e-shared-a-41e952/e2e-rate-iso-a-d3365b@ai-tenant-e2e-shared-a-41e952/rate-test-model-41e952","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-41e952","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d3365b","namespace":"ai-tenant-e2e-shared-a-41e952","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T22:43:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9141d183-a0c8-4527-bd09-9a514c7940e4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T22:43:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9141d183-a0c8-4527-bd09-9a514c7940e4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T22:43:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e99211c8-ab4e-4bf9-9f20-903c024fac20","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:35280","PortSpecifier":{"PortValue":35280}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e99211c8-ab4e-4bf9-9f20-903c024fac20","method":"POST","path":"/ai-tenant-e2e-shared-a-41e952/rate-test-model-41e952/v1/completions","host":"e2e-shared-a-41e952.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T22:43:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e99211c8-ab4e-4bf9-9f20-903c024fac20","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:35280","PortSpecifier":{"PortValue":35280}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783464212,"nanos":11334612},"http":{"id":"e99211c8-ab4e-4bf9-9f20-903c024fac20","method":"POST","headers":{":authority":"e2e-shared-a-41e952.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-41e952/rate-test-model-41e952/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T22:43:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e99211c8-ab4e-4bf9-9f20-903c024fac20","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-KOdZmNj7UAsb1CO6_HVKrSgNGHLC02yeDmLsTEUu14JEh5uoOVxlWTmBh4dv"}
{"level":"debug","ts":"2026-07-07T22:43:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e99211c8-ab4e-4bf9-9f20-903c024fac20","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-41e952.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-KOdZmNj7UAsb1CO6_HVKrSgNGHLC02yeDmLsTEUu14JEh5uoOVxlWTmBh4dv\"}"}
{"level":"debug","ts":"2026-07-07T22:43:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e99211c8-ab4e-4bf9-9f20-903c024fac20","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-41e952.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5beccaf4-9d7b-4cd8-a5ce-ecbd33867090","keyName":"e2e-rate-a-d3365b","subscription":"e2e-rate-iso-a-d3365b","tenant":"e2e-shared-a-41e952","userId":"5beccaf4-9d7b-4cd8-a5ce-ecbd33867090","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T22:43:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e99211c8-ab4e-4bf9-9f20-903c024fac20","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-41e952.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-41e952/rate-test-model-41e952\",\"requestedSubscription\":\"e2e-rate-iso-a-d3365b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T22:43:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e99211c8-ab4e-4bf9-9f20-903c024fac20","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-41e952.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-41e952","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d3365b","namespace":"ai-tenant-e2e-shared-a-41e952","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T22:43:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e99211c8-ab4e-4bf9-9f20-903c024fac20","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T22:43:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e99211c8-ab4e-4bf9-9f20-903c024fac20","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:43:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e99211c8-ab4e-4bf9-9f20-903c024fac20","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:43:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e99211c8-ab4e-4bf9-9f20-903c024fac20","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:43:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e99211c8-ab4e-4bf9-9f20-903c024fac20","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-41e952/rate-test-model-41e952\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:43:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e99211c8-ab4e-4bf9-9f20-903c024fac20","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T22:43:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e99211c8-ab4e-4bf9-9f20-903c024fac20","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T22:43:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e99211c8-ab4e-4bf9-9f20-903c024fac20","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d3365b"}
{"level":"debug","ts":"2026-07-07T22:43:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e99211c8-ab4e-4bf9-9f20-903c024fac20","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5beccaf4-9d7b-4cd8-a5ce-ecbd33867090","keyName":"e2e-rate-a-d3365b","selected_subscription":"e2e-rate-iso-a-d3365b","selected_subscription_key":"ai-tenant-e2e-shared-a-41e952/e2e-rate-iso-a-d3365b@ai-tenant-e2e-shared-a-41e952/rate-test-model-41e952","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-41e952","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d3365b","namespace":"ai-tenant-e2e-shared-a-41e952","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T22:43:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e99211c8-ab4e-4bf9-9f20-903c024fac20","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T22:43:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e99211c8-ab4e-4bf9-9f20-903c024fac20","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T22:43:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9a931735-a706-473c-bf1b-9032c1e4c636","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:55144","PortSpecifier":{"PortValue":55144}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9a931735-a706-473c-bf1b-9032c1e4c636","method":"POST","path":"/ai-tenant-e2e-shared-b-a4bfe6/rate-test-model-a4bfe6/v1/completions","host":"e2e-shared-b-a4bfe6.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T22:43:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9a931735-a706-473c-bf1b-9032c1e4c636","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:55144","PortSpecifier":{"PortValue":55144}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783464212,"nanos":49907561},"http":{"id":"9a931735-a706-473c-bf1b-9032c1e4c636","method":"POST","headers":{":authority":"e2e-shared-b-a4bfe6.apps.c16f4dfd-eb23-495f-acc2-7352d9229b8d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-a4bfe6/rate-test-model-a4bfe6/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T22:43:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9a931735-a706-473c-bf1b-9032c1e4c636","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1K0MH6m0zh0Kdi4TI_fVenZ3pWEU4elpEnsXFwFkOCOS0JYoFg8nswOUxxDQU"}
{"level":"debug","ts":"2026-07-07T22:43:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9a931735-a706-473c-bf1b-9032c1e4c636","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-a4bfe6.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1K0MH6m0zh0Kdi4TI_fVenZ3pWEU4elpEnsXFwFkOCOS0JYoFg8nswOUxxDQU\"}"}
{"level":"debug","ts":"2026-07-07T22:43:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9a931735-a706-473c-bf1b-9032c1e4c636","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-a4bfe6.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9d44fa5c-eeed-4dbb-9cf3-a78a35bf8b71","keyName":"e2e-rate-b-d3365b","subscription":"e2e-rate-iso-b-d3365b","tenant":"e2e-shared-b-a4bfe6","userId":"9d44fa5c-eeed-4dbb-9cf3-a78a35bf8b71","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T22:43:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9a931735-a706-473c-bf1b-9032c1e4c636","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-a4bfe6.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-a4bfe6/rate-test-model-a4bfe6\",\"requestedSubscription\":\"e2e-rate-iso-b-d3365b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T22:43:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9a931735-a706-473c-bf1b-9032c1e4c636","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-a4bfe6.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a4bfe6","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-d3365b","namespace":"ai-tenant-e2e-shared-b-a4bfe6","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T22:43:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9a931735-a706-473c-bf1b-9032c1e4c636","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T22:43:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a931735-a706-473c-bf1b-9032c1e4c636","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:43:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a931735-a706-473c-bf1b-9032c1e4c636","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a4bfe6/rate-test-model-a4bfe6\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:43:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a931735-a706-473c-bf1b-9032c1e4c636","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:43:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a931735-a706-473c-bf1b-9032c1e4c636","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T22:43:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a931735-a706-473c-bf1b-9032c1e4c636","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T22:43:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a931735-a706-473c-bf1b-9032c1e4c636","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-d3365b"}
{"level":"debug","ts":"2026-07-07T22:43:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a931735-a706-473c-bf1b-9032c1e4c636","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T22:43:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a931735-a706-473c-bf1b-9032c1e4c636","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9d44fa5c-eeed-4dbb-9cf3-a78a35bf8b71","keyName":"e2e-rate-b-d3365b","selected_subscription":"e2e-rate-iso-b-d3365b","selected_subscription_key":"ai-tenant-e2e-shared-b-a4bfe6/e2e-rate-iso-b-d3365b@ai-tenant-e2e-shared-b-a4bfe6/rate-test-model-a4bfe6","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a4bfe6","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-d3365b","namespace":"ai-tenant-e2e-shared-b-a4bfe6","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T22:43:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9a931735-a706-473c-bf1b-9032c1e4c636","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T22:43:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9a931735-a706-473c-bf1b-9032c1e4c636","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T22:43:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/30f3319f99a8abd4eba8f1598ca6b939fa1b069577f1a85b7e722fbad99457bf"}
{"level":"info","ts":"2026-07-07T22:43:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9e5d92dee0f169f3c6d564d220aea73e8b166cb0ad6e1dfca1f360493d80910f"}
{"level":"info","ts":"2026-07-07T22:43:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5868fbcf0daf8e82f1266b1d5366d560f4633a34faf9b7ab370d5af47c36faa3"}
{"level":"info","ts":"2026-07-07T22:43:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/46535d5626a9121dcfac45ac163c65091295792bc0373b29a305c648bc49c9d6"}
{"level":"info","ts":"2026-07-07T22:43:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8ce83f609dcfe400b54e0a76c4a85fda2b09af080d7d4474d301a28676264cf7"}
{"level":"info","ts":"2026-07-07T22:43:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/87bf5b8955ff4146107c38fa804a280767b67ff65bf70de5c51a191288803ad3"}
{"level":"info","ts":"2026-07-07T22:43:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9d0d328281b4681d88231fd47e645d36ae8266b1e354668f94c480d583ce3c79"}
{"level":"info","ts":"2026-07-07T22:43:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fa4fc8fb726ee2ddf777caa45c4f01ba8122a2fd27f6dcfb61f20c732b4ca4ed"}
{"level":"info","ts":"2026-07-07T22:43:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c029c45bc858b1ee6f98e11cc3dfd00592a5a63edaff2871468acb37bb074b63"}
{"level":"info","ts":"2026-07-07T22:43:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/37c848544fbf721a00bd83a4cbf714a418c37835955df6db151199ad83b3b33d"}
{"level":"info","ts":"2026-07-07T22:43:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/efdbf10809a7d7c6aca941ce300d15bb7c1059debc608dc578e3745597be4d6c"}
{"level":"info","ts":"2026-07-07T22:43:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2bcb797645fe5e47cd6e2885312f786747d66763e405987d9dda625f3038904e"}
{"level":"info","ts":"2026-07-07T22:43:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9f495b00a13ca18a774cc8756429484a6789dee774595fe4fb9e2ce95a125d3e"}
{"level":"info","ts":"2026-07-07T22:43:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fb9f3794828bc493dd23d246d4f008fa508f782d8f0494e7bfd35c2bdfb4ecc8"}
{"level":"info","ts":"2026-07-07T22:43:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/915cd1c390dc31ed035f8a8efd60dc86c2c462f873e58636b566b3f80e68c715"}
{"level":"info","ts":"2026-07-07T22:43:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2b629cfd64cae59244768bdc9e5f6a6a35bee33e9a112db902b74acd1fbcc764"}
{"level":"info","ts":"2026-07-07T22:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3d38fbf2c5357d325a382939175e7bc43b30a9f696bb0c7249dc1bbf43a6ca5a"}
{"level":"info","ts":"2026-07-07T22:43:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9a8567710872db35882e39159253d625ee92e29486331d26f348f7d45fdc1a08"}
{"level":"info","ts":"2026-07-07T22:44:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eb6677a84f2011c8778e746156db2939d5a85331d1da5327e5a965925b8554bd"}
{"level":"info","ts":"2026-07-07T22:44:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4a381ef84795049e53ccfc27eaf9e3cb72f34c5e61e5932e68dbcdc29b57ed81"}