--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"info","ts":"2026-07-06T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bfd97840bc80c848440244f7db61510042a944b21b3e7a701d50c5c2a664893","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bfd97840bc80c848440244f7db61510042a944b21b3e7a701d50c5c2a664893","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:16:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:16:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bfd97840bc80c848440244f7db61510042a944b21b3e7a701d50c5c2a664893","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"159aa4fb83f0559141a7701f058f6ab8e96bb59bc02fabb2103f159c61a5f15a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:16:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:16:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bfd97840bc80c848440244f7db61510042a944b21b3e7a701d50c5c2a664893"}
{"level":"info","ts":"2026-07-06T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"159aa4fb83f0559141a7701f058f6ab8e96bb59bc02fabb2103f159c61a5f15a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bfd97840bc80c848440244f7db61510042a944b21b3e7a701d50c5c2a664893","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:16:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:16:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7bfd97840bc80c848440244f7db61510042a944b21b3e7a701d50c5c2a664893"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/159aa4fb83f0559141a7701f058f6ab8e96bb59bc02fabb2103f159c61a5f15a"}
{"level":"info","ts":"2026-07-06T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bfd97840bc80c848440244f7db61510042a944b21b3e7a701d50c5c2a664893","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"159aa4fb83f0559141a7701f058f6ab8e96bb59bc02fabb2103f159c61a5f15a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:16:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:16:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["159aa4fb83f0559141a7701f058f6ab8e96bb59bc02fabb2103f159c61a5f15a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bfd97840bc80c848440244f7db61510042a944b21b3e7a701d50c5c2a664893"}
{"level":"info","ts":"2026-07-06T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"159aa4fb83f0559141a7701f058f6ab8e96bb59bc02fabb2103f159c61a5f15a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bfd97840bc80c848440244f7db61510042a944b21b3e7a701d50c5c2a664893","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"159aa4fb83f0559141a7701f058f6ab8e96bb59bc02fabb2103f159c61a5f15a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:16:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:16:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/159aa4fb83f0559141a7701f058f6ab8e96bb59bc02fabb2103f159c61a5f15a"}
{"level":"info","ts":"2026-07-06T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"159aa4fb83f0559141a7701f058f6ab8e96bb59bc02fabb2103f159c61a5f15a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"159aa4fb83f0559141a7701f058f6ab8e96bb59bc02fabb2103f159c61a5f15a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:16:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:16:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["159aa4fb83f0559141a7701f058f6ab8e96bb59bc02fabb2103f159c61a5f15a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"159aa4fb83f0559141a7701f058f6ab8e96bb59bc02fabb2103f159c61a5f15a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3826d5edc1636ffee299a493de490e17b1946dcd46b98ecd3eee22d766b4388","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:16:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:16:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bfd97840bc80c848440244f7db61510042a944b21b3e7a701d50c5c2a664893"}
{"level":"info","ts":"2026-07-06T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3826d5edc1636ffee299a493de490e17b1946dcd46b98ecd3eee22d766b4388","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"159aa4fb83f0559141a7701f058f6ab8e96bb59bc02fabb2103f159c61a5f15a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:16:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:16:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/159aa4fb83f0559141a7701f058f6ab8e96bb59bc02fabb2103f159c61a5f15a"}
{"level":"info","ts":"2026-07-06T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"159aa4fb83f0559141a7701f058f6ab8e96bb59bc02fabb2103f159c61a5f15a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3826d5edc1636ffee299a493de490e17b1946dcd46b98ecd3eee22d766b4388","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:16:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:16:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3826d5edc1636ffee299a493de490e17b1946dcd46b98ecd3eee22d766b4388"}
{"level":"info","ts":"2026-07-06T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3826d5edc1636ffee299a493de490e17b1946dcd46b98ecd3eee22d766b4388","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"159aa4fb83f0559141a7701f058f6ab8e96bb59bc02fabb2103f159c61a5f15a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3826d5edc1636ffee299a493de490e17b1946dcd46b98ecd3eee22d766b4388","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:16:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:16:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3826d5edc1636ffee299a493de490e17b1946dcd46b98ecd3eee22d766b4388"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3826d5edc1636ffee299a493de490e17b1946dcd46b98ecd3eee22d766b4388","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"159aa4fb83f0559141a7701f058f6ab8e96bb59bc02fabb2103f159c61a5f15a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3826d5edc1636ffee299a493de490e17b1946dcd46b98ecd3eee22d766b4388","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:16:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:16:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3826d5edc1636ffee299a493de490e17b1946dcd46b98ecd3eee22d766b4388"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/159aa4fb83f0559141a7701f058f6ab8e96bb59bc02fabb2103f159c61a5f15a"}
{"level":"error","ts":"2026-07-06T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f3826d5edc1636ffee299a493de490e17b1946dcd46b98ecd3eee22d766b4388","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f3826d5edc1636ffee299a493de490e17b1946dcd46b98ecd3eee22d766b4388\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3826d5edc1636ffee299a493de490e17b1946dcd46b98ecd3eee22d766b4388","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:16:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:16:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3826d5edc1636ffee299a493de490e17b1946dcd46b98ecd3eee22d766b4388"}
{"level":"info","ts":"2026-07-06T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3826d5edc1636ffee299a493de490e17b1946dcd46b98ecd3eee22d766b4388"}
{"level":"info","ts":"2026-07-06T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3826d5edc1636ffee299a493de490e17b1946dcd46b98ecd3eee22d766b4388","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"159aa4fb83f0559141a7701f058f6ab8e96bb59bc02fabb2103f159c61a5f15a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:16:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:16:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["159aa4fb83f0559141a7701f058f6ab8e96bb59bc02fabb2103f159c61a5f15a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3826d5edc1636ffee299a493de490e17b1946dcd46b98ecd3eee22d766b4388"}
{"level":"info","ts":"2026-07-06T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"159aa4fb83f0559141a7701f058f6ab8e96bb59bc02fabb2103f159c61a5f15a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3826d5edc1636ffee299a493de490e17b1946dcd46b98ecd3eee22d766b4388","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:16:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:16:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3826d5edc1636ffee299a493de490e17b1946dcd46b98ecd3eee22d766b4388"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/159aa4fb83f0559141a7701f058f6ab8e96bb59bc02fabb2103f159c61a5f15a"}
{"level":"info","ts":"2026-07-06T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3826d5edc1636ffee299a493de490e17b1946dcd46b98ecd3eee22d766b4388","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"159aa4fb83f0559141a7701f058f6ab8e96bb59bc02fabb2103f159c61a5f15a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3826d5edc1636ffee299a493de490e17b1946dcd46b98ecd3eee22d766b4388","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:16:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:16:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3826d5edc1636ffee299a493de490e17b1946dcd46b98ecd3eee22d766b4388"}
{"level":"info","ts":"2026-07-06T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3826d5edc1636ffee299a493de490e17b1946dcd46b98ecd3eee22d766b4388","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3826d5edc1636ffee299a493de490e17b1946dcd46b98ecd3eee22d766b4388","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3826d5edc1636ffee299a493de490e17b1946dcd46b98ecd3eee22d766b4388","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3826d5edc1636ffee299a493de490e17b1946dcd46b98ecd3eee22d766b4388","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3826d5edc1636ffee299a493de490e17b1946dcd46b98ecd3eee22d766b4388","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3826d5edc1636ffee299a493de490e17b1946dcd46b98ecd3eee22d766b4388"}
{"level":"debug","ts":"2026-07-06T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3826d5edc1636ffee299a493de490e17b1946dcd46b98ecd3eee22d766b4388","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:16:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:16:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3826d5edc1636ffee299a493de490e17b1946dcd46b98ecd3eee22d766b4388"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3826d5edc1636ffee299a493de490e17b1946dcd46b98ecd3eee22d766b4388","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3826d5edc1636ffee299a493de490e17b1946dcd46b98ecd3eee22d766b4388","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:16:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:16:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3826d5edc1636ffee299a493de490e17b1946dcd46b98ecd3eee22d766b4388"}
{"level":"info","ts":"2026-07-06T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3826d5edc1636ffee299a493de490e17b1946dcd46b98ecd3eee22d766b4388","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3826d5edc1636ffee299a493de490e17b1946dcd46b98ecd3eee22d766b4388","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3826d5edc1636ffee299a493de490e17b1946dcd46b98ecd3eee22d766b4388","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3826d5edc1636ffee299a493de490e17b1946dcd46b98ecd3eee22d766b4388"}
{"level":"debug","ts":"2026-07-06T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3826d5edc1636ffee299a493de490e17b1946dcd46b98ecd3eee22d766b4388","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:16:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:16:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3826d5edc1636ffee299a493de490e17b1946dcd46b98ecd3eee22d766b4388"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3826d5edc1636ffee299a493de490e17b1946dcd46b98ecd3eee22d766b4388","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3826d5edc1636ffee299a493de490e17b1946dcd46b98ecd3eee22d766b4388","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3826d5edc1636ffee299a493de490e17b1946dcd46b98ecd3eee22d766b4388"}
{"level":"info","ts":"2026-07-06T14:16:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d2490d57-7c2a-42f0-b54c-28b9fccbd5c5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:41186","PortSpecifier":{"PortValue":41186}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d2490d57-7c2a-42f0-b54c-28b9fccbd5c5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-inf-a-2beb98.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:16:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d2490d57-7c2a-42f0-b54c-28b9fccbd5c5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:41186","PortSpecifier":{"PortValue":41186}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347379,"nanos":195947843},"http":{"id":"d2490d57-7c2a-42f0-b54c-28b9fccbd5c5","method":"POST","headers":{":authority":"e2e-inf-a-2beb98.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:16:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d2490d57-7c2a-42f0-b54c-28b9fccbd5c5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T14:16:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d2490d57-7c2a-42f0-b54c-28b9fccbd5c5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d17dc60c-8197-471b-964e-fb38f12d85ba","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=23dc5f28-5320-4b77-a7de-8a9f9a6df124"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/eae81554889a"]}}
{"level":"debug","ts":"2026-07-06T14:16:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d2490d57-7c2a-42f0-b54c-28b9fccbd5c5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/eae81554889a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=23dc5f28-5320-4b77-a7de-8a9f9a6df124"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d17dc60c-8197-471b-964e-fb38f12d85ba","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"299ae35a9be8473d79e2ae18de533250eb46cfee933e595e82fdaa7e3c2a6093"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-inf-a-2beb98.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:16:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2490d57-7c2a-42f0-b54c-28b9fccbd5c5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:16:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2490d57-7c2a-42f0-b54c-28b9fccbd5c5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:16:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2490d57-7c2a-42f0-b54c-28b9fccbd5c5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-inf-a-2beb98/test-model-2beb98\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:16:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d2490d57-7c2a-42f0-b54c-28b9fccbd5c5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T14:16:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d2490d57-7c2a-42f0-b54c-28b9fccbd5c5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T14:16:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d2490d57-7c2a-42f0-b54c-28b9fccbd5c5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T14:16:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d2490d57-7c2a-42f0-b54c-28b9fccbd5c5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:16:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d2490d57-7c2a-42f0-b54c-28b9fccbd5c5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:16:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e065a528-9196-46f7-998e-f4457fa90b18","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:41188","PortSpecifier":{"PortValue":41188}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e065a528-9196-46f7-998e-f4457fa90b18","method":"POST","path":"/ai-tenant-e2e-inf-a-2beb98/test-model-2beb98/v1/chat/completions","host":"e2e-inf-a-2beb98.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:16:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e065a528-9196-46f7-998e-f4457fa90b18","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:41188","PortSpecifier":{"PortValue":41188}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347383,"nanos":255453899},"http":{"id":"e065a528-9196-46f7-998e-f4457fa90b18","method":"POST","headers":{":authority":"e2e-inf-a-2beb98.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-inf-a-2beb98/test-model-2beb98/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:16:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e065a528-9196-46f7-998e-f4457fa90b18","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1C33TMyCfUxv3GMEm_uhemRlTlRzS2f55OHdvcKKvj3emU1NL2KjcxipDKuo9"}
{"level":"debug","ts":"2026-07-06T14:16:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e065a528-9196-46f7-998e-f4457fa90b18","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-inf-a-2beb98.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1C33TMyCfUxv3GMEm_uhemRlTlRzS2f55OHdvcKKvj3emU1NL2KjcxipDKuo9\"}"}
{"level":"debug","ts":"2026-07-06T14:16:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e065a528-9196-46f7-998e-f4457fa90b18","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-a-2beb98.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cb7a1bff-927d-40fb-aa0c-a37bbeb16035","keyName":"e2e-tenant-inference-2beb98","subscription":"test-model-2beb98-sub","tenant":"e2e-inf-a-2beb98","userId":"cb7a1bff-927d-40fb-aa0c-a37bbeb16035","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T14:16:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e065a528-9196-46f7-998e-f4457fa90b18","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-inf-a-2beb98.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-inf-a-2beb98/test-model-2beb98\",\"requestedSubscription\":\"test-model-2beb98-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T14:16:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e065a528-9196-46f7-998e-f4457fa90b18","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-a-2beb98.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"test-model-2beb98","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"test-model-2beb98-sub","namespace":"ai-tenant-e2e-inf-a-2beb98","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T14:16:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e065a528-9196-46f7-998e-f4457fa90b18","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:16:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e065a528-9196-46f7-998e-f4457fa90b18","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:16:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e065a528-9196-46f7-998e-f4457fa90b18","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:16:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e065a528-9196-46f7-998e-f4457fa90b18","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-inf-a-2beb98/test-model-2beb98\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:16:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e065a528-9196-46f7-998e-f4457fa90b18","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:16:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e065a528-9196-46f7-998e-f4457fa90b18","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:16:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e065a528-9196-46f7-998e-f4457fa90b18","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T14:16:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e065a528-9196-46f7-998e-f4457fa90b18","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"test-model-2beb98-sub"}
{"level":"debug","ts":"2026-07-06T14:16:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e065a528-9196-46f7-998e-f4457fa90b18","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"cb7a1bff-927d-40fb-aa0c-a37bbeb16035","keyName":"e2e-tenant-inference-2beb98","selected_subscription":"test-model-2beb98-sub","selected_subscription_key":"ai-tenant-e2e-inf-a-2beb98/test-model-2beb98-sub@ai-tenant-e2e-inf-a-2beb98/test-model-2beb98","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"test-model-2beb98","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"test-model-2beb98-sub","namespace":"ai-tenant-e2e-inf-a-2beb98","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T14:16:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e065a528-9196-46f7-998e-f4457fa90b18","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:16:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e065a528-9196-46f7-998e-f4457fa90b18","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:16:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cb9f351b-968f-49d1-9e74-ebc5fc548178","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:41202","PortSpecifier":{"PortValue":41202}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cb9f351b-968f-49d1-9e74-ebc5fc548178","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-inf-a-2beb98.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:16:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cb9f351b-968f-49d1-9e74-ebc5fc548178","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:41202","PortSpecifier":{"PortValue":41202}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347383,"nanos":595938996},"http":{"id":"cb9f351b-968f-49d1-9e74-ebc5fc548178","method":"POST","headers":{":authority":"e2e-inf-a-2beb98.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:16:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cb9f351b-968f-49d1-9e74-ebc5fc548178","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T14:16:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cb9f351b-968f-49d1-9e74-ebc5fc548178","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d17dc60c-8197-471b-964e-fb38f12d85ba","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=23dc5f28-5320-4b77-a7de-8a9f9a6df124"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/eae81554889a"]}}
{"level":"debug","ts":"2026-07-06T14:16:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cb9f351b-968f-49d1-9e74-ebc5fc548178","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/eae81554889a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=23dc5f28-5320-4b77-a7de-8a9f9a6df124"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d17dc60c-8197-471b-964e-fb38f12d85ba","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"299ae35a9be8473d79e2ae18de533250eb46cfee933e595e82fdaa7e3c2a6093"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-inf-a-2beb98.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:16:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb9f351b-968f-49d1-9e74-ebc5fc548178","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:16:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb9f351b-968f-49d1-9e74-ebc5fc548178","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:16:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb9f351b-968f-49d1-9e74-ebc5fc548178","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-inf-a-2beb98/test-model-2beb98\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:16:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cb9f351b-968f-49d1-9e74-ebc5fc548178","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T14:16:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb9f351b-968f-49d1-9e74-ebc5fc548178","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T14:16:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb9f351b-968f-49d1-9e74-ebc5fc548178","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T14:16:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cb9f351b-968f-49d1-9e74-ebc5fc548178","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:16:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cb9f351b-968f-49d1-9e74-ebc5fc548178","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:16:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"32c704ef-18fc-4597-a4f5-3302d8d51a28","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:52938","PortSpecifier":{"PortValue":52938}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"32c704ef-18fc-4597-a4f5-3302d8d51a28","method":"POST","path":"/ai-tenant-e2e-inf-b-53d7c5/test-model-53d7c5/v1/chat/completions","host":"e2e-inf-b-53d7c5.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:16:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"32c704ef-18fc-4597-a4f5-3302d8d51a28","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:52938","PortSpecifier":{"PortValue":52938}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347383,"nanos":630750958},"http":{"id":"32c704ef-18fc-4597-a4f5-3302d8d51a28","method":"POST","headers":{":authority":"e2e-inf-b-53d7c5.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-inf-b-53d7c5/test-model-53d7c5/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:16:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"32c704ef-18fc-4597-a4f5-3302d8d51a28","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-nC9zepJCVOzsIaAd_5tvacvf4dflxX1a7tEwvyqWP0svNZ4UF8kmnhKbsQZH"}
{"level":"debug","ts":"2026-07-06T14:16:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"32c704ef-18fc-4597-a4f5-3302d8d51a28","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-inf-b-53d7c5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-nC9zepJCVOzsIaAd_5tvacvf4dflxX1a7tEwvyqWP0svNZ4UF8kmnhKbsQZH\"}"}
{"level":"debug","ts":"2026-07-06T14:16:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"32c704ef-18fc-4597-a4f5-3302d8d51a28","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-b-53d7c5.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-06T14:16:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"cannot fetch metadata","request id":"32c704ef-18fc-4597-a4f5-3302d8d51a28","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-b-53d7c5.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"reason":"no such key: groups"}
{"level":"debug","ts":"2026-07-06T14:16:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"32c704ef-18fc-4597-a4f5-3302d8d51a28","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"dbb19effc1027f3e584b429f65754e7c4f73fd84ca5f7a5f1917c57c0d96a357"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-inf-b-53d7c5.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-inf-b-53d7c5/test-model-53d7c5/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:16:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"32c704ef-18fc-4597-a4f5-3302d8d51a28","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-06T14:16:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"32c704ef-18fc-4597-a4f5-3302d8d51a28","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-06T14:16:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"32c704ef-18fc-4597-a4f5-3302d8d51a28","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-06T14:16:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ccb6db3e1e8aa06dc226f43bb0ef1643de03156eccb486d364fc9ef6aed196b9"}
{"level":"info","ts":"2026-07-06T14:16:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8d4af1a8c0054d95e467bc0815090c3829d0c95e5d6203213a6c26bb78881fa8"}
{"level":"info","ts":"2026-07-06T14:16:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5447327636f5303c367f91abb06c3aa3682cc3ae17734863f88532eb279577bc"}
{"level":"info","ts":"2026-07-06T14:16:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7bfd97840bc80c848440244f7db61510042a944b21b3e7a701d50c5c2a664893"}
{"level":"info","ts":"2026-07-06T14:16:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/159aa4fb83f0559141a7701f058f6ab8e96bb59bc02fabb2103f159c61a5f15a"}
{"level":"info","ts":"2026-07-06T14:16:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f2fbe607d7a6db4488fb7c7558453754dd7963128ab7649a3c6bc354942ff18b"}
{"level":"info","ts":"2026-07-06T14:16:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9fd77f77383936fd6ea739005cf3ee3ef309ab347c42d4b2d8198477e073124c"}
{"level":"info","ts":"2026-07-06T14:16:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6efee8d41c6f70a6ee0437105e08cd26e34e57e1884b66999afdfa678c29987f"}
{"level":"info","ts":"2026-07-06T14:16:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c92f797a790f296c83f0976854fdd92396e4c485a64289efd5a935cfa7bb7400"}
{"level":"info","ts":"2026-07-06T14:16:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a83d92926a6cfc0e4461a1c210f1a73c4f59b4d8f0a9b702c1af81facba9c235"}
{"level":"info","ts":"2026-07-06T14:16:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/349e2f4c7ddba09af5222486e680fa34d51eda85be02425ba16fc904a6b82508"}
{"level":"info","ts":"2026-07-06T14:16:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f0b401d20d274c3a820352f0fcf61493e7ca7be0a3398a10f1f2fac77990cfe1"}
{"level":"info","ts":"2026-07-06T14:16:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fc9f625e011abfc38be0b89be852a779335745b69f2d26249e211c28930a4aa0"}
{"level":"info","ts":"2026-07-06T14:16:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/299ae35a9be8473d79e2ae18de533250eb46cfee933e595e82fdaa7e3c2a6093"}
{"level":"info","ts":"2026-07-06T14:16:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fcebfa688db10380a2599c1a9b517f62a8e73c519d1e5f3b2ac14d8423939c62"}
{"level":"info","ts":"2026-07-06T14:16:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d13c6cea6959838b7a2b4dee29805056283fb7eb56f41ec5c983c65ac445a04f"}
{"level":"info","ts":"2026-07-06T14:16:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dbb19effc1027f3e584b429f65754e7c4f73fd84ca5f7a5f1917c57c0d96a357"}
{"level":"info","ts":"2026-07-06T14:16:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/32517c8b470c4c77640ad48d8e07e0300fb52c08f0576a0828ecff5025e3ffda"}
{"level":"info","ts":"2026-07-06T14:16:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f3826d5edc1636ffee299a493de490e17b1946dcd46b98ecd3eee22d766b4388"}
{"level":"info","ts":"2026-07-06T14:16:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bed6ce28c5de23a5ff131950ff03759511e20e14e23c6d7a5347e4b968e164f7"}
{"level":"debug","ts":"2026-07-06T14:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86769e46418e60032c52e22da8772b7693fec591f79dc324f98a9665d217167f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:17:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:17:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86769e46418e60032c52e22da8772b7693fec591f79dc324f98a9665d217167f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86769e46418e60032c52e22da8772b7693fec591f79dc324f98a9665d217167f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86769e46418e60032c52e22da8772b7693fec591f79dc324f98a9665d217167f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86769e46418e60032c52e22da8772b7693fec591f79dc324f98a9665d217167f"}
{"level":"debug","ts":"2026-07-06T14:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86769e46418e60032c52e22da8772b7693fec591f79dc324f98a9665d217167f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86769e46418e60032c52e22da8772b7693fec591f79dc324f98a9665d217167f"}
{"level":"debug","ts":"2026-07-06T14:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86769e46418e60032c52e22da8772b7693fec591f79dc324f98a9665d217167f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:17:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:17:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86769e46418e60032c52e22da8772b7693fec591f79dc324f98a9665d217167f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86769e46418e60032c52e22da8772b7693fec591f79dc324f98a9665d217167f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86769e46418e60032c52e22da8772b7693fec591f79dc324f98a9665d217167f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86769e46418e60032c52e22da8772b7693fec591f79dc324f98a9665d217167f"}
{"level":"debug","ts":"2026-07-06T14:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"697a2e1ba9bd080832f12f9b8876d2bd95fd09178c7b47c19012907602600248","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:17:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:17:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/697a2e1ba9bd080832f12f9b8876d2bd95fd09178c7b47c19012907602600248"}
{"level":"info","ts":"2026-07-06T14:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"697a2e1ba9bd080832f12f9b8876d2bd95fd09178c7b47c19012907602600248","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"697a2e1ba9bd080832f12f9b8876d2bd95fd09178c7b47c19012907602600248","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"697a2e1ba9bd080832f12f9b8876d2bd95fd09178c7b47c19012907602600248","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/697a2e1ba9bd080832f12f9b8876d2bd95fd09178c7b47c19012907602600248"}
{"level":"debug","ts":"2026-07-06T14:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"697a2e1ba9bd080832f12f9b8876d2bd95fd09178c7b47c19012907602600248","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:17:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:17:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["697a2e1ba9bd080832f12f9b8876d2bd95fd09178c7b47c19012907602600248"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"697a2e1ba9bd080832f12f9b8876d2bd95fd09178c7b47c19012907602600248","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"697a2e1ba9bd080832f12f9b8876d2bd95fd09178c7b47c19012907602600248","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:17:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:17:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"697a2e1ba9bd080832f12f9b8876d2bd95fd09178c7b47c19012907602600248","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"697a2e1ba9bd080832f12f9b8876d2bd95fd09178c7b47c19012907602600248","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"697a2e1ba9bd080832f12f9b8876d2bd95fd09178c7b47c19012907602600248","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"697a2e1ba9bd080832f12f9b8876d2bd95fd09178c7b47c19012907602600248","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/697a2e1ba9bd080832f12f9b8876d2bd95fd09178c7b47c19012907602600248"}
{"level":"info","ts":"2026-07-06T14:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/697a2e1ba9bd080832f12f9b8876d2bd95fd09178c7b47c19012907602600248"}
{"level":"debug","ts":"2026-07-06T14:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"697a2e1ba9bd080832f12f9b8876d2bd95fd09178c7b47c19012907602600248","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:17:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:17:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["697a2e1ba9bd080832f12f9b8876d2bd95fd09178c7b47c19012907602600248"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"697a2e1ba9bd080832f12f9b8876d2bd95fd09178c7b47c19012907602600248","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"697a2e1ba9bd080832f12f9b8876d2bd95fd09178c7b47c19012907602600248","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:17:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/697a2e1ba9bd080832f12f9b8876d2bd95fd09178c7b47c19012907602600248"}
{"level":"debug","ts":"2026-07-06T14:17:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd5393ad5a68c3091269e7033dcb0414bdc46c2a30c823742cd71533a132b61c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:17:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:17:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd5393ad5a68c3091269e7033dcb0414bdc46c2a30c823742cd71533a132b61c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd5393ad5a68c3091269e7033dcb0414bdc46c2a30c823742cd71533a132b61c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:17:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd5393ad5a68c3091269e7033dcb0414bdc46c2a30c823742cd71533a132b61c"}
{"level":"debug","ts":"2026-07-06T14:17:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd5393ad5a68c3091269e7033dcb0414bdc46c2a30c823742cd71533a132b61c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:17:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd5393ad5a68c3091269e7033dcb0414bdc46c2a30c823742cd71533a132b61c"}
{"level":"debug","ts":"2026-07-06T14:17:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd5393ad5a68c3091269e7033dcb0414bdc46c2a30c823742cd71533a132b61c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:17:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:17:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd5393ad5a68c3091269e7033dcb0414bdc46c2a30c823742cd71533a132b61c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd5393ad5a68c3091269e7033dcb0414bdc46c2a30c823742cd71533a132b61c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd5393ad5a68c3091269e7033dcb0414bdc46c2a30c823742cd71533a132b61c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:17:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:17:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd5393ad5a68c3091269e7033dcb0414bdc46c2a30c823742cd71533a132b61c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd5393ad5a68c3091269e7033dcb0414bdc46c2a30c823742cd71533a132b61c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:17:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd5393ad5a68c3091269e7033dcb0414bdc46c2a30c823742cd71533a132b61c"}
{"level":"debug","ts":"2026-07-06T14:17:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd5393ad5a68c3091269e7033dcb0414bdc46c2a30c823742cd71533a132b61c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:17:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd5393ad5a68c3091269e7033dcb0414bdc46c2a30c823742cd71533a132b61c"}
{"level":"debug","ts":"2026-07-06T14:17:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd5393ad5a68c3091269e7033dcb0414bdc46c2a30c823742cd71533a132b61c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:17:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:17:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd5393ad5a68c3091269e7033dcb0414bdc46c2a30c823742cd71533a132b61c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd5393ad5a68c3091269e7033dcb0414bdc46c2a30c823742cd71533a132b61c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd5393ad5a68c3091269e7033dcb0414bdc46c2a30c823742cd71533a132b61c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:17:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:17:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd5393ad5a68c3091269e7033dcb0414bdc46c2a30c823742cd71533a132b61c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd5393ad5a68c3091269e7033dcb0414bdc46c2a30c823742cd71533a132b61c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd5393ad5a68c3091269e7033dcb0414bdc46c2a30c823742cd71533a132b61c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:17:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd5393ad5a68c3091269e7033dcb0414bdc46c2a30c823742cd71533a132b61c"}
{"level":"debug","ts":"2026-07-06T14:17:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd5393ad5a68c3091269e7033dcb0414bdc46c2a30c823742cd71533a132b61c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:17:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd5393ad5a68c3091269e7033dcb0414bdc46c2a30c823742cd71533a132b61c"}
{"level":"debug","ts":"2026-07-06T14:17:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e4ec74c05a61e99aa5887f780f7749628f00f15b160098997bc41cb05cc9d2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:17:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:17:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e4ec74c05a61e99aa5887f780f7749628f00f15b160098997bc41cb05cc9d2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd5393ad5a68c3091269e7033dcb0414bdc46c2a30c823742cd71533a132b61c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:17:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:17:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd5393ad5a68c3091269e7033dcb0414bdc46c2a30c823742cd71533a132b61c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e4ec74c05a61e99aa5887f780f7749628f00f15b160098997bc41cb05cc9d2d"}
{"level":"info","ts":"2026-07-06T14:17:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd5393ad5a68c3091269e7033dcb0414bdc46c2a30c823742cd71533a132b61c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e4ec74c05a61e99aa5887f780f7749628f00f15b160098997bc41cb05cc9d2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd5393ad5a68c3091269e7033dcb0414bdc46c2a30c823742cd71533a132b61c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e4ec74c05a61e99aa5887f780f7749628f00f15b160098997bc41cb05cc9d2d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:17:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e4ec74c05a61e99aa5887f780f7749628f00f15b160098997bc41cb05cc9d2d"}
{"level":"debug","ts":"2026-07-06T14:17:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e4ec74c05a61e99aa5887f780f7749628f00f15b160098997bc41cb05cc9d2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:17:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:17:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e4ec74c05a61e99aa5887f780f7749628f00f15b160098997bc41cb05cc9d2d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:17:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd5393ad5a68c3091269e7033dcb0414bdc46c2a30c823742cd71533a132b61c"}
{"level":"info","ts":"2026-07-06T14:17:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e4ec74c05a61e99aa5887f780f7749628f00f15b160098997bc41cb05cc9d2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:17:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e4ec74c05a61e99aa5887f780f7749628f00f15b160098997bc41cb05cc9d2d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:17:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e4ec74c05a61e99aa5887f780f7749628f00f15b160098997bc41cb05cc9d2d"}
{"level":"info","ts":"2026-07-06T14:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/697a2e1ba9bd080832f12f9b8876d2bd95fd09178c7b47c19012907602600248"}
{"level":"info","ts":"2026-07-06T14:17:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/86769e46418e60032c52e22da8772b7693fec591f79dc324f98a9665d217167f"}
{"level":"info","ts":"2026-07-06T14:17:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bd5393ad5a68c3091269e7033dcb0414bdc46c2a30c823742cd71533a132b61c"}
{"level":"info","ts":"2026-07-06T14:17:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3e4ec74c05a61e99aa5887f780f7749628f00f15b160098997bc41cb05cc9d2d"}
{"level":"debug","ts":"2026-07-06T14:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea67176e5d459189507e88715fdec9c5d55ea61add0199d1ad35fc487b2721f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:18:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:18:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea67176e5d459189507e88715fdec9c5d55ea61add0199d1ad35fc487b2721f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea67176e5d459189507e88715fdec9c5d55ea61add0199d1ad35fc487b2721f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:18:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:18:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea67176e5d459189507e88715fdec9c5d55ea61add0199d1ad35fc487b2721f7"}
{"level":"info","ts":"2026-07-06T14:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea67176e5d459189507e88715fdec9c5d55ea61add0199d1ad35fc487b2721f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea67176e5d459189507e88715fdec9c5d55ea61add0199d1ad35fc487b2721f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:18:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:18:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T14:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ea67176e5d459189507e88715fdec9c5d55ea61add0199d1ad35fc487b2721f7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ea67176e5d459189507e88715fdec9c5d55ea61add0199d1ad35fc487b2721f7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T14:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea67176e5d459189507e88715fdec9c5d55ea61add0199d1ad35fc487b2721f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea67176e5d459189507e88715fdec9c5d55ea61add0199d1ad35fc487b2721f7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea67176e5d459189507e88715fdec9c5d55ea61add0199d1ad35fc487b2721f7"}
{"level":"info","ts":"2026-07-06T14:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea67176e5d459189507e88715fdec9c5d55ea61add0199d1ad35fc487b2721f7"}
{"level":"debug","ts":"2026-07-06T14:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40481657d05881f625c5b2d044f5b4fb1d9d3ded8084c0fc0e20358b832eb6bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:18:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:18:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40481657d05881f625c5b2d044f5b4fb1d9d3ded8084c0fc0e20358b832eb6bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"903fce85615ba52fd71a8816c33c345d7ba91798213f0526d785d2c3eb296d8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:18:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:18:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40481657d05881f625c5b2d044f5b4fb1d9d3ded8084c0fc0e20358b832eb6bc"}
{"level":"info","ts":"2026-07-06T14:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"903fce85615ba52fd71a8816c33c345d7ba91798213f0526d785d2c3eb296d8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40481657d05881f625c5b2d044f5b4fb1d9d3ded8084c0fc0e20358b832eb6bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:18:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:18:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40481657d05881f625c5b2d044f5b4fb1d9d3ded8084c0fc0e20358b832eb6bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/903fce85615ba52fd71a8816c33c345d7ba91798213f0526d785d2c3eb296d8a"}
{"level":"info","ts":"2026-07-06T14:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40481657d05881f625c5b2d044f5b4fb1d9d3ded8084c0fc0e20358b832eb6bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea67176e5d459189507e88715fdec9c5d55ea61add0199d1ad35fc487b2721f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:18:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:18:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea67176e5d459189507e88715fdec9c5d55ea61add0199d1ad35fc487b2721f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea67176e5d459189507e88715fdec9c5d55ea61add0199d1ad35fc487b2721f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"903fce85615ba52fd71a8816c33c345d7ba91798213f0526d785d2c3eb296d8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:18:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:18:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["903fce85615ba52fd71a8816c33c345d7ba91798213f0526d785d2c3eb296d8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40481657d05881f625c5b2d044f5b4fb1d9d3ded8084c0fc0e20358b832eb6bc"}
{"level":"info","ts":"2026-07-06T14:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"903fce85615ba52fd71a8816c33c345d7ba91798213f0526d785d2c3eb296d8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40481657d05881f625c5b2d044f5b4fb1d9d3ded8084c0fc0e20358b832eb6bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea67176e5d459189507e88715fdec9c5d55ea61add0199d1ad35fc487b2721f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"903fce85615ba52fd71a8816c33c345d7ba91798213f0526d785d2c3eb296d8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:18:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:18:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/903fce85615ba52fd71a8816c33c345d7ba91798213f0526d785d2c3eb296d8a"}
{"level":"info","ts":"2026-07-06T14:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"903fce85615ba52fd71a8816c33c345d7ba91798213f0526d785d2c3eb296d8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"903fce85615ba52fd71a8816c33c345d7ba91798213f0526d785d2c3eb296d8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:18:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:18:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["903fce85615ba52fd71a8816c33c345d7ba91798213f0526d785d2c3eb296d8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"903fce85615ba52fd71a8816c33c345d7ba91798213f0526d785d2c3eb296d8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fd0edf91391b31ac1808713df6cba4c48ae6a40098e36baf4e06db542348cb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:18:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:18:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea67176e5d459189507e88715fdec9c5d55ea61add0199d1ad35fc487b2721f7"}
{"level":"info","ts":"2026-07-06T14:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fd0edf91391b31ac1808713df6cba4c48ae6a40098e36baf4e06db542348cb2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"903fce85615ba52fd71a8816c33c345d7ba91798213f0526d785d2c3eb296d8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9fd0edf91391b31ac1808713df6cba4c48ae6a40098e36baf4e06db542348cb2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9fd0edf91391b31ac1808713df6cba4c48ae6a40098e36baf4e06db542348cb2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40481657d05881f625c5b2d044f5b4fb1d9d3ded8084c0fc0e20358b832eb6bc"}
{"level":"debug","ts":"2026-07-06T14:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9fd0edf91391b31ac1808713df6cba4c48ae6a40098e36baf4e06db542348cb2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/903fce85615ba52fd71a8816c33c345d7ba91798213f0526d785d2c3eb296d8a"}
{"level":"info","ts":"2026-07-06T14:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fd0edf91391b31ac1808713df6cba4c48ae6a40098e36baf4e06db542348cb2"}
{"level":"debug","ts":"2026-07-06T14:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fd0edf91391b31ac1808713df6cba4c48ae6a40098e36baf4e06db542348cb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:18:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:18:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9fd0edf91391b31ac1808713df6cba4c48ae6a40098e36baf4e06db542348cb2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fd0edf91391b31ac1808713df6cba4c48ae6a40098e36baf4e06db542348cb2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9fd0edf91391b31ac1808713df6cba4c48ae6a40098e36baf4e06db542348cb2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fd0edf91391b31ac1808713df6cba4c48ae6a40098e36baf4e06db542348cb2"}
{"level":"debug","ts":"2026-07-06T14:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8927537ec1367dc2b57b8fd81affde0c3fba1904f9a219304268a71e7c91e495","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:18:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:18:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8927537ec1367dc2b57b8fd81affde0c3fba1904f9a219304268a71e7c91e495","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8927537ec1367dc2b57b8fd81affde0c3fba1904f9a219304268a71e7c91e495","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8927537ec1367dc2b57b8fd81affde0c3fba1904f9a219304268a71e7c91e495","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8927537ec1367dc2b57b8fd81affde0c3fba1904f9a219304268a71e7c91e495"}
{"level":"debug","ts":"2026-07-06T14:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8927537ec1367dc2b57b8fd81affde0c3fba1904f9a219304268a71e7c91e495","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8927537ec1367dc2b57b8fd81affde0c3fba1904f9a219304268a71e7c91e495"}
{"level":"debug","ts":"2026-07-06T14:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8927537ec1367dc2b57b8fd81affde0c3fba1904f9a219304268a71e7c91e495","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:18:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:18:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8927537ec1367dc2b57b8fd81affde0c3fba1904f9a219304268a71e7c91e495"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8927537ec1367dc2b57b8fd81affde0c3fba1904f9a219304268a71e7c91e495","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8927537ec1367dc2b57b8fd81affde0c3fba1904f9a219304268a71e7c91e495","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:18:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8927537ec1367dc2b57b8fd81affde0c3fba1904f9a219304268a71e7c91e495"}
{"level":"debug","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1ef8d76e2c1e00dbad92c342f6f8c9745fb06ef0cfa834cd6a600e3f902b745","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:18:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:18:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1ef8d76e2c1e00dbad92c342f6f8c9745fb06ef0cfa834cd6a600e3f902b745","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1ef8d76e2c1e00dbad92c342f6f8c9745fb06ef0cfa834cd6a600e3f902b745","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:18:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:18:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1ef8d76e2c1e00dbad92c342f6f8c9745fb06ef0cfa834cd6a600e3f902b745"}
{"level":"info","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1ef8d76e2c1e00dbad92c342f6f8c9745fb06ef0cfa834cd6a600e3f902b745","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1ef8d76e2c1e00dbad92c342f6f8c9745fb06ef0cfa834cd6a600e3f902b745","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1ef8d76e2c1e00dbad92c342f6f8c9745fb06ef0cfa834cd6a600e3f902b745","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1ef8d76e2c1e00dbad92c342f6f8c9745fb06ef0cfa834cd6a600e3f902b745"}
{"level":"debug","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1ef8d76e2c1e00dbad92c342f6f8c9745fb06ef0cfa834cd6a600e3f902b745","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"782fb61b383c973bc31ce4a197b84230a94454543fec333558323de5e06c80d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:18:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:18:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1ef8d76e2c1e00dbad92c342f6f8c9745fb06ef0cfa834cd6a600e3f902b745"}
{"level":"info","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"782fb61b383c973bc31ce4a197b84230a94454543fec333558323de5e06c80d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"782fb61b383c973bc31ce4a197b84230a94454543fec333558323de5e06c80d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:18:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:18:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/782fb61b383c973bc31ce4a197b84230a94454543fec333558323de5e06c80d5"}
{"level":"info","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"782fb61b383c973bc31ce4a197b84230a94454543fec333558323de5e06c80d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"782fb61b383c973bc31ce4a197b84230a94454543fec333558323de5e06c80d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:18:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:18:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"782fb61b383c973bc31ce4a197b84230a94454543fec333558323de5e06c80d5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"782fb61b383c973bc31ce4a197b84230a94454543fec333558323de5e06c80d5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"782fb61b383c973bc31ce4a197b84230a94454543fec333558323de5e06c80d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"782fb61b383c973bc31ce4a197b84230a94454543fec333558323de5e06c80d5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/782fb61b383c973bc31ce4a197b84230a94454543fec333558323de5e06c80d5"}
{"level":"info","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/782fb61b383c973bc31ce4a197b84230a94454543fec333558323de5e06c80d5"}
{"level":"debug","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1ef8d76e2c1e00dbad92c342f6f8c9745fb06ef0cfa834cd6a600e3f902b745","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:18:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:18:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1ef8d76e2c1e00dbad92c342f6f8c9745fb06ef0cfa834cd6a600e3f902b745"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1ef8d76e2c1e00dbad92c342f6f8c9745fb06ef0cfa834cd6a600e3f902b745","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1ef8d76e2c1e00dbad92c342f6f8c9745fb06ef0cfa834cd6a600e3f902b745","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:18:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:18:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1ef8d76e2c1e00dbad92c342f6f8c9745fb06ef0cfa834cd6a600e3f902b745","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76faf55deae1b057f34620e3be826809dc6aa86486324b6c130693c51076b844","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:18:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:18:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1ef8d76e2c1e00dbad92c342f6f8c9745fb06ef0cfa834cd6a600e3f902b745"}
{"level":"info","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76faf55deae1b057f34620e3be826809dc6aa86486324b6c130693c51076b844","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1ef8d76e2c1e00dbad92c342f6f8c9745fb06ef0cfa834cd6a600e3f902b745","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:18:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:18:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1ef8d76e2c1e00dbad92c342f6f8c9745fb06ef0cfa834cd6a600e3f902b745"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1ef8d76e2c1e00dbad92c342f6f8c9745fb06ef0cfa834cd6a600e3f902b745","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"782fb61b383c973bc31ce4a197b84230a94454543fec333558323de5e06c80d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:18:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:18:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["782fb61b383c973bc31ce4a197b84230a94454543fec333558323de5e06c80d5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76faf55deae1b057f34620e3be826809dc6aa86486324b6c130693c51076b844"}
{"level":"info","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"782fb61b383c973bc31ce4a197b84230a94454543fec333558323de5e06c80d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76faf55deae1b057f34620e3be826809dc6aa86486324b6c130693c51076b844","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:18:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:18:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76faf55deae1b057f34620e3be826809dc6aa86486324b6c130693c51076b844"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1ef8d76e2c1e00dbad92c342f6f8c9745fb06ef0cfa834cd6a600e3f902b745"}
{"level":"info","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76faf55deae1b057f34620e3be826809dc6aa86486324b6c130693c51076b844","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1ef8d76e2c1e00dbad92c342f6f8c9745fb06ef0cfa834cd6a600e3f902b745","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"782fb61b383c973bc31ce4a197b84230a94454543fec333558323de5e06c80d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76faf55deae1b057f34620e3be826809dc6aa86486324b6c130693c51076b844","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:18:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:18:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76faf55deae1b057f34620e3be826809dc6aa86486324b6c130693c51076b844"}
{"level":"info","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76faf55deae1b057f34620e3be826809dc6aa86486324b6c130693c51076b844","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76faf55deae1b057f34620e3be826809dc6aa86486324b6c130693c51076b844","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:18:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:18:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76faf55deae1b057f34620e3be826809dc6aa86486324b6c130693c51076b844"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76faf55deae1b057f34620e3be826809dc6aa86486324b6c130693c51076b844","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a3e431c2fc8a75cf4ac184ae3e6579b32ddf0274564bac6401ae3804cd920b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:18:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:18:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/782fb61b383c973bc31ce4a197b84230a94454543fec333558323de5e06c80d5"}
{"level":"info","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a3e431c2fc8a75cf4ac184ae3e6579b32ddf0274564bac6401ae3804cd920b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76faf55deae1b057f34620e3be826809dc6aa86486324b6c130693c51076b844","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:18:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:18:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76faf55deae1b057f34620e3be826809dc6aa86486324b6c130693c51076b844"}
{"level":"info","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76faf55deae1b057f34620e3be826809dc6aa86486324b6c130693c51076b844","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a3e431c2fc8a75cf4ac184ae3e6579b32ddf0274564bac6401ae3804cd920b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:18:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:18:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a3e431c2fc8a75cf4ac184ae3e6579b32ddf0274564bac6401ae3804cd920b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76faf55deae1b057f34620e3be826809dc6aa86486324b6c130693c51076b844","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:18:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:18:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76faf55deae1b057f34620e3be826809dc6aa86486324b6c130693c51076b844"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a3e431c2fc8a75cf4ac184ae3e6579b32ddf0274564bac6401ae3804cd920b2"}
{"level":"info","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76faf55deae1b057f34620e3be826809dc6aa86486324b6c130693c51076b844","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a3e431c2fc8a75cf4ac184ae3e6579b32ddf0274564bac6401ae3804cd920b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:18:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:18:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a3e431c2fc8a75cf4ac184ae3e6579b32ddf0274564bac6401ae3804cd920b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76faf55deae1b057f34620e3be826809dc6aa86486324b6c130693c51076b844"}
{"level":"info","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a3e431c2fc8a75cf4ac184ae3e6579b32ddf0274564bac6401ae3804cd920b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76faf55deae1b057f34620e3be826809dc6aa86486324b6c130693c51076b844","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a3e431c2fc8a75cf4ac184ae3e6579b32ddf0274564bac6401ae3804cd920b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:18:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:18:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a3e431c2fc8a75cf4ac184ae3e6579b32ddf0274564bac6401ae3804cd920b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a3e431c2fc8a75cf4ac184ae3e6579b32ddf0274564bac6401ae3804cd920b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a3e431c2fc8a75cf4ac184ae3e6579b32ddf0274564bac6401ae3804cd920b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a3e431c2fc8a75cf4ac184ae3e6579b32ddf0274564bac6401ae3804cd920b2"}
{"level":"debug","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb72849962de26db3cdd783509124325435d1fdf16cfebe7859da157213c6a53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:18:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:18:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb72849962de26db3cdd783509124325435d1fdf16cfebe7859da157213c6a53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb72849962de26db3cdd783509124325435d1fdf16cfebe7859da157213c6a53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a3e431c2fc8a75cf4ac184ae3e6579b32ddf0274564bac6401ae3804cd920b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:18:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:18:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a3e431c2fc8a75cf4ac184ae3e6579b32ddf0274564bac6401ae3804cd920b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76faf55deae1b057f34620e3be826809dc6aa86486324b6c130693c51076b844"}
{"level":"info","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a3e431c2fc8a75cf4ac184ae3e6579b32ddf0274564bac6401ae3804cd920b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb72849962de26db3cdd783509124325435d1fdf16cfebe7859da157213c6a53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a3e431c2fc8a75cf4ac184ae3e6579b32ddf0274564bac6401ae3804cd920b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:18:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:18:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a3e431c2fc8a75cf4ac184ae3e6579b32ddf0274564bac6401ae3804cd920b2"}
{"level":"info","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a3e431c2fc8a75cf4ac184ae3e6579b32ddf0274564bac6401ae3804cd920b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a3e431c2fc8a75cf4ac184ae3e6579b32ddf0274564bac6401ae3804cd920b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:18:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:18:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a3e431c2fc8a75cf4ac184ae3e6579b32ddf0274564bac6401ae3804cd920b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a3e431c2fc8a75cf4ac184ae3e6579b32ddf0274564bac6401ae3804cd920b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb72849962de26db3cdd783509124325435d1fdf16cfebe7859da157213c6a53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:18:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:18:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb72849962de26db3cdd783509124325435d1fdf16cfebe7859da157213c6a53"}
{"level":"info","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb72849962de26db3cdd783509124325435d1fdf16cfebe7859da157213c6a53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a3e431c2fc8a75cf4ac184ae3e6579b32ddf0274564bac6401ae3804cd920b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:18:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:18:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a3e431c2fc8a75cf4ac184ae3e6579b32ddf0274564bac6401ae3804cd920b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb72849962de26db3cdd783509124325435d1fdf16cfebe7859da157213c6a53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:18:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:18:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb72849962de26db3cdd783509124325435d1fdf16cfebe7859da157213c6a53"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a3e431c2fc8a75cf4ac184ae3e6579b32ddf0274564bac6401ae3804cd920b2"}
{"level":"info","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb72849962de26db3cdd783509124325435d1fdf16cfebe7859da157213c6a53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a3e431c2fc8a75cf4ac184ae3e6579b32ddf0274564bac6401ae3804cd920b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:18:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:18:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a3e431c2fc8a75cf4ac184ae3e6579b32ddf0274564bac6401ae3804cd920b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb72849962de26db3cdd783509124325435d1fdf16cfebe7859da157213c6a53"}
{"level":"info","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a3e431c2fc8a75cf4ac184ae3e6579b32ddf0274564bac6401ae3804cd920b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb72849962de26db3cdd783509124325435d1fdf16cfebe7859da157213c6a53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a3e431c2fc8a75cf4ac184ae3e6579b32ddf0274564bac6401ae3804cd920b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:18:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:18:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a3e431c2fc8a75cf4ac184ae3e6579b32ddf0274564bac6401ae3804cd920b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a3e431c2fc8a75cf4ac184ae3e6579b32ddf0274564bac6401ae3804cd920b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a3e431c2fc8a75cf4ac184ae3e6579b32ddf0274564bac6401ae3804cd920b2"}
{"level":"debug","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a3e431c2fc8a75cf4ac184ae3e6579b32ddf0274564bac6401ae3804cd920b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:18:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:18:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a3e431c2fc8a75cf4ac184ae3e6579b32ddf0274564bac6401ae3804cd920b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a3e431c2fc8a75cf4ac184ae3e6579b32ddf0274564bac6401ae3804cd920b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a3e431c2fc8a75cf4ac184ae3e6579b32ddf0274564bac6401ae3804cd920b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb72849962de26db3cdd783509124325435d1fdf16cfebe7859da157213c6a53"}
{"level":"info","ts":"2026-07-06T14:18:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a3e431c2fc8a75cf4ac184ae3e6579b32ddf0274564bac6401ae3804cd920b2"}
{"level":"debug","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45c8c63236664d0bb0db43585254660f6a2ae7328e716d3c030339a7704a81ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45c8c63236664d0bb0db43585254660f6a2ae7328e716d3c030339a7704a81ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45c8c63236664d0bb0db43585254660f6a2ae7328e716d3c030339a7704a81ff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45c8c63236664d0bb0db43585254660f6a2ae7328e716d3c030339a7704a81ff"}
{"level":"debug","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45c8c63236664d0bb0db43585254660f6a2ae7328e716d3c030339a7704a81ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45c8c63236664d0bb0db43585254660f6a2ae7328e716d3c030339a7704a81ff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45c8c63236664d0bb0db43585254660f6a2ae7328e716d3c030339a7704a81ff"}
{"level":"debug","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45c8c63236664d0bb0db43585254660f6a2ae7328e716d3c030339a7704a81ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["45c8c63236664d0bb0db43585254660f6a2ae7328e716d3c030339a7704a81ff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45c8c63236664d0bb0db43585254660f6a2ae7328e716d3c030339a7704a81ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0d6c75b082ca230c2f2448c1064cd4b0f55c75b01cea49b2784e553a5c91312","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0d6c75b082ca230c2f2448c1064cd4b0f55c75b01cea49b2784e553a5c91312","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45c8c63236664d0bb0db43585254660f6a2ae7328e716d3c030339a7704a81ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0d6c75b082ca230c2f2448c1064cd4b0f55c75b01cea49b2784e553a5c91312","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0d6c75b082ca230c2f2448c1064cd4b0f55c75b01cea49b2784e553a5c91312","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0d6c75b082ca230c2f2448c1064cd4b0f55c75b01cea49b2784e553a5c91312"}
{"level":"debug","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0d6c75b082ca230c2f2448c1064cd4b0f55c75b01cea49b2784e553a5c91312","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e0d6c75b082ca230c2f2448c1064cd4b0f55c75b01cea49b2784e553a5c91312"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45c8c63236664d0bb0db43585254660f6a2ae7328e716d3c030339a7704a81ff"}
{"level":"info","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0d6c75b082ca230c2f2448c1064cd4b0f55c75b01cea49b2784e553a5c91312","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0d6c75b082ca230c2f2448c1064cd4b0f55c75b01cea49b2784e553a5c91312","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0d6c75b082ca230c2f2448c1064cd4b0f55c75b01cea49b2784e553a5c91312"}
{"level":"info","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0d6c75b082ca230c2f2448c1064cd4b0f55c75b01cea49b2784e553a5c91312","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0d6c75b082ca230c2f2448c1064cd4b0f55c75b01cea49b2784e553a5c91312","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0d6c75b082ca230c2f2448c1064cd4b0f55c75b01cea49b2784e553a5c91312","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0d6c75b082ca230c2f2448c1064cd4b0f55c75b01cea49b2784e553a5c91312"}
{"level":"debug","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0d6c75b082ca230c2f2448c1064cd4b0f55c75b01cea49b2784e553a5c91312","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf38e6097a654408e0ae46748173c0707b2c18b22f336818ea0e9ef56b3585f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0d6c75b082ca230c2f2448c1064cd4b0f55c75b01cea49b2784e553a5c91312"}
{"level":"info","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf38e6097a654408e0ae46748173c0707b2c18b22f336818ea0e9ef56b3585f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf38e6097a654408e0ae46748173c0707b2c18b22f336818ea0e9ef56b3585f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf38e6097a654408e0ae46748173c0707b2c18b22f336818ea0e9ef56b3585f5"}
{"level":"info","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf38e6097a654408e0ae46748173c0707b2c18b22f336818ea0e9ef56b3585f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf38e6097a654408e0ae46748173c0707b2c18b22f336818ea0e9ef56b3585f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"bf38e6097a654408e0ae46748173c0707b2c18b22f336818ea0e9ef56b3585f5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"bf38e6097a654408e0ae46748173c0707b2c18b22f336818ea0e9ef56b3585f5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0d6c75b082ca230c2f2448c1064cd4b0f55c75b01cea49b2784e553a5c91312","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e0d6c75b082ca230c2f2448c1064cd4b0f55c75b01cea49b2784e553a5c91312"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf38e6097a654408e0ae46748173c0707b2c18b22f336818ea0e9ef56b3585f5"}
{"level":"info","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0d6c75b082ca230c2f2448c1064cd4b0f55c75b01cea49b2784e553a5c91312","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf38e6097a654408e0ae46748173c0707b2c18b22f336818ea0e9ef56b3585f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0d6c75b082ca230c2f2448c1064cd4b0f55c75b01cea49b2784e553a5c91312","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf38e6097a654408e0ae46748173c0707b2c18b22f336818ea0e9ef56b3585f5"}
{"level":"info","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0d6c75b082ca230c2f2448c1064cd4b0f55c75b01cea49b2784e553a5c91312"}
{"level":"debug","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf38e6097a654408e0ae46748173c0707b2c18b22f336818ea0e9ef56b3585f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bf38e6097a654408e0ae46748173c0707b2c18b22f336818ea0e9ef56b3585f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf38e6097a654408e0ae46748173c0707b2c18b22f336818ea0e9ef56b3585f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82c8d0953fcce339afc254237c7e37ebcbf52a41f9bc01c2734c2441b92378f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82c8d0953fcce339afc254237c7e37ebcbf52a41f9bc01c2734c2441b92378f6"}
{"level":"info","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82c8d0953fcce339afc254237c7e37ebcbf52a41f9bc01c2734c2441b92378f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"793a96fb3fa58c1104c473073ca3a2715ce033d0ac0694733a154a6b0d1ba356","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"793a96fb3fa58c1104c473073ca3a2715ce033d0ac0694733a154a6b0d1ba356","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf38e6097a654408e0ae46748173c0707b2c18b22f336818ea0e9ef56b3585f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82c8d0953fcce339afc254237c7e37ebcbf52a41f9bc01c2734c2441b92378f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["82c8d0953fcce339afc254237c7e37ebcbf52a41f9bc01c2734c2441b92378f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82c8d0953fcce339afc254237c7e37ebcbf52a41f9bc01c2734c2441b92378f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"793a96fb3fa58c1104c473073ca3a2715ce033d0ac0694733a154a6b0d1ba356","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82c8d0953fcce339afc254237c7e37ebcbf52a41f9bc01c2734c2441b92378f6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/793a96fb3fa58c1104c473073ca3a2715ce033d0ac0694733a154a6b0d1ba356"}
{"level":"debug","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"793a96fb3fa58c1104c473073ca3a2715ce033d0ac0694733a154a6b0d1ba356","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["793a96fb3fa58c1104c473073ca3a2715ce033d0ac0694733a154a6b0d1ba356"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"793a96fb3fa58c1104c473073ca3a2715ce033d0ac0694733a154a6b0d1ba356","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf38e6097a654408e0ae46748173c0707b2c18b22f336818ea0e9ef56b3585f5"}
{"level":"debug","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"793a96fb3fa58c1104c473073ca3a2715ce033d0ac0694733a154a6b0d1ba356","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82c8d0953fcce339afc254237c7e37ebcbf52a41f9bc01c2734c2441b92378f6"}
{"level":"info","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/793a96fb3fa58c1104c473073ca3a2715ce033d0ac0694733a154a6b0d1ba356"}
{"level":"debug","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df738aa9e5013970406df552c976719d9d51e3016178d40ccfa9725effbaeed8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df738aa9e5013970406df552c976719d9d51e3016178d40ccfa9725effbaeed8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a70ca8171eee7a4e2f537c89c2ff3fd57954a2774116fe904ff8673de0f77a96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df738aa9e5013970406df552c976719d9d51e3016178d40ccfa9725effbaeed8"}
{"level":"info","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a70ca8171eee7a4e2f537c89c2ff3fd57954a2774116fe904ff8673de0f77a96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df738aa9e5013970406df552c976719d9d51e3016178d40ccfa9725effbaeed8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df738aa9e5013970406df552c976719d9d51e3016178d40ccfa9725effbaeed8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df738aa9e5013970406df552c976719d9d51e3016178d40ccfa9725effbaeed8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a70ca8171eee7a4e2f537c89c2ff3fd57954a2774116fe904ff8673de0f77a96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a70ca8171eee7a4e2f537c89c2ff3fd57954a2774116fe904ff8673de0f77a96"}
{"level":"info","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a70ca8171eee7a4e2f537c89c2ff3fd57954a2774116fe904ff8673de0f77a96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df738aa9e5013970406df552c976719d9d51e3016178d40ccfa9725effbaeed8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df738aa9e5013970406df552c976719d9d51e3016178d40ccfa9725effbaeed8"}
{"level":"info","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df738aa9e5013970406df552c976719d9d51e3016178d40ccfa9725effbaeed8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a70ca8171eee7a4e2f537c89c2ff3fd57954a2774116fe904ff8673de0f77a96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df738aa9e5013970406df552c976719d9d51e3016178d40ccfa9725effbaeed8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df738aa9e5013970406df552c976719d9d51e3016178d40ccfa9725effbaeed8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df738aa9e5013970406df552c976719d9d51e3016178d40ccfa9725effbaeed8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df738aa9e5013970406df552c976719d9d51e3016178d40ccfa9725effbaeed8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df738aa9e5013970406df552c976719d9d51e3016178d40ccfa9725effbaeed8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a70ca8171eee7a4e2f537c89c2ff3fd57954a2774116fe904ff8673de0f77a96"}
{"level":"error","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"df738aa9e5013970406df552c976719d9d51e3016178d40ccfa9725effbaeed8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"df738aa9e5013970406df552c976719d9d51e3016178d40ccfa9725effbaeed8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a70ca8171eee7a4e2f537c89c2ff3fd57954a2774116fe904ff8673de0f77a96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a70ca8171eee7a4e2f537c89c2ff3fd57954a2774116fe904ff8673de0f77a96"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a70ca8171eee7a4e2f537c89c2ff3fd57954a2774116fe904ff8673de0f77a96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df738aa9e5013970406df552c976719d9d51e3016178d40ccfa9725effbaeed8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df738aa9e5013970406df552c976719d9d51e3016178d40ccfa9725effbaeed8"}
{"level":"info","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df738aa9e5013970406df552c976719d9d51e3016178d40ccfa9725effbaeed8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a70ca8171eee7a4e2f537c89c2ff3fd57954a2774116fe904ff8673de0f77a96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a70ca8171eee7a4e2f537c89c2ff3fd57954a2774116fe904ff8673de0f77a96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af30e5efd27af52ce48e68817bce6b286c000b6b1794192b8b6cabbeb96bc748","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a70ca8171eee7a4e2f537c89c2ff3fd57954a2774116fe904ff8673de0f77a96"}
{"level":"info","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af30e5efd27af52ce48e68817bce6b286c000b6b1794192b8b6cabbeb96bc748","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df738aa9e5013970406df552c976719d9d51e3016178d40ccfa9725effbaeed8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df738aa9e5013970406df552c976719d9d51e3016178d40ccfa9725effbaeed8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df738aa9e5013970406df552c976719d9d51e3016178d40ccfa9725effbaeed8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a70ca8171eee7a4e2f537c89c2ff3fd57954a2774116fe904ff8673de0f77a96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a70ca8171eee7a4e2f537c89c2ff3fd57954a2774116fe904ff8673de0f77a96"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af30e5efd27af52ce48e68817bce6b286c000b6b1794192b8b6cabbeb96bc748"}
{"level":"info","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a70ca8171eee7a4e2f537c89c2ff3fd57954a2774116fe904ff8673de0f77a96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af30e5efd27af52ce48e68817bce6b286c000b6b1794192b8b6cabbeb96bc748","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af30e5efd27af52ce48e68817bce6b286c000b6b1794192b8b6cabbeb96bc748"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af30e5efd27af52ce48e68817bce6b286c000b6b1794192b8b6cabbeb96bc748","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df738aa9e5013970406df552c976719d9d51e3016178d40ccfa9725effbaeed8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df738aa9e5013970406df552c976719d9d51e3016178d40ccfa9725effbaeed8"}
{"level":"info","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df738aa9e5013970406df552c976719d9d51e3016178d40ccfa9725effbaeed8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a70ca8171eee7a4e2f537c89c2ff3fd57954a2774116fe904ff8673de0f77a96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a70ca8171eee7a4e2f537c89c2ff3fd57954a2774116fe904ff8673de0f77a96"}
{"level":"info","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a70ca8171eee7a4e2f537c89c2ff3fd57954a2774116fe904ff8673de0f77a96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af30e5efd27af52ce48e68817bce6b286c000b6b1794192b8b6cabbeb96bc748","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af30e5efd27af52ce48e68817bce6b286c000b6b1794192b8b6cabbeb96bc748","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df738aa9e5013970406df552c976719d9d51e3016178d40ccfa9725effbaeed8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df738aa9e5013970406df552c976719d9d51e3016178d40ccfa9725effbaeed8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af30e5efd27af52ce48e68817bce6b286c000b6b1794192b8b6cabbeb96bc748"}
{"level":"info","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df738aa9e5013970406df552c976719d9d51e3016178d40ccfa9725effbaeed8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a70ca8171eee7a4e2f537c89c2ff3fd57954a2774116fe904ff8673de0f77a96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a70ca8171eee7a4e2f537c89c2ff3fd57954a2774116fe904ff8673de0f77a96"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a70ca8171eee7a4e2f537c89c2ff3fd57954a2774116fe904ff8673de0f77a96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af30e5efd27af52ce48e68817bce6b286c000b6b1794192b8b6cabbeb96bc748","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af30e5efd27af52ce48e68817bce6b286c000b6b1794192b8b6cabbeb96bc748"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df738aa9e5013970406df552c976719d9d51e3016178d40ccfa9725effbaeed8"}
{"level":"info","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af30e5efd27af52ce48e68817bce6b286c000b6b1794192b8b6cabbeb96bc748","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df738aa9e5013970406df552c976719d9d51e3016178d40ccfa9725effbaeed8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a70ca8171eee7a4e2f537c89c2ff3fd57954a2774116fe904ff8673de0f77a96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a70ca8171eee7a4e2f537c89c2ff3fd57954a2774116fe904ff8673de0f77a96"}
{"level":"info","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a70ca8171eee7a4e2f537c89c2ff3fd57954a2774116fe904ff8673de0f77a96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af30e5efd27af52ce48e68817bce6b286c000b6b1794192b8b6cabbeb96bc748","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af30e5efd27af52ce48e68817bce6b286c000b6b1794192b8b6cabbeb96bc748","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a70ca8171eee7a4e2f537c89c2ff3fd57954a2774116fe904ff8673de0f77a96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a70ca8171eee7a4e2f537c89c2ff3fd57954a2774116fe904ff8673de0f77a96"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af30e5efd27af52ce48e68817bce6b286c000b6b1794192b8b6cabbeb96bc748"}
{"level":"info","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a70ca8171eee7a4e2f537c89c2ff3fd57954a2774116fe904ff8673de0f77a96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af30e5efd27af52ce48e68817bce6b286c000b6b1794192b8b6cabbeb96bc748","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af30e5efd27af52ce48e68817bce6b286c000b6b1794192b8b6cabbeb96bc748"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df738aa9e5013970406df552c976719d9d51e3016178d40ccfa9725effbaeed8"}
{"level":"info","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af30e5efd27af52ce48e68817bce6b286c000b6b1794192b8b6cabbeb96bc748","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea9f1e8cbf4d6a6bcc37a205a03e6e248ddc251368ce6dec04cb0bb8ccb71a70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea9f1e8cbf4d6a6bcc37a205a03e6e248ddc251368ce6dec04cb0bb8ccb71a70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a70ca8171eee7a4e2f537c89c2ff3fd57954a2774116fe904ff8673de0f77a96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a70ca8171eee7a4e2f537c89c2ff3fd57954a2774116fe904ff8673de0f77a96"}
{"level":"info","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a70ca8171eee7a4e2f537c89c2ff3fd57954a2774116fe904ff8673de0f77a96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af30e5efd27af52ce48e68817bce6b286c000b6b1794192b8b6cabbeb96bc748","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af30e5efd27af52ce48e68817bce6b286c000b6b1794192b8b6cabbeb96bc748","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea9f1e8cbf4d6a6bcc37a205a03e6e248ddc251368ce6dec04cb0bb8ccb71a70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a70ca8171eee7a4e2f537c89c2ff3fd57954a2774116fe904ff8673de0f77a96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a70ca8171eee7a4e2f537c89c2ff3fd57954a2774116fe904ff8673de0f77a96"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af30e5efd27af52ce48e68817bce6b286c000b6b1794192b8b6cabbeb96bc748"}
{"level":"info","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a70ca8171eee7a4e2f537c89c2ff3fd57954a2774116fe904ff8673de0f77a96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af30e5efd27af52ce48e68817bce6b286c000b6b1794192b8b6cabbeb96bc748","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af30e5efd27af52ce48e68817bce6b286c000b6b1794192b8b6cabbeb96bc748"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea9f1e8cbf4d6a6bcc37a205a03e6e248ddc251368ce6dec04cb0bb8ccb71a70"}
{"level":"info","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af30e5efd27af52ce48e68817bce6b286c000b6b1794192b8b6cabbeb96bc748","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea9f1e8cbf4d6a6bcc37a205a03e6e248ddc251368ce6dec04cb0bb8ccb71a70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea9f1e8cbf4d6a6bcc37a205a03e6e248ddc251368ce6dec04cb0bb8ccb71a70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea9f1e8cbf4d6a6bcc37a205a03e6e248ddc251368ce6dec04cb0bb8ccb71a70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a70ca8171eee7a4e2f537c89c2ff3fd57954a2774116fe904ff8673de0f77a96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a70ca8171eee7a4e2f537c89c2ff3fd57954a2774116fe904ff8673de0f77a96"}
{"level":"info","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a70ca8171eee7a4e2f537c89c2ff3fd57954a2774116fe904ff8673de0f77a96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af30e5efd27af52ce48e68817bce6b286c000b6b1794192b8b6cabbeb96bc748","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af30e5efd27af52ce48e68817bce6b286c000b6b1794192b8b6cabbeb96bc748","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea9f1e8cbf4d6a6bcc37a205a03e6e248ddc251368ce6dec04cb0bb8ccb71a70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53533881dbd9be405199244deb6469bdd593cad320b08de227bee899c722d2a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af30e5efd27af52ce48e68817bce6b286c000b6b1794192b8b6cabbeb96bc748"}
{"level":"info","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53533881dbd9be405199244deb6469bdd593cad320b08de227bee899c722d2a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a70ca8171eee7a4e2f537c89c2ff3fd57954a2774116fe904ff8673de0f77a96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a70ca8171eee7a4e2f537c89c2ff3fd57954a2774116fe904ff8673de0f77a96"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea9f1e8cbf4d6a6bcc37a205a03e6e248ddc251368ce6dec04cb0bb8ccb71a70"}
{"level":"info","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a70ca8171eee7a4e2f537c89c2ff3fd57954a2774116fe904ff8673de0f77a96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af30e5efd27af52ce48e68817bce6b286c000b6b1794192b8b6cabbeb96bc748","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:18:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af30e5efd27af52ce48e68817bce6b286c000b6b1794192b8b6cabbeb96bc748"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53533881dbd9be405199244deb6469bdd593cad320b08de227bee899c722d2a4"}
{"level":"info","ts":"2026-07-06T14:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a70ca8171eee7a4e2f537c89c2ff3fd57954a2774116fe904ff8673de0f77a96"}
{"level":"info","ts":"2026-07-06T14:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af30e5efd27af52ce48e68817bce6b286c000b6b1794192b8b6cabbeb96bc748","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53533881dbd9be405199244deb6469bdd593cad320b08de227bee899c722d2a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:18:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:18:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53533881dbd9be405199244deb6469bdd593cad320b08de227bee899c722d2a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af30e5efd27af52ce48e68817bce6b286c000b6b1794192b8b6cabbeb96bc748"}
{"level":"info","ts":"2026-07-06T14:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af30e5efd27af52ce48e68817bce6b286c000b6b1794192b8b6cabbeb96bc748"}
{"level":"info","ts":"2026-07-06T14:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53533881dbd9be405199244deb6469bdd593cad320b08de227bee899c722d2a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a70ca8171eee7a4e2f537c89c2ff3fd57954a2774116fe904ff8673de0f77a96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af30e5efd27af52ce48e68817bce6b286c000b6b1794192b8b6cabbeb96bc748","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53533881dbd9be405199244deb6469bdd593cad320b08de227bee899c722d2a4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53533881dbd9be405199244deb6469bdd593cad320b08de227bee899c722d2a4"}
{"level":"info","ts":"2026-07-06T14:19:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a3d2e754-d87e-4ed0-aff9-a19ffc80f752","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:51750","PortSpecifier":{"PortValue":51750}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a3d2e754-d87e-4ed0-aff9-a19ffc80f752","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0ba2b8.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:19:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a3d2e754-d87e-4ed0-aff9-a19ffc80f752","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:51750","PortSpecifier":{"PortValue":51750}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347541,"nanos":512328174},"http":{"id":"a3d2e754-d87e-4ed0-aff9-a19ffc80f752","method":"POST","headers":{":authority":"e2e-shared-a-0ba2b8.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:19:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a3d2e754-d87e-4ed0-aff9-a19ffc80f752","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T14:19:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a3d2e754-d87e-4ed0-aff9-a19ffc80f752","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d17dc60c-8197-471b-964e-fb38f12d85ba","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=23dc5f28-5320-4b77-a7de-8a9f9a6df124"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/eae81554889a"]}}
{"level":"debug","ts":"2026-07-06T14:19:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a3d2e754-d87e-4ed0-aff9-a19ffc80f752","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/eae81554889a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=23dc5f28-5320-4b77-a7de-8a9f9a6df124"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d17dc60c-8197-471b-964e-fb38f12d85ba","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"76faf55deae1b057f34620e3be826809dc6aa86486324b6c130693c51076b844"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0ba2b8.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:19:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a3d2e754-d87e-4ed0-aff9-a19ffc80f752","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:19:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a3d2e754-d87e-4ed0-aff9-a19ffc80f752","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:19:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a3d2e754-d87e-4ed0-aff9-a19ffc80f752","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0ba2b8/auth-test-model-0ba2b8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:19:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a3d2e754-d87e-4ed0-aff9-a19ffc80f752","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T14:19:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a3d2e754-d87e-4ed0-aff9-a19ffc80f752","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:19:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a3d2e754-d87e-4ed0-aff9-a19ffc80f752","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T14:19:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a3d2e754-d87e-4ed0-aff9-a19ffc80f752","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:19:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a3d2e754-d87e-4ed0-aff9-a19ffc80f752","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:19:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2d19aee8-2344-47c8-bbac-6eefa9820092","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:60466","PortSpecifier":{"PortValue":60466}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2d19aee8-2344-47c8-bbac-6eefa9820092","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-74bb89.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:19:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2d19aee8-2344-47c8-bbac-6eefa9820092","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:60466","PortSpecifier":{"PortValue":60466}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347541,"nanos":569335216},"http":{"id":"2d19aee8-2344-47c8-bbac-6eefa9820092","method":"POST","headers":{":authority":"e2e-shared-b-74bb89.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:19:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2d19aee8-2344-47c8-bbac-6eefa9820092","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T14:19:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2d19aee8-2344-47c8-bbac-6eefa9820092","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d17dc60c-8197-471b-964e-fb38f12d85ba","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=23dc5f28-5320-4b77-a7de-8a9f9a6df124"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/eae81554889a"]}}
{"level":"debug","ts":"2026-07-06T14:19:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2d19aee8-2344-47c8-bbac-6eefa9820092","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/eae81554889a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=23dc5f28-5320-4b77-a7de-8a9f9a6df124"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d17dc60c-8197-471b-964e-fb38f12d85ba","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bf38e6097a654408e0ae46748173c0707b2c18b22f336818ea0e9ef56b3585f5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-74bb89.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:19:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d19aee8-2344-47c8-bbac-6eefa9820092","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:19:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d19aee8-2344-47c8-bbac-6eefa9820092","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:19:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d19aee8-2344-47c8-bbac-6eefa9820092","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-74bb89/auth-test-model-74bb89\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:19:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2d19aee8-2344-47c8-bbac-6eefa9820092","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T14:19:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2d19aee8-2344-47c8-bbac-6eefa9820092","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T14:19:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2d19aee8-2344-47c8-bbac-6eefa9820092","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T14:19:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2d19aee8-2344-47c8-bbac-6eefa9820092","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:19:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2d19aee8-2344-47c8-bbac-6eefa9820092","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:19:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ef9dfbc0-dde6-4e49-933a-ff5b24e324d4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:51756","PortSpecifier":{"PortValue":51756}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ef9dfbc0-dde6-4e49-933a-ff5b24e324d4","method":"GET","path":"/maas-api/v1/api-keys/688c696e-60dd-4e28-93f8-1e4553a36440","host":"e2e-shared-a-0ba2b8.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:19:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ef9dfbc0-dde6-4e49-933a-ff5b24e324d4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:51756","PortSpecifier":{"PortValue":51756}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347541,"nanos":653091812},"http":{"id":"ef9dfbc0-dde6-4e49-933a-ff5b24e324d4","method":"GET","headers":{":authority":"e2e-shared-a-0ba2b8.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/688c696e-60dd-4e28-93f8-1e4553a36440",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:19:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ef9dfbc0-dde6-4e49-933a-ff5b24e324d4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T14:19:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ef9dfbc0-dde6-4e49-933a-ff5b24e324d4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d17dc60c-8197-471b-964e-fb38f12d85ba","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=23dc5f28-5320-4b77-a7de-8a9f9a6df124"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/eae81554889a"]}}
{"level":"debug","ts":"2026-07-06T14:19:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ef9dfbc0-dde6-4e49-933a-ff5b24e324d4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/eae81554889a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=23dc5f28-5320-4b77-a7de-8a9f9a6df124"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d17dc60c-8197-471b-964e-fb38f12d85ba","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"76faf55deae1b057f34620e3be826809dc6aa86486324b6c130693c51076b844"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0ba2b8.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/688c696e-60dd-4e28-93f8-1e4553a36440",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:19:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef9dfbc0-dde6-4e49-933a-ff5b24e324d4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:19:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef9dfbc0-dde6-4e49-933a-ff5b24e324d4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:19:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef9dfbc0-dde6-4e49-933a-ff5b24e324d4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0ba2b8/auth-test-model-0ba2b8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:19:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ef9dfbc0-dde6-4e49-933a-ff5b24e324d4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T14:19:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef9dfbc0-dde6-4e49-933a-ff5b24e324d4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:19:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef9dfbc0-dde6-4e49-933a-ff5b24e324d4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T14:19:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ef9dfbc0-dde6-4e49-933a-ff5b24e324d4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:19:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ef9dfbc0-dde6-4e49-933a-ff5b24e324d4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:19:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"682fd4cd-21b5-4652-bb7b-8c652ad20ca0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:60470","PortSpecifier":{"PortValue":60470}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"682fd4cd-21b5-4652-bb7b-8c652ad20ca0","method":"GET","path":"/maas-api/v1/api-keys/b314f1fa-dea4-45ca-a831-4cced1a31965","host":"e2e-shared-b-74bb89.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:19:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"682fd4cd-21b5-4652-bb7b-8c652ad20ca0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:60470","PortSpecifier":{"PortValue":60470}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347541,"nanos":686179549},"http":{"id":"682fd4cd-21b5-4652-bb7b-8c652ad20ca0","method":"GET","headers":{":authority":"e2e-shared-b-74bb89.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/b314f1fa-dea4-45ca-a831-4cced1a31965",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:19:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"682fd4cd-21b5-4652-bb7b-8c652ad20ca0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T14:19:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"682fd4cd-21b5-4652-bb7b-8c652ad20ca0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d17dc60c-8197-471b-964e-fb38f12d85ba","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=23dc5f28-5320-4b77-a7de-8a9f9a6df124"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/eae81554889a"]}}
{"level":"debug","ts":"2026-07-06T14:19:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"682fd4cd-21b5-4652-bb7b-8c652ad20ca0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/eae81554889a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=23dc5f28-5320-4b77-a7de-8a9f9a6df124"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d17dc60c-8197-471b-964e-fb38f12d85ba","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bf38e6097a654408e0ae46748173c0707b2c18b22f336818ea0e9ef56b3585f5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-74bb89.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/b314f1fa-dea4-45ca-a831-4cced1a31965",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:19:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"682fd4cd-21b5-4652-bb7b-8c652ad20ca0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:19:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"682fd4cd-21b5-4652-bb7b-8c652ad20ca0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:19:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"682fd4cd-21b5-4652-bb7b-8c652ad20ca0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-74bb89/auth-test-model-74bb89\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:19:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"682fd4cd-21b5-4652-bb7b-8c652ad20ca0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T14:19:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"682fd4cd-21b5-4652-bb7b-8c652ad20ca0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:19:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"682fd4cd-21b5-4652-bb7b-8c652ad20ca0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T14:19:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"682fd4cd-21b5-4652-bb7b-8c652ad20ca0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:19:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"682fd4cd-21b5-4652-bb7b-8c652ad20ca0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:19:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5454324d-2164-4815-a411-c0d9bf8df0bc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:58916","PortSpecifier":{"PortValue":58916}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5454324d-2164-4815-a411-c0d9bf8df0bc","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0ba2b8.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:19:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5454324d-2164-4815-a411-c0d9bf8df0bc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:58916","PortSpecifier":{"PortValue":58916}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347558,"nanos":879182565},"http":{"id":"5454324d-2164-4815-a411-c0d9bf8df0bc","method":"POST","headers":{":authority":"e2e-shared-a-0ba2b8.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:19:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5454324d-2164-4815-a411-c0d9bf8df0bc","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T14:19:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5454324d-2164-4815-a411-c0d9bf8df0bc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d17dc60c-8197-471b-964e-fb38f12d85ba","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=23dc5f28-5320-4b77-a7de-8a9f9a6df124"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/eae81554889a"]}}
{"level":"debug","ts":"2026-07-06T14:19:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5454324d-2164-4815-a411-c0d9bf8df0bc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/eae81554889a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=23dc5f28-5320-4b77-a7de-8a9f9a6df124"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d17dc60c-8197-471b-964e-fb38f12d85ba","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"76faf55deae1b057f34620e3be826809dc6aa86486324b6c130693c51076b844"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0ba2b8.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:19:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5454324d-2164-4815-a411-c0d9bf8df0bc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:19:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5454324d-2164-4815-a411-c0d9bf8df0bc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:19:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5454324d-2164-4815-a411-c0d9bf8df0bc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0ba2b8/auth-test-model-0ba2b8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:19:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5454324d-2164-4815-a411-c0d9bf8df0bc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T14:19:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5454324d-2164-4815-a411-c0d9bf8df0bc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:19:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5454324d-2164-4815-a411-c0d9bf8df0bc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T14:19:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5454324d-2164-4815-a411-c0d9bf8df0bc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:19:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5454324d-2164-4815-a411-c0d9bf8df0bc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:19:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"66e56bce-26a0-457c-b40f-bf6a66ebd77f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:37380","PortSpecifier":{"PortValue":37380}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"66e56bce-26a0-457c-b40f-bf6a66ebd77f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-74bb89.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:19:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"66e56bce-26a0-457c-b40f-bf6a66ebd77f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:37380","PortSpecifier":{"PortValue":37380}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347558,"nanos":913891664},"http":{"id":"66e56bce-26a0-457c-b40f-bf6a66ebd77f","method":"POST","headers":{":authority":"e2e-shared-b-74bb89.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:19:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"66e56bce-26a0-457c-b40f-bf6a66ebd77f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T14:19:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"66e56bce-26a0-457c-b40f-bf6a66ebd77f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d17dc60c-8197-471b-964e-fb38f12d85ba","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=23dc5f28-5320-4b77-a7de-8a9f9a6df124"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/eae81554889a"]}}
{"level":"debug","ts":"2026-07-06T14:19:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"66e56bce-26a0-457c-b40f-bf6a66ebd77f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/eae81554889a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=23dc5f28-5320-4b77-a7de-8a9f9a6df124"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d17dc60c-8197-471b-964e-fb38f12d85ba","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bf38e6097a654408e0ae46748173c0707b2c18b22f336818ea0e9ef56b3585f5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-74bb89.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:19:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66e56bce-26a0-457c-b40f-bf6a66ebd77f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:19:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66e56bce-26a0-457c-b40f-bf6a66ebd77f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:19:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66e56bce-26a0-457c-b40f-bf6a66ebd77f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-74bb89/auth-test-model-74bb89\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:19:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"66e56bce-26a0-457c-b40f-bf6a66ebd77f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T14:19:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"66e56bce-26a0-457c-b40f-bf6a66ebd77f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T14:19:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"66e56bce-26a0-457c-b40f-bf6a66ebd77f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T14:19:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"66e56bce-26a0-457c-b40f-bf6a66ebd77f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:19:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"66e56bce-26a0-457c-b40f-bf6a66ebd77f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:19:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a2d38de9-64ec-40e2-af40-ff66b12de18f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:58920","PortSpecifier":{"PortValue":58920}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a2d38de9-64ec-40e2-af40-ff66b12de18f","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-0ba2b8.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:19:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a2d38de9-64ec-40e2-af40-ff66b12de18f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:58920","PortSpecifier":{"PortValue":58920}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347558,"nanos":946962869},"http":{"id":"a2d38de9-64ec-40e2-af40-ff66b12de18f","method":"GET","headers":{":authority":"e2e-shared-a-0ba2b8.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:19:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a2d38de9-64ec-40e2-af40-ff66b12de18f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-fs3u0637btXA395E_5UteNp87jX3evxlGAUiK9bEUdIGems6HuvGLmMrttrZ"}
{"level":"debug","ts":"2026-07-06T14:19:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a2d38de9-64ec-40e2-af40-ff66b12de18f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0ba2b8.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-fs3u0637btXA395E_5UteNp87jX3evxlGAUiK9bEUdIGems6HuvGLmMrttrZ\"}"}
{"level":"debug","ts":"2026-07-06T14:19:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a2d38de9-64ec-40e2-af40-ff66b12de18f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0ba2b8.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"00431286-4769-41d8-8aa8-3820560ceef8","keyName":"e2e-auth-iso-a-64b72e","subscription":"e2e-auth-iso-92ed4b","tenant":"e2e-shared-a-0ba2b8","userId":"00431286-4769-41d8-8aa8-3820560ceef8","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T14:19:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a2d38de9-64ec-40e2-af40-ff66b12de18f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:19:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a2d38de9-64ec-40e2-af40-ff66b12de18f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:19:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a2d38de9-64ec-40e2-af40-ff66b12de18f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:19:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a2d38de9-64ec-40e2-af40-ff66b12de18f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0ba2b8/auth-test-model-0ba2b8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:19:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a2d38de9-64ec-40e2-af40-ff66b12de18f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T14:19:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a2d38de9-64ec-40e2-af40-ff66b12de18f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:19:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a2d38de9-64ec-40e2-af40-ff66b12de18f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-92ed4b"}
{"level":"debug","ts":"2026-07-06T14:19:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a2d38de9-64ec-40e2-af40-ff66b12de18f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T14:19:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a2d38de9-64ec-40e2-af40-ff66b12de18f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:19:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a2d38de9-64ec-40e2-af40-ff66b12de18f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:19:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"413fa766-ea19-4356-aaa9-d714f35dfa6d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:46070","PortSpecifier":{"PortValue":46070}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"413fa766-ea19-4356-aaa9-d714f35dfa6d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0ba2b8.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:19:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"413fa766-ea19-4356-aaa9-d714f35dfa6d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:46070","PortSpecifier":{"PortValue":46070}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347574,"nanos":18313542},"http":{"id":"413fa766-ea19-4356-aaa9-d714f35dfa6d","method":"POST","headers":{":authority":"e2e-shared-a-0ba2b8.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:19:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"413fa766-ea19-4356-aaa9-d714f35dfa6d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T14:19:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"413fa766-ea19-4356-aaa9-d714f35dfa6d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d17dc60c-8197-471b-964e-fb38f12d85ba","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=23dc5f28-5320-4b77-a7de-8a9f9a6df124"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/eae81554889a"]}}
{"level":"debug","ts":"2026-07-06T14:19:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"413fa766-ea19-4356-aaa9-d714f35dfa6d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/eae81554889a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=23dc5f28-5320-4b77-a7de-8a9f9a6df124"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d17dc60c-8197-471b-964e-fb38f12d85ba","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"76faf55deae1b057f34620e3be826809dc6aa86486324b6c130693c51076b844"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0ba2b8.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:19:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"413fa766-ea19-4356-aaa9-d714f35dfa6d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:19:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"413fa766-ea19-4356-aaa9-d714f35dfa6d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:19:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"413fa766-ea19-4356-aaa9-d714f35dfa6d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0ba2b8/auth-test-model-0ba2b8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:19:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"413fa766-ea19-4356-aaa9-d714f35dfa6d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T14:19:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"413fa766-ea19-4356-aaa9-d714f35dfa6d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:19:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"413fa766-ea19-4356-aaa9-d714f35dfa6d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T14:19:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"413fa766-ea19-4356-aaa9-d714f35dfa6d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:19:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"413fa766-ea19-4356-aaa9-d714f35dfa6d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:19:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"37497440-9b72-45b1-96fc-6eda0033a28a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:50126","PortSpecifier":{"PortValue":50126}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"37497440-9b72-45b1-96fc-6eda0033a28a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-74bb89.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:19:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"37497440-9b72-45b1-96fc-6eda0033a28a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:50126","PortSpecifier":{"PortValue":50126}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347574,"nanos":50989839},"http":{"id":"37497440-9b72-45b1-96fc-6eda0033a28a","method":"POST","headers":{":authority":"e2e-shared-b-74bb89.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:19:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"37497440-9b72-45b1-96fc-6eda0033a28a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T14:19:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"37497440-9b72-45b1-96fc-6eda0033a28a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d17dc60c-8197-471b-964e-fb38f12d85ba","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=23dc5f28-5320-4b77-a7de-8a9f9a6df124"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/eae81554889a"]}}
{"level":"debug","ts":"2026-07-06T14:19:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"37497440-9b72-45b1-96fc-6eda0033a28a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/eae81554889a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=23dc5f28-5320-4b77-a7de-8a9f9a6df124"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d17dc60c-8197-471b-964e-fb38f12d85ba","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bf38e6097a654408e0ae46748173c0707b2c18b22f336818ea0e9ef56b3585f5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-74bb89.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:19:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37497440-9b72-45b1-96fc-6eda0033a28a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:19:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37497440-9b72-45b1-96fc-6eda0033a28a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:19:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37497440-9b72-45b1-96fc-6eda0033a28a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-74bb89/auth-test-model-74bb89\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:19:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"37497440-9b72-45b1-96fc-6eda0033a28a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T14:19:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37497440-9b72-45b1-96fc-6eda0033a28a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T14:19:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37497440-9b72-45b1-96fc-6eda0033a28a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T14:19:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"37497440-9b72-45b1-96fc-6eda0033a28a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:19:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"37497440-9b72-45b1-96fc-6eda0033a28a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:19:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c8569f69-0690-4acb-822d-6a8e5b18a22e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:50142","PortSpecifier":{"PortValue":50142}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c8569f69-0690-4acb-822d-6a8e5b18a22e","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-74bb89.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:19:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c8569f69-0690-4acb-822d-6a8e5b18a22e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:50142","PortSpecifier":{"PortValue":50142}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347574,"nanos":85940869},"http":{"id":"c8569f69-0690-4acb-822d-6a8e5b18a22e","method":"GET","headers":{":authority":"e2e-shared-b-74bb89.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:19:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c8569f69-0690-4acb-822d-6a8e5b18a22e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-RkcC88DI8xPEeB3O_TzbXeP9x8IlBBicy4nTkTQPJsyz5Wf091P7VDfh3IYQ"}
{"level":"debug","ts":"2026-07-06T14:19:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c8569f69-0690-4acb-822d-6a8e5b18a22e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-74bb89.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-RkcC88DI8xPEeB3O_TzbXeP9x8IlBBicy4nTkTQPJsyz5Wf091P7VDfh3IYQ\"}"}
{"level":"debug","ts":"2026-07-06T14:19:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c8569f69-0690-4acb-822d-6a8e5b18a22e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-74bb89.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-06T14:19:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c8569f69-0690-4acb-822d-6a8e5b18a22e","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"bf38e6097a654408e0ae46748173c0707b2c18b22f336818ea0e9ef56b3585f5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-74bb89.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:19:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"c8569f69-0690-4acb-822d-6a8e5b18a22e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-06T14:19:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c8569f69-0690-4acb-822d-6a8e5b18a22e","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-06T14:19:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c8569f69-0690-4acb-822d-6a8e5b18a22e","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"x-ext-auth-reason":""},{"content-type":"text/plain"}]}}
{"level":"info","ts":"2026-07-06T14:19:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b07be933-3050-4c9a-b2cc-49931fa3cc26","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:46548","PortSpecifier":{"PortValue":46548}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b07be933-3050-4c9a-b2cc-49931fa3cc26","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0ba2b8.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:19:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b07be933-3050-4c9a-b2cc-49931fa3cc26","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:46548","PortSpecifier":{"PortValue":46548}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347591,"nanos":318544772},"http":{"id":"b07be933-3050-4c9a-b2cc-49931fa3cc26","method":"POST","headers":{":authority":"e2e-shared-a-0ba2b8.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:19:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b07be933-3050-4c9a-b2cc-49931fa3cc26","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T14:19:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b07be933-3050-4c9a-b2cc-49931fa3cc26","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d17dc60c-8197-471b-964e-fb38f12d85ba","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=23dc5f28-5320-4b77-a7de-8a9f9a6df124"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/eae81554889a"]}}
{"level":"debug","ts":"2026-07-06T14:19:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b07be933-3050-4c9a-b2cc-49931fa3cc26","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/eae81554889a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=23dc5f28-5320-4b77-a7de-8a9f9a6df124"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d17dc60c-8197-471b-964e-fb38f12d85ba","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"76faf55deae1b057f34620e3be826809dc6aa86486324b6c130693c51076b844"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0ba2b8.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:19:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b07be933-3050-4c9a-b2cc-49931fa3cc26","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:19:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b07be933-3050-4c9a-b2cc-49931fa3cc26","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:19:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b07be933-3050-4c9a-b2cc-49931fa3cc26","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0ba2b8/auth-test-model-0ba2b8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:19:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b07be933-3050-4c9a-b2cc-49931fa3cc26","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T14:19:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b07be933-3050-4c9a-b2cc-49931fa3cc26","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:19:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b07be933-3050-4c9a-b2cc-49931fa3cc26","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T14:19:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b07be933-3050-4c9a-b2cc-49931fa3cc26","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:19:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b07be933-3050-4c9a-b2cc-49931fa3cc26","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:19:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"35553259-8d90-4a5c-9181-3ed52e39d6e9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:45242","PortSpecifier":{"PortValue":45242}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"35553259-8d90-4a5c-9181-3ed52e39d6e9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-74bb89.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:19:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"35553259-8d90-4a5c-9181-3ed52e39d6e9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:45242","PortSpecifier":{"PortValue":45242}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347591,"nanos":348979104},"http":{"id":"35553259-8d90-4a5c-9181-3ed52e39d6e9","method":"POST","headers":{":authority":"e2e-shared-b-74bb89.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:19:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"35553259-8d90-4a5c-9181-3ed52e39d6e9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T14:19:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"35553259-8d90-4a5c-9181-3ed52e39d6e9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d17dc60c-8197-471b-964e-fb38f12d85ba","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=23dc5f28-5320-4b77-a7de-8a9f9a6df124"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/eae81554889a"]}}
{"level":"debug","ts":"2026-07-06T14:19:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"35553259-8d90-4a5c-9181-3ed52e39d6e9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/eae81554889a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=23dc5f28-5320-4b77-a7de-8a9f9a6df124"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d17dc60c-8197-471b-964e-fb38f12d85ba","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bf38e6097a654408e0ae46748173c0707b2c18b22f336818ea0e9ef56b3585f5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-74bb89.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:19:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"35553259-8d90-4a5c-9181-3ed52e39d6e9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:19:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"35553259-8d90-4a5c-9181-3ed52e39d6e9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:19:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"35553259-8d90-4a5c-9181-3ed52e39d6e9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-74bb89/auth-test-model-74bb89\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:19:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"35553259-8d90-4a5c-9181-3ed52e39d6e9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T14:19:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"35553259-8d90-4a5c-9181-3ed52e39d6e9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:19:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"35553259-8d90-4a5c-9181-3ed52e39d6e9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T14:19:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"35553259-8d90-4a5c-9181-3ed52e39d6e9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:19:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"35553259-8d90-4a5c-9181-3ed52e39d6e9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:19:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6e58bde0-1f16-49b1-9bd7-c16b5e7be800","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:46564","PortSpecifier":{"PortValue":46564}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6e58bde0-1f16-49b1-9bd7-c16b5e7be800","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-0ba2b8.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:19:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6e58bde0-1f16-49b1-9bd7-c16b5e7be800","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:46564","PortSpecifier":{"PortValue":46564}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347591,"nanos":390340799},"http":{"id":"6e58bde0-1f16-49b1-9bd7-c16b5e7be800","method":"POST","headers":{":authority":"e2e-shared-a-0ba2b8.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:19:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6e58bde0-1f16-49b1-9bd7-c16b5e7be800","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T14:19:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6e58bde0-1f16-49b1-9bd7-c16b5e7be800","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d17dc60c-8197-471b-964e-fb38f12d85ba","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=23dc5f28-5320-4b77-a7de-8a9f9a6df124"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/eae81554889a"]}}
{"level":"debug","ts":"2026-07-06T14:19:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6e58bde0-1f16-49b1-9bd7-c16b5e7be800","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/eae81554889a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=23dc5f28-5320-4b77-a7de-8a9f9a6df124"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d17dc60c-8197-471b-964e-fb38f12d85ba","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"76faf55deae1b057f34620e3be826809dc6aa86486324b6c130693c51076b844"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0ba2b8.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:19:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6e58bde0-1f16-49b1-9bd7-c16b5e7be800","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:19:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6e58bde0-1f16-49b1-9bd7-c16b5e7be800","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:19:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6e58bde0-1f16-49b1-9bd7-c16b5e7be800","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0ba2b8/auth-test-model-0ba2b8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:19:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6e58bde0-1f16-49b1-9bd7-c16b5e7be800","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T14:19:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6e58bde0-1f16-49b1-9bd7-c16b5e7be800","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:19:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6e58bde0-1f16-49b1-9bd7-c16b5e7be800","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T14:19:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6e58bde0-1f16-49b1-9bd7-c16b5e7be800","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:19:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6e58bde0-1f16-49b1-9bd7-c16b5e7be800","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:19:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"faf2ffe4-4ec0-4fa4-a97c-78ba2bb343b8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:45250","PortSpecifier":{"PortValue":45250}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"faf2ffe4-4ec0-4fa4-a97c-78ba2bb343b8","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-74bb89.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:19:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"faf2ffe4-4ec0-4fa4-a97c-78ba2bb343b8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:45250","PortSpecifier":{"PortValue":45250}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347591,"nanos":423413225},"http":{"id":"faf2ffe4-4ec0-4fa4-a97c-78ba2bb343b8","method":"POST","headers":{":authority":"e2e-shared-b-74bb89.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:19:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"faf2ffe4-4ec0-4fa4-a97c-78ba2bb343b8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T14:19:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"faf2ffe4-4ec0-4fa4-a97c-78ba2bb343b8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d17dc60c-8197-471b-964e-fb38f12d85ba","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=23dc5f28-5320-4b77-a7de-8a9f9a6df124"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/eae81554889a"]}}
{"level":"debug","ts":"2026-07-06T14:19:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"faf2ffe4-4ec0-4fa4-a97c-78ba2bb343b8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/eae81554889a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=23dc5f28-5320-4b77-a7de-8a9f9a6df124"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d17dc60c-8197-471b-964e-fb38f12d85ba","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bf38e6097a654408e0ae46748173c0707b2c18b22f336818ea0e9ef56b3585f5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-74bb89.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:19:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"faf2ffe4-4ec0-4fa4-a97c-78ba2bb343b8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:19:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"faf2ffe4-4ec0-4fa4-a97c-78ba2bb343b8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:19:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"faf2ffe4-4ec0-4fa4-a97c-78ba2bb343b8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-74bb89/auth-test-model-74bb89\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:19:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"faf2ffe4-4ec0-4fa4-a97c-78ba2bb343b8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T14:19:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"faf2ffe4-4ec0-4fa4-a97c-78ba2bb343b8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T14:19:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"faf2ffe4-4ec0-4fa4-a97c-78ba2bb343b8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T14:19:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"faf2ffe4-4ec0-4fa4-a97c-78ba2bb343b8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:19:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"faf2ffe4-4ec0-4fa4-a97c-78ba2bb343b8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:20:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a124034e-a27a-4293-a2b4-967771f5ee87","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:60864","PortSpecifier":{"PortValue":60864}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a124034e-a27a-4293-a2b4-967771f5ee87","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0ba2b8.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:20:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a124034e-a27a-4293-a2b4-967771f5ee87","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:60864","PortSpecifier":{"PortValue":60864}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347608,"nanos":648790374},"http":{"id":"a124034e-a27a-4293-a2b4-967771f5ee87","method":"POST","headers":{":authority":"e2e-shared-a-0ba2b8.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:20:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a124034e-a27a-4293-a2b4-967771f5ee87","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T14:20:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a124034e-a27a-4293-a2b4-967771f5ee87","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d17dc60c-8197-471b-964e-fb38f12d85ba","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=23dc5f28-5320-4b77-a7de-8a9f9a6df124"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/eae81554889a"]}}
{"level":"debug","ts":"2026-07-06T14:20:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a124034e-a27a-4293-a2b4-967771f5ee87","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/eae81554889a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=23dc5f28-5320-4b77-a7de-8a9f9a6df124"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d17dc60c-8197-471b-964e-fb38f12d85ba","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"76faf55deae1b057f34620e3be826809dc6aa86486324b6c130693c51076b844"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0ba2b8.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:20:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a124034e-a27a-4293-a2b4-967771f5ee87","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:20:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a124034e-a27a-4293-a2b4-967771f5ee87","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:20:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a124034e-a27a-4293-a2b4-967771f5ee87","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0ba2b8/auth-test-model-0ba2b8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:20:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a124034e-a27a-4293-a2b4-967771f5ee87","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T14:20:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a124034e-a27a-4293-a2b4-967771f5ee87","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:20:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a124034e-a27a-4293-a2b4-967771f5ee87","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T14:20:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a124034e-a27a-4293-a2b4-967771f5ee87","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:20:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a124034e-a27a-4293-a2b4-967771f5ee87","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:20:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3abf6987-70e0-40dd-81a8-b09f3ac073ea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:42614","PortSpecifier":{"PortValue":42614}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3abf6987-70e0-40dd-81a8-b09f3ac073ea","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-74bb89.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:20:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3abf6987-70e0-40dd-81a8-b09f3ac073ea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:42614","PortSpecifier":{"PortValue":42614}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347608,"nanos":684558427},"http":{"id":"3abf6987-70e0-40dd-81a8-b09f3ac073ea","method":"POST","headers":{":authority":"e2e-shared-b-74bb89.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:20:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3abf6987-70e0-40dd-81a8-b09f3ac073ea","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T14:20:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3abf6987-70e0-40dd-81a8-b09f3ac073ea","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d17dc60c-8197-471b-964e-fb38f12d85ba","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=23dc5f28-5320-4b77-a7de-8a9f9a6df124"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/eae81554889a"]}}
{"level":"debug","ts":"2026-07-06T14:20:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3abf6987-70e0-40dd-81a8-b09f3ac073ea","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/eae81554889a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=23dc5f28-5320-4b77-a7de-8a9f9a6df124"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d17dc60c-8197-471b-964e-fb38f12d85ba","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bf38e6097a654408e0ae46748173c0707b2c18b22f336818ea0e9ef56b3585f5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-74bb89.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:20:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3abf6987-70e0-40dd-81a8-b09f3ac073ea","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:20:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3abf6987-70e0-40dd-81a8-b09f3ac073ea","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:20:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3abf6987-70e0-40dd-81a8-b09f3ac073ea","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-74bb89/auth-test-model-74bb89\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:20:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3abf6987-70e0-40dd-81a8-b09f3ac073ea","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T14:20:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3abf6987-70e0-40dd-81a8-b09f3ac073ea","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T14:20:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3abf6987-70e0-40dd-81a8-b09f3ac073ea","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T14:20:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3abf6987-70e0-40dd-81a8-b09f3ac073ea","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:20:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3abf6987-70e0-40dd-81a8-b09f3ac073ea","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:20:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aa4e5eb0-2a6b-49da-a36a-549d717d116f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:42630","PortSpecifier":{"PortValue":42630}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"aa4e5eb0-2a6b-49da-a36a-549d717d116f","method":"GET","path":"/maas-api/v1/api-keys/4564828a-505f-4485-a3fe-e7d5204d7510","host":"e2e-shared-b-74bb89.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:20:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aa4e5eb0-2a6b-49da-a36a-549d717d116f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:42630","PortSpecifier":{"PortValue":42630}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347608,"nanos":719559317},"http":{"id":"aa4e5eb0-2a6b-49da-a36a-549d717d116f","method":"GET","headers":{":authority":"e2e-shared-b-74bb89.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/4564828a-505f-4485-a3fe-e7d5204d7510",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:20:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"aa4e5eb0-2a6b-49da-a36a-549d717d116f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T14:20:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"aa4e5eb0-2a6b-49da-a36a-549d717d116f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d17dc60c-8197-471b-964e-fb38f12d85ba","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=23dc5f28-5320-4b77-a7de-8a9f9a6df124"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/eae81554889a"]}}
{"level":"debug","ts":"2026-07-06T14:20:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"aa4e5eb0-2a6b-49da-a36a-549d717d116f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/eae81554889a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=23dc5f28-5320-4b77-a7de-8a9f9a6df124"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d17dc60c-8197-471b-964e-fb38f12d85ba","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bf38e6097a654408e0ae46748173c0707b2c18b22f336818ea0e9ef56b3585f5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-74bb89.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/4564828a-505f-4485-a3fe-e7d5204d7510",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:20:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aa4e5eb0-2a6b-49da-a36a-549d717d116f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:20:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aa4e5eb0-2a6b-49da-a36a-549d717d116f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:20:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aa4e5eb0-2a6b-49da-a36a-549d717d116f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-74bb89/auth-test-model-74bb89\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:20:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"aa4e5eb0-2a6b-49da-a36a-549d717d116f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T14:20:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aa4e5eb0-2a6b-49da-a36a-549d717d116f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T14:20:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aa4e5eb0-2a6b-49da-a36a-549d717d116f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T14:20:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aa4e5eb0-2a6b-49da-a36a-549d717d116f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:20:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aa4e5eb0-2a6b-49da-a36a-549d717d116f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:20:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6cd4a586-ec8f-445e-b164-213c9aac8b51","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:42956","PortSpecifier":{"PortValue":42956}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6cd4a586-ec8f-445e-b164-213c9aac8b51","method":"GET","path":"/maas-api/v1/api-keys/4564828a-505f-4485-a3fe-e7d5204d7510","host":"e2e-shared-a-0ba2b8.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:20:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6cd4a586-ec8f-445e-b164-213c9aac8b51","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:42956","PortSpecifier":{"PortValue":42956}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347608,"nanos":751503008},"http":{"id":"6cd4a586-ec8f-445e-b164-213c9aac8b51","method":"GET","headers":{":authority":"e2e-shared-a-0ba2b8.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/4564828a-505f-4485-a3fe-e7d5204d7510",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:20:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6cd4a586-ec8f-445e-b164-213c9aac8b51","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T14:20:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6cd4a586-ec8f-445e-b164-213c9aac8b51","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d17dc60c-8197-471b-964e-fb38f12d85ba","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=23dc5f28-5320-4b77-a7de-8a9f9a6df124"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/eae81554889a"]}}
{"level":"debug","ts":"2026-07-06T14:20:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6cd4a586-ec8f-445e-b164-213c9aac8b51","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/eae81554889a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=23dc5f28-5320-4b77-a7de-8a9f9a6df124"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d17dc60c-8197-471b-964e-fb38f12d85ba","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"76faf55deae1b057f34620e3be826809dc6aa86486324b6c130693c51076b844"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0ba2b8.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/4564828a-505f-4485-a3fe-e7d5204d7510",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:20:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6cd4a586-ec8f-445e-b164-213c9aac8b51","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:20:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6cd4a586-ec8f-445e-b164-213c9aac8b51","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:20:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6cd4a586-ec8f-445e-b164-213c9aac8b51","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0ba2b8/auth-test-model-0ba2b8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:20:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6cd4a586-ec8f-445e-b164-213c9aac8b51","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T14:20:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6cd4a586-ec8f-445e-b164-213c9aac8b51","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:20:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6cd4a586-ec8f-445e-b164-213c9aac8b51","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T14:20:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6cd4a586-ec8f-445e-b164-213c9aac8b51","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:20:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6cd4a586-ec8f-445e-b164-213c9aac8b51","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:20:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4e70c8a4-8e41-49c9-8585-581ffe309529","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:57152","PortSpecifier":{"PortValue":57152}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4e70c8a4-8e41-49c9-8585-581ffe309529","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0ba2b8.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:20:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4e70c8a4-8e41-49c9-8585-581ffe309529","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:57152","PortSpecifier":{"PortValue":57152}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347626,"nanos":36601283},"http":{"id":"4e70c8a4-8e41-49c9-8585-581ffe309529","method":"POST","headers":{":authority":"e2e-shared-a-0ba2b8.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:20:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4e70c8a4-8e41-49c9-8585-581ffe309529","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T14:20:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4e70c8a4-8e41-49c9-8585-581ffe309529","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d17dc60c-8197-471b-964e-fb38f12d85ba","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=23dc5f28-5320-4b77-a7de-8a9f9a6df124"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/eae81554889a"]}}
{"level":"debug","ts":"2026-07-06T14:20:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4e70c8a4-8e41-49c9-8585-581ffe309529","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/eae81554889a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=23dc5f28-5320-4b77-a7de-8a9f9a6df124"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d17dc60c-8197-471b-964e-fb38f12d85ba","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"76faf55deae1b057f34620e3be826809dc6aa86486324b6c130693c51076b844"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0ba2b8.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:20:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e70c8a4-8e41-49c9-8585-581ffe309529","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:20:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e70c8a4-8e41-49c9-8585-581ffe309529","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:20:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e70c8a4-8e41-49c9-8585-581ffe309529","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0ba2b8/auth-test-model-0ba2b8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:20:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4e70c8a4-8e41-49c9-8585-581ffe309529","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T14:20:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e70c8a4-8e41-49c9-8585-581ffe309529","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:20:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e70c8a4-8e41-49c9-8585-581ffe309529","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T14:20:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4e70c8a4-8e41-49c9-8585-581ffe309529","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:20:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4e70c8a4-8e41-49c9-8585-581ffe309529","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:20:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"663b89d8-38e0-4491-a60d-75d6f080ae87","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:35034","PortSpecifier":{"PortValue":35034}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"663b89d8-38e0-4491-a60d-75d6f080ae87","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-74bb89.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:20:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"663b89d8-38e0-4491-a60d-75d6f080ae87","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:35034","PortSpecifier":{"PortValue":35034}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347626,"nanos":74742738},"http":{"id":"663b89d8-38e0-4491-a60d-75d6f080ae87","method":"POST","headers":{":authority":"e2e-shared-b-74bb89.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:20:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"663b89d8-38e0-4491-a60d-75d6f080ae87","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T14:20:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"663b89d8-38e0-4491-a60d-75d6f080ae87","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d17dc60c-8197-471b-964e-fb38f12d85ba","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=23dc5f28-5320-4b77-a7de-8a9f9a6df124"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/eae81554889a"]}}
{"level":"debug","ts":"2026-07-06T14:20:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"663b89d8-38e0-4491-a60d-75d6f080ae87","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/eae81554889a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=23dc5f28-5320-4b77-a7de-8a9f9a6df124"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d17dc60c-8197-471b-964e-fb38f12d85ba","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bf38e6097a654408e0ae46748173c0707b2c18b22f336818ea0e9ef56b3585f5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-74bb89.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:20:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"663b89d8-38e0-4491-a60d-75d6f080ae87","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:20:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"663b89d8-38e0-4491-a60d-75d6f080ae87","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:20:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"663b89d8-38e0-4491-a60d-75d6f080ae87","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-74bb89/auth-test-model-74bb89\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:20:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"663b89d8-38e0-4491-a60d-75d6f080ae87","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T14:20:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"663b89d8-38e0-4491-a60d-75d6f080ae87","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:20:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"663b89d8-38e0-4491-a60d-75d6f080ae87","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T14:20:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"663b89d8-38e0-4491-a60d-75d6f080ae87","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:20:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"663b89d8-38e0-4491-a60d-75d6f080ae87","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:20:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"09457bb3-d02c-4e4c-9b08-e949a4d3b9ce","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:57156","PortSpecifier":{"PortValue":57156}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"09457bb3-d02c-4e4c-9b08-e949a4d3b9ce","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-0ba2b8.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:20:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"09457bb3-d02c-4e4c-9b08-e949a4d3b9ce","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:57156","PortSpecifier":{"PortValue":57156}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347626,"nanos":109176822},"http":{"id":"09457bb3-d02c-4e4c-9b08-e949a4d3b9ce","method":"POST","headers":{":authority":"e2e-shared-a-0ba2b8.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:20:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"09457bb3-d02c-4e4c-9b08-e949a4d3b9ce","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1c5DvG5MdC1XkZhe3_UxygQ0k0ZZM8hQ42OArTdb8Lzfawg9QXk6LB69OTgGI"}
{"level":"debug","ts":"2026-07-06T14:20:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"09457bb3-d02c-4e4c-9b08-e949a4d3b9ce","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0ba2b8.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1c5DvG5MdC1XkZhe3_UxygQ0k0ZZM8hQ42OArTdb8Lzfawg9QXk6LB69OTgGI\"}"}
{"level":"debug","ts":"2026-07-06T14:20:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"09457bb3-d02c-4e4c-9b08-e949a4d3b9ce","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0ba2b8.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"729e2f94-ecbf-4092-aae0-b62e8750fe26","keyName":"e2e-auth-iso-a-49ae19","subscription":"e2e-auth-iso-74bb1f","tenant":"e2e-shared-a-0ba2b8","userId":"729e2f94-ecbf-4092-aae0-b62e8750fe26","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T14:20:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"09457bb3-d02c-4e4c-9b08-e949a4d3b9ce","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:20:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09457bb3-d02c-4e4c-9b08-e949a4d3b9ce","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:20:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09457bb3-d02c-4e4c-9b08-e949a4d3b9ce","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:20:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09457bb3-d02c-4e4c-9b08-e949a4d3b9ce","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0ba2b8/auth-test-model-0ba2b8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:20:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"09457bb3-d02c-4e4c-9b08-e949a4d3b9ce","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:20:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"09457bb3-d02c-4e4c-9b08-e949a4d3b9ce","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T14:20:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"09457bb3-d02c-4e4c-9b08-e949a4d3b9ce","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T14:20:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"09457bb3-d02c-4e4c-9b08-e949a4d3b9ce","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-74bb1f"}
{"level":"info","ts":"2026-07-06T14:20:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"09457bb3-d02c-4e4c-9b08-e949a4d3b9ce","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:20:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"09457bb3-d02c-4e4c-9b08-e949a4d3b9ce","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9fd0edf91391b31ac1808713df6cba4c48ae6a40098e36baf4e06db542348cb2"}
{"level":"info","ts":"2026-07-06T14:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/903fce85615ba52fd71a8816c33c345d7ba91798213f0526d785d2c3eb296d8a"}
{"level":"info","ts":"2026-07-06T14:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8927537ec1367dc2b57b8fd81affde0c3fba1904f9a219304268a71e7c91e495"}
{"level":"info","ts":"2026-07-06T14:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/40481657d05881f625c5b2d044f5b4fb1d9d3ded8084c0fc0e20358b832eb6bc"}
{"level":"info","ts":"2026-07-06T14:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ea67176e5d459189507e88715fdec9c5d55ea61add0199d1ad35fc487b2721f7"}
{"level":"info","ts":"2026-07-06T14:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e1ef8d76e2c1e00dbad92c342f6f8c9745fb06ef0cfa834cd6a600e3f902b745"}
{"level":"info","ts":"2026-07-06T14:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eb72849962de26db3cdd783509124325435d1fdf16cfebe7859da157213c6a53"}
{"level":"info","ts":"2026-07-06T14:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/782fb61b383c973bc31ce4a197b84230a94454543fec333558323de5e06c80d5"}
{"level":"debug","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c72acd09bf1079aefb39461b0fd605e7f639ba3fee552d71c339b3cee2534b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:20:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:20:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c72acd09bf1079aefb39461b0fd605e7f639ba3fee552d71c339b3cee2534b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c72acd09bf1079aefb39461b0fd605e7f639ba3fee552d71c339b3cee2534b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:20:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:20:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c72acd09bf1079aefb39461b0fd605e7f639ba3fee552d71c339b3cee2534b4"}
{"level":"info","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c72acd09bf1079aefb39461b0fd605e7f639ba3fee552d71c339b3cee2534b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c72acd09bf1079aefb39461b0fd605e7f639ba3fee552d71c339b3cee2534b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:20:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:20:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8c72acd09bf1079aefb39461b0fd605e7f639ba3fee552d71c339b3cee2534b4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8c72acd09bf1079aefb39461b0fd605e7f639ba3fee552d71c339b3cee2534b4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c72acd09bf1079aefb39461b0fd605e7f639ba3fee552d71c339b3cee2534b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c72acd09bf1079aefb39461b0fd605e7f639ba3fee552d71c339b3cee2534b4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c72acd09bf1079aefb39461b0fd605e7f639ba3fee552d71c339b3cee2534b4"}
{"level":"info","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c72acd09bf1079aefb39461b0fd605e7f639ba3fee552d71c339b3cee2534b4"}
{"level":"debug","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c72acd09bf1079aefb39461b0fd605e7f639ba3fee552d71c339b3cee2534b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:20:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:20:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c72acd09bf1079aefb39461b0fd605e7f639ba3fee552d71c339b3cee2534b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c72acd09bf1079aefb39461b0fd605e7f639ba3fee552d71c339b3cee2534b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c72acd09bf1079aefb39461b0fd605e7f639ba3fee552d71c339b3cee2534b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:20:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:20:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c72acd09bf1079aefb39461b0fd605e7f639ba3fee552d71c339b3cee2534b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c72acd09bf1079aefb39461b0fd605e7f639ba3fee552d71c339b3cee2534b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c72acd09bf1079aefb39461b0fd605e7f639ba3fee552d71c339b3cee2534b4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c72acd09bf1079aefb39461b0fd605e7f639ba3fee552d71c339b3cee2534b4"}
{"level":"debug","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c72acd09bf1079aefb39461b0fd605e7f639ba3fee552d71c339b3cee2534b4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c72acd09bf1079aefb39461b0fd605e7f639ba3fee552d71c339b3cee2534b4"}
{"level":"debug","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a972e987d4f62b663a02081eab9fe9be97ca87c4462318dfa0f4441d3204d25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:20:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:20:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a972e987d4f62b663a02081eab9fe9be97ca87c4462318dfa0f4441d3204d25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c72acd09bf1079aefb39461b0fd605e7f639ba3fee552d71c339b3cee2534b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:20:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:20:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c72acd09bf1079aefb39461b0fd605e7f639ba3fee552d71c339b3cee2534b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a972e987d4f62b663a02081eab9fe9be97ca87c4462318dfa0f4441d3204d25"}
{"level":"info","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c72acd09bf1079aefb39461b0fd605e7f639ba3fee552d71c339b3cee2534b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a972e987d4f62b663a02081eab9fe9be97ca87c4462318dfa0f4441d3204d25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c72acd09bf1079aefb39461b0fd605e7f639ba3fee552d71c339b3cee2534b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a972e987d4f62b663a02081eab9fe9be97ca87c4462318dfa0f4441d3204d25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a972e987d4f62b663a02081eab9fe9be97ca87c4462318dfa0f4441d3204d25","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a972e987d4f62b663a02081eab9fe9be97ca87c4462318dfa0f4441d3204d25"}
{"level":"debug","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"090ac2b0abab191d88609f0d2124610b27c12cd9e93c371e26c09c48744683a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:20:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:20:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c72acd09bf1079aefb39461b0fd605e7f639ba3fee552d71c339b3cee2534b4"}
{"level":"info","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"090ac2b0abab191d88609f0d2124610b27c12cd9e93c371e26c09c48744683a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a972e987d4f62b663a02081eab9fe9be97ca87c4462318dfa0f4441d3204d25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:20:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:20:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a972e987d4f62b663a02081eab9fe9be97ca87c4462318dfa0f4441d3204d25"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/090ac2b0abab191d88609f0d2124610b27c12cd9e93c371e26c09c48744683a8"}
{"level":"info","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a972e987d4f62b663a02081eab9fe9be97ca87c4462318dfa0f4441d3204d25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2e317dbd1a801aeb436f716e00664d904b68e7240d8a06d0c9739fc5ac64fab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:20:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:20:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2e317dbd1a801aeb436f716e00664d904b68e7240d8a06d0c9739fc5ac64fab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"090ac2b0abab191d88609f0d2124610b27c12cd9e93c371e26c09c48744683a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:20:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:20:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["090ac2b0abab191d88609f0d2124610b27c12cd9e93c371e26c09c48744683a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2e317dbd1a801aeb436f716e00664d904b68e7240d8a06d0c9739fc5ac64fab"}
{"level":"info","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"090ac2b0abab191d88609f0d2124610b27c12cd9e93c371e26c09c48744683a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a972e987d4f62b663a02081eab9fe9be97ca87c4462318dfa0f4441d3204d25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2e317dbd1a801aeb436f716e00664d904b68e7240d8a06d0c9739fc5ac64fab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:20:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:20:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f2e317dbd1a801aeb436f716e00664d904b68e7240d8a06d0c9739fc5ac64fab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2e317dbd1a801aeb436f716e00664d904b68e7240d8a06d0c9739fc5ac64fab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"090ac2b0abab191d88609f0d2124610b27c12cd9e93c371e26c09c48744683a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:20:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:20:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/090ac2b0abab191d88609f0d2124610b27c12cd9e93c371e26c09c48744683a8"}
{"level":"info","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"090ac2b0abab191d88609f0d2124610b27c12cd9e93c371e26c09c48744683a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2e317dbd1a801aeb436f716e00664d904b68e7240d8a06d0c9739fc5ac64fab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"090ac2b0abab191d88609f0d2124610b27c12cd9e93c371e26c09c48744683a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:20:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:20:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["090ac2b0abab191d88609f0d2124610b27c12cd9e93c371e26c09c48744683a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a972e987d4f62b663a02081eab9fe9be97ca87c4462318dfa0f4441d3204d25"}
{"level":"info","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"090ac2b0abab191d88609f0d2124610b27c12cd9e93c371e26c09c48744683a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"090ac2b0abab191d88609f0d2124610b27c12cd9e93c371e26c09c48744683a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:20:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:20:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["090ac2b0abab191d88609f0d2124610b27c12cd9e93c371e26c09c48744683a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"090ac2b0abab191d88609f0d2124610b27c12cd9e93c371e26c09c48744683a8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"090ac2b0abab191d88609f0d2124610b27c12cd9e93c371e26c09c48744683a8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b7ab2371b4d158508fbb8bf0071424bb4c209f7cf46655513c753a786f9d12e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:20:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:20:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b7ab2371b4d158508fbb8bf0071424bb4c209f7cf46655513c753a786f9d12e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"090ac2b0abab191d88609f0d2124610b27c12cd9e93c371e26c09c48744683a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b7ab2371b4d158508fbb8bf0071424bb4c209f7cf46655513c753a786f9d12e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2e317dbd1a801aeb436f716e00664d904b68e7240d8a06d0c9739fc5ac64fab"}
{"level":"debug","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b7ab2371b4d158508fbb8bf0071424bb4c209f7cf46655513c753a786f9d12e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/090ac2b0abab191d88609f0d2124610b27c12cd9e93c371e26c09c48744683a8"}
{"level":"debug","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b7ab2371b4d158508fbb8bf0071424bb4c209f7cf46655513c753a786f9d12e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:20:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:20:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b7ab2371b4d158508fbb8bf0071424bb4c209f7cf46655513c753a786f9d12e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b7ab2371b4d158508fbb8bf0071424bb4c209f7cf46655513c753a786f9d12e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b7ab2371b4d158508fbb8bf0071424bb4c209f7cf46655513c753a786f9d12e"}
{"level":"info","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b7ab2371b4d158508fbb8bf0071424bb4c209f7cf46655513c753a786f9d12e"}
{"level":"debug","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b7ab2371b4d158508fbb8bf0071424bb4c209f7cf46655513c753a786f9d12e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:20:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:20:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b7ab2371b4d158508fbb8bf0071424bb4c209f7cf46655513c753a786f9d12e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b7ab2371b4d158508fbb8bf0071424bb4c209f7cf46655513c753a786f9d12e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b7ab2371b4d158508fbb8bf0071424bb4c209f7cf46655513c753a786f9d12e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:20:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:20:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b7ab2371b4d158508fbb8bf0071424bb4c209f7cf46655513c753a786f9d12e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b7ab2371b4d158508fbb8bf0071424bb4c209f7cf46655513c753a786f9d12e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b7ab2371b4d158508fbb8bf0071424bb4c209f7cf46655513c753a786f9d12e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b7ab2371b4d158508fbb8bf0071424bb4c209f7cf46655513c753a786f9d12e"}
{"level":"debug","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b7ab2371b4d158508fbb8bf0071424bb4c209f7cf46655513c753a786f9d12e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b7ab2371b4d158508fbb8bf0071424bb4c209f7cf46655513c753a786f9d12e"}
{"level":"debug","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b7ab2371b4d158508fbb8bf0071424bb4c209f7cf46655513c753a786f9d12e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:20:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:20:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b7ab2371b4d158508fbb8bf0071424bb4c209f7cf46655513c753a786f9d12e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b7ab2371b4d158508fbb8bf0071424bb4c209f7cf46655513c753a786f9d12e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a448e330ca0cb5992c05351abc23eb8ededb28134c25390e9e8943d8ad32123","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:20:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:20:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a448e330ca0cb5992c05351abc23eb8ededb28134c25390e9e8943d8ad32123","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b7ab2371b4d158508fbb8bf0071424bb4c209f7cf46655513c753a786f9d12e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"739dee5a24d802653eeb2350023c47c9dd5b8e66f2a2beb285c672ec7016a86a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:20:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:20:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a448e330ca0cb5992c05351abc23eb8ededb28134c25390e9e8943d8ad32123"}
{"level":"info","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"739dee5a24d802653eeb2350023c47c9dd5b8e66f2a2beb285c672ec7016a86a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a448e330ca0cb5992c05351abc23eb8ededb28134c25390e9e8943d8ad32123","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:20:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:20:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a448e330ca0cb5992c05351abc23eb8ededb28134c25390e9e8943d8ad32123"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a448e330ca0cb5992c05351abc23eb8ededb28134c25390e9e8943d8ad32123","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"739dee5a24d802653eeb2350023c47c9dd5b8e66f2a2beb285c672ec7016a86a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b7ab2371b4d158508fbb8bf0071424bb4c209f7cf46655513c753a786f9d12e"}
{"level":"debug","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a448e330ca0cb5992c05351abc23eb8ededb28134c25390e9e8943d8ad32123","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"739dee5a24d802653eeb2350023c47c9dd5b8e66f2a2beb285c672ec7016a86a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:20:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:20:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/739dee5a24d802653eeb2350023c47c9dd5b8e66f2a2beb285c672ec7016a86a"}
{"level":"info","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"739dee5a24d802653eeb2350023c47c9dd5b8e66f2a2beb285c672ec7016a86a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"739dee5a24d802653eeb2350023c47c9dd5b8e66f2a2beb285c672ec7016a86a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:20:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:20:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["739dee5a24d802653eeb2350023c47c9dd5b8e66f2a2beb285c672ec7016a86a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"739dee5a24d802653eeb2350023c47c9dd5b8e66f2a2beb285c672ec7016a86a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"739dee5a24d802653eeb2350023c47c9dd5b8e66f2a2beb285c672ec7016a86a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"739dee5a24d802653eeb2350023c47c9dd5b8e66f2a2beb285c672ec7016a86a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a448e330ca0cb5992c05351abc23eb8ededb28134c25390e9e8943d8ad32123"}
{"level":"debug","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a400fccd83bd6c1b114618228d4fe6ebc0dcff40c3f2eb5af861d1322fb4c686","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:20:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:20:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/739dee5a24d802653eeb2350023c47c9dd5b8e66f2a2beb285c672ec7016a86a"}
{"level":"info","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a400fccd83bd6c1b114618228d4fe6ebc0dcff40c3f2eb5af861d1322fb4c686","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a400fccd83bd6c1b114618228d4fe6ebc0dcff40c3f2eb5af861d1322fb4c686","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:20:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:20:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a400fccd83bd6c1b114618228d4fe6ebc0dcff40c3f2eb5af861d1322fb4c686","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a400fccd83bd6c1b114618228d4fe6ebc0dcff40c3f2eb5af861d1322fb4c686","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:20:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:20:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a400fccd83bd6c1b114618228d4fe6ebc0dcff40c3f2eb5af861d1322fb4c686"}
{"level":"error","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a400fccd83bd6c1b114618228d4fe6ebc0dcff40c3f2eb5af861d1322fb4c686","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a400fccd83bd6c1b114618228d4fe6ebc0dcff40c3f2eb5af861d1322fb4c686\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a400fccd83bd6c1b114618228d4fe6ebc0dcff40c3f2eb5af861d1322fb4c686","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a400fccd83bd6c1b114618228d4fe6ebc0dcff40c3f2eb5af861d1322fb4c686","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:20:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a400fccd83bd6c1b114618228d4fe6ebc0dcff40c3f2eb5af861d1322fb4c686"}
{"level":"info","ts":"2026-07-06T14:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/af30e5efd27af52ce48e68817bce6b286c000b6b1794192b8b6cabbeb96bc748"}
{"level":"info","ts":"2026-07-06T14:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/82c8d0953fcce339afc254237c7e37ebcbf52a41f9bc01c2734c2441b92378f6"}
{"level":"info","ts":"2026-07-06T14:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/53533881dbd9be405199244deb6469bdd593cad320b08de227bee899c722d2a4"}
{"level":"info","ts":"2026-07-06T14:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a70ca8171eee7a4e2f537c89c2ff3fd57954a2774116fe904ff8673de0f77a96"}
{"level":"debug","ts":"2026-07-06T14:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a400fccd83bd6c1b114618228d4fe6ebc0dcff40c3f2eb5af861d1322fb4c686","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:20:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:20:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a400fccd83bd6c1b114618228d4fe6ebc0dcff40c3f2eb5af861d1322fb4c686"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e0d6c75b082ca230c2f2448c1064cd4b0f55c75b01cea49b2784e553a5c91312"}
{"level":"info","ts":"2026-07-06T14:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/45c8c63236664d0bb0db43585254660f6a2ae7328e716d3c030339a7704a81ff"}
{"level":"info","ts":"2026-07-06T14:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a400fccd83bd6c1b114618228d4fe6ebc0dcff40c3f2eb5af861d1322fb4c686","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a400fccd83bd6c1b114618228d4fe6ebc0dcff40c3f2eb5af861d1322fb4c686","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a400fccd83bd6c1b114618228d4fe6ebc0dcff40c3f2eb5af861d1322fb4c686"}
{"level":"info","ts":"2026-07-06T14:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/df738aa9e5013970406df552c976719d9d51e3016178d40ccfa9725effbaeed8"}
{"level":"info","ts":"2026-07-06T14:20:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/793a96fb3fa58c1104c473073ca3a2715ce033d0ac0694733a154a6b0d1ba356"}
{"level":"debug","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9c6b69cb37413d2945a868abe01aaf75b30418e2bdd434b9bc9967f5a25dea0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:21:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:21:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9c6b69cb37413d2945a868abe01aaf75b30418e2bdd434b9bc9967f5a25dea0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9c6b69cb37413d2945a868abe01aaf75b30418e2bdd434b9bc9967f5a25dea0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9c6b69cb37413d2945a868abe01aaf75b30418e2bdd434b9bc9967f5a25dea0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9c6b69cb37413d2945a868abe01aaf75b30418e2bdd434b9bc9967f5a25dea0"}
{"level":"debug","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9c6b69cb37413d2945a868abe01aaf75b30418e2bdd434b9bc9967f5a25dea0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9c6b69cb37413d2945a868abe01aaf75b30418e2bdd434b9bc9967f5a25dea0"}
{"level":"debug","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9c6b69cb37413d2945a868abe01aaf75b30418e2bdd434b9bc9967f5a25dea0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:21:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:21:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9c6b69cb37413d2945a868abe01aaf75b30418e2bdd434b9bc9967f5a25dea0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9c6b69cb37413d2945a868abe01aaf75b30418e2bdd434b9bc9967f5a25dea0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9c6b69cb37413d2945a868abe01aaf75b30418e2bdd434b9bc9967f5a25dea0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:21:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:21:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9c6b69cb37413d2945a868abe01aaf75b30418e2bdd434b9bc9967f5a25dea0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9c6b69cb37413d2945a868abe01aaf75b30418e2bdd434b9bc9967f5a25dea0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9c6b69cb37413d2945a868abe01aaf75b30418e2bdd434b9bc9967f5a25dea0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9c6b69cb37413d2945a868abe01aaf75b30418e2bdd434b9bc9967f5a25dea0"}
{"level":"debug","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9c6b69cb37413d2945a868abe01aaf75b30418e2bdd434b9bc9967f5a25dea0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9c6b69cb37413d2945a868abe01aaf75b30418e2bdd434b9bc9967f5a25dea0"}
{"level":"debug","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9c6b69cb37413d2945a868abe01aaf75b30418e2bdd434b9bc9967f5a25dea0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:21:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:21:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9c6b69cb37413d2945a868abe01aaf75b30418e2bdd434b9bc9967f5a25dea0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9c6b69cb37413d2945a868abe01aaf75b30418e2bdd434b9bc9967f5a25dea0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9c6b69cb37413d2945a868abe01aaf75b30418e2bdd434b9bc9967f5a25dea0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db7f8f03bd740daaf3af63f904d919fab07783bc56295eb72a09507201c11699","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:21:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:21:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db7f8f03bd740daaf3af63f904d919fab07783bc56295eb72a09507201c11699","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db7f8f03bd740daaf3af63f904d919fab07783bc56295eb72a09507201c11699","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9c6b69cb37413d2945a868abe01aaf75b30418e2bdd434b9bc9967f5a25dea0"}
{"level":"debug","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db7f8f03bd740daaf3af63f904d919fab07783bc56295eb72a09507201c11699","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:21:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:21:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db7f8f03bd740daaf3af63f904d919fab07783bc56295eb72a09507201c11699","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db7f8f03bd740daaf3af63f904d919fab07783bc56295eb72a09507201c11699","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db7f8f03bd740daaf3af63f904d919fab07783bc56295eb72a09507201c11699"}
{"level":"debug","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db7f8f03bd740daaf3af63f904d919fab07783bc56295eb72a09507201c11699","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db7f8f03bd740daaf3af63f904d919fab07783bc56295eb72a09507201c11699"}
{"level":"debug","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a511473c4065c5f12229b065946f567e374feb2180a23413ac984f21d82f394","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:21:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:21:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a511473c4065c5f12229b065946f567e374feb2180a23413ac984f21d82f394","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a511473c4065c5f12229b065946f567e374feb2180a23413ac984f21d82f394","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a511473c4065c5f12229b065946f567e374feb2180a23413ac984f21d82f394","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a511473c4065c5f12229b065946f567e374feb2180a23413ac984f21d82f394"}
{"level":"debug","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db7f8f03bd740daaf3af63f904d919fab07783bc56295eb72a09507201c11699","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:21:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:21:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db7f8f03bd740daaf3af63f904d919fab07783bc56295eb72a09507201c11699"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a511473c4065c5f12229b065946f567e374feb2180a23413ac984f21d82f394"}
{"level":"info","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db7f8f03bd740daaf3af63f904d919fab07783bc56295eb72a09507201c11699","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a511473c4065c5f12229b065946f567e374feb2180a23413ac984f21d82f394","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:21:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:21:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a511473c4065c5f12229b065946f567e374feb2180a23413ac984f21d82f394"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a511473c4065c5f12229b065946f567e374feb2180a23413ac984f21d82f394","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db7f8f03bd740daaf3af63f904d919fab07783bc56295eb72a09507201c11699","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:21:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:21:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db7f8f03bd740daaf3af63f904d919fab07783bc56295eb72a09507201c11699"}
{"level":"info","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db7f8f03bd740daaf3af63f904d919fab07783bc56295eb72a09507201c11699","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a511473c4065c5f12229b065946f567e374feb2180a23413ac984f21d82f394","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:21:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:21:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a511473c4065c5f12229b065946f567e374feb2180a23413ac984f21d82f394","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db7f8f03bd740daaf3af63f904d919fab07783bc56295eb72a09507201c11699","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:21:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:21:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db7f8f03bd740daaf3af63f904d919fab07783bc56295eb72a09507201c11699"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a511473c4065c5f12229b065946f567e374feb2180a23413ac984f21d82f394"}
{"level":"info","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db7f8f03bd740daaf3af63f904d919fab07783bc56295eb72a09507201c11699","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a511473c4065c5f12229b065946f567e374feb2180a23413ac984f21d82f394","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:21:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:21:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a511473c4065c5f12229b065946f567e374feb2180a23413ac984f21d82f394"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db7f8f03bd740daaf3af63f904d919fab07783bc56295eb72a09507201c11699"}
{"level":"info","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a511473c4065c5f12229b065946f567e374feb2180a23413ac984f21d82f394","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe76f97d1d15b6b6962b96c0f0f8afe2bc05f12545773312b34f23e825c81706","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:21:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:21:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe76f97d1d15b6b6962b96c0f0f8afe2bc05f12545773312b34f23e825c81706","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db7f8f03bd740daaf3af63f904d919fab07783bc56295eb72a09507201c11699","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a511473c4065c5f12229b065946f567e374feb2180a23413ac984f21d82f394","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:21:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:21:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a511473c4065c5f12229b065946f567e374feb2180a23413ac984f21d82f394"}
{"level":"info","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a511473c4065c5f12229b065946f567e374feb2180a23413ac984f21d82f394","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe76f97d1d15b6b6962b96c0f0f8afe2bc05f12545773312b34f23e825c81706","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:21:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:21:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe76f97d1d15b6b6962b96c0f0f8afe2bc05f12545773312b34f23e825c81706","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a511473c4065c5f12229b065946f567e374feb2180a23413ac984f21d82f394","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:21:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:21:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a511473c4065c5f12229b065946f567e374feb2180a23413ac984f21d82f394"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe76f97d1d15b6b6962b96c0f0f8afe2bc05f12545773312b34f23e825c81706"}
{"level":"info","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a511473c4065c5f12229b065946f567e374feb2180a23413ac984f21d82f394","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe76f97d1d15b6b6962b96c0f0f8afe2bc05f12545773312b34f23e825c81706","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:21:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:21:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe76f97d1d15b6b6962b96c0f0f8afe2bc05f12545773312b34f23e825c81706"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db7f8f03bd740daaf3af63f904d919fab07783bc56295eb72a09507201c11699"}
{"level":"info","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe76f97d1d15b6b6962b96c0f0f8afe2bc05f12545773312b34f23e825c81706","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a511473c4065c5f12229b065946f567e374feb2180a23413ac984f21d82f394","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:21:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:21:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a511473c4065c5f12229b065946f567e374feb2180a23413ac984f21d82f394","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe76f97d1d15b6b6962b96c0f0f8afe2bc05f12545773312b34f23e825c81706","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a511473c4065c5f12229b065946f567e374feb2180a23413ac984f21d82f394","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a511473c4065c5f12229b065946f567e374feb2180a23413ac984f21d82f394"}
{"level":"debug","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a511473c4065c5f12229b065946f567e374feb2180a23413ac984f21d82f394","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:21:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:21:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a511473c4065c5f12229b065946f567e374feb2180a23413ac984f21d82f394"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a511473c4065c5f12229b065946f567e374feb2180a23413ac984f21d82f394","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a511473c4065c5f12229b065946f567e374feb2180a23413ac984f21d82f394","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe76f97d1d15b6b6962b96c0f0f8afe2bc05f12545773312b34f23e825c81706"}
{"level":"info","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a511473c4065c5f12229b065946f567e374feb2180a23413ac984f21d82f394"}
{"level":"debug","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a5e4dd731dd1660c6e9c12b7a1d3ab8d4e2985fdefc9a6c9c94af4d188b3ba9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:21:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:21:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a5e4dd731dd1660c6e9c12b7a1d3ab8d4e2985fdefc9a6c9c94af4d188b3ba9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a5e4dd731dd1660c6e9c12b7a1d3ab8d4e2985fdefc9a6c9c94af4d188b3ba9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a5e4dd731dd1660c6e9c12b7a1d3ab8d4e2985fdefc9a6c9c94af4d188b3ba9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a5e4dd731dd1660c6e9c12b7a1d3ab8d4e2985fdefc9a6c9c94af4d188b3ba9"}
{"level":"debug","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a5e4dd731dd1660c6e9c12b7a1d3ab8d4e2985fdefc9a6c9c94af4d188b3ba9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a5e4dd731dd1660c6e9c12b7a1d3ab8d4e2985fdefc9a6c9c94af4d188b3ba9"}
{"level":"debug","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a5e4dd731dd1660c6e9c12b7a1d3ab8d4e2985fdefc9a6c9c94af4d188b3ba9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:21:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:21:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a5e4dd731dd1660c6e9c12b7a1d3ab8d4e2985fdefc9a6c9c94af4d188b3ba9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a5e4dd731dd1660c6e9c12b7a1d3ab8d4e2985fdefc9a6c9c94af4d188b3ba9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a5e4dd731dd1660c6e9c12b7a1d3ab8d4e2985fdefc9a6c9c94af4d188b3ba9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8fffc520ca6c91e12cf2396a58cb5880ba7c840c284a804f80f2230d1a12f8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:21:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:21:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8fffc520ca6c91e12cf2396a58cb5880ba7c840c284a804f80f2230d1a12f8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a488d04db255a3614e0ebaf9dbaea1bb6f0d4e6af88c02901ef8cf5c3aa0f169","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:21:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:21:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a5e4dd731dd1660c6e9c12b7a1d3ab8d4e2985fdefc9a6c9c94af4d188b3ba9"}
{"level":"info","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a488d04db255a3614e0ebaf9dbaea1bb6f0d4e6af88c02901ef8cf5c3aa0f169","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8fffc520ca6c91e12cf2396a58cb5880ba7c840c284a804f80f2230d1a12f8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:21:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:21:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8fffc520ca6c91e12cf2396a58cb5880ba7c840c284a804f80f2230d1a12f8f"}
{"level":"info","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8fffc520ca6c91e12cf2396a58cb5880ba7c840c284a804f80f2230d1a12f8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a488d04db255a3614e0ebaf9dbaea1bb6f0d4e6af88c02901ef8cf5c3aa0f169","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:21:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:21:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a488d04db255a3614e0ebaf9dbaea1bb6f0d4e6af88c02901ef8cf5c3aa0f169"}
{"level":"info","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a488d04db255a3614e0ebaf9dbaea1bb6f0d4e6af88c02901ef8cf5c3aa0f169","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8fffc520ca6c91e12cf2396a58cb5880ba7c840c284a804f80f2230d1a12f8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a488d04db255a3614e0ebaf9dbaea1bb6f0d4e6af88c02901ef8cf5c3aa0f169","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:21:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:21:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a488d04db255a3614e0ebaf9dbaea1bb6f0d4e6af88c02901ef8cf5c3aa0f169"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a488d04db255a3614e0ebaf9dbaea1bb6f0d4e6af88c02901ef8cf5c3aa0f169","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a488d04db255a3614e0ebaf9dbaea1bb6f0d4e6af88c02901ef8cf5c3aa0f169","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:21:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:21:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a488d04db255a3614e0ebaf9dbaea1bb6f0d4e6af88c02901ef8cf5c3aa0f169"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8fffc520ca6c91e12cf2396a58cb5880ba7c840c284a804f80f2230d1a12f8f"}
{"level":"error","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a488d04db255a3614e0ebaf9dbaea1bb6f0d4e6af88c02901ef8cf5c3aa0f169","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a488d04db255a3614e0ebaf9dbaea1bb6f0d4e6af88c02901ef8cf5c3aa0f169\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8fffc520ca6c91e12cf2396a58cb5880ba7c840c284a804f80f2230d1a12f8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:21:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:21:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e8fffc520ca6c91e12cf2396a58cb5880ba7c840c284a804f80f2230d1a12f8f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8fffc520ca6c91e12cf2396a58cb5880ba7c840c284a804f80f2230d1a12f8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a488d04db255a3614e0ebaf9dbaea1bb6f0d4e6af88c02901ef8cf5c3aa0f169","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:21:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:21:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a488d04db255a3614e0ebaf9dbaea1bb6f0d4e6af88c02901ef8cf5c3aa0f169"}
{"level":"info","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a488d04db255a3614e0ebaf9dbaea1bb6f0d4e6af88c02901ef8cf5c3aa0f169","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8fffc520ca6c91e12cf2396a58cb5880ba7c840c284a804f80f2230d1a12f8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:21:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:21:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8fffc520ca6c91e12cf2396a58cb5880ba7c840c284a804f80f2230d1a12f8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a488d04db255a3614e0ebaf9dbaea1bb6f0d4e6af88c02901ef8cf5c3aa0f169","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:21:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:21:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a488d04db255a3614e0ebaf9dbaea1bb6f0d4e6af88c02901ef8cf5c3aa0f169"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8fffc520ca6c91e12cf2396a58cb5880ba7c840c284a804f80f2230d1a12f8f"}
{"level":"info","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a488d04db255a3614e0ebaf9dbaea1bb6f0d4e6af88c02901ef8cf5c3aa0f169","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8fffc520ca6c91e12cf2396a58cb5880ba7c840c284a804f80f2230d1a12f8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:21:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:21:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e8fffc520ca6c91e12cf2396a58cb5880ba7c840c284a804f80f2230d1a12f8f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a488d04db255a3614e0ebaf9dbaea1bb6f0d4e6af88c02901ef8cf5c3aa0f169"}
{"level":"info","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8fffc520ca6c91e12cf2396a58cb5880ba7c840c284a804f80f2230d1a12f8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a488d04db255a3614e0ebaf9dbaea1bb6f0d4e6af88c02901ef8cf5c3aa0f169","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8fffc520ca6c91e12cf2396a58cb5880ba7c840c284a804f80f2230d1a12f8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:21:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:21:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8fffc520ca6c91e12cf2396a58cb5880ba7c840c284a804f80f2230d1a12f8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8fffc520ca6c91e12cf2396a58cb5880ba7c840c284a804f80f2230d1a12f8f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8fffc520ca6c91e12cf2396a58cb5880ba7c840c284a804f80f2230d1a12f8f"}
{"level":"debug","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8fffc520ca6c91e12cf2396a58cb5880ba7c840c284a804f80f2230d1a12f8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:21:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:21:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e8fffc520ca6c91e12cf2396a58cb5880ba7c840c284a804f80f2230d1a12f8f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8fffc520ca6c91e12cf2396a58cb5880ba7c840c284a804f80f2230d1a12f8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8fffc520ca6c91e12cf2396a58cb5880ba7c840c284a804f80f2230d1a12f8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dafd4e27b942e2ebbf2f809322a704fab62d6b8ea66403f435ec8c7e365ce106","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:21:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:21:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a488d04db255a3614e0ebaf9dbaea1bb6f0d4e6af88c02901ef8cf5c3aa0f169"}
{"level":"info","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dafd4e27b942e2ebbf2f809322a704fab62d6b8ea66403f435ec8c7e365ce106","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dafd4e27b942e2ebbf2f809322a704fab62d6b8ea66403f435ec8c7e365ce106","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dafd4e27b942e2ebbf2f809322a704fab62d6b8ea66403f435ec8c7e365ce106","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8fffc520ca6c91e12cf2396a58cb5880ba7c840c284a804f80f2230d1a12f8f"}
{"level":"debug","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dafd4e27b942e2ebbf2f809322a704fab62d6b8ea66403f435ec8c7e365ce106","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:21:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:21:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dafd4e27b942e2ebbf2f809322a704fab62d6b8ea66403f435ec8c7e365ce106"}
{"level":"info","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dafd4e27b942e2ebbf2f809322a704fab62d6b8ea66403f435ec8c7e365ce106","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dafd4e27b942e2ebbf2f809322a704fab62d6b8ea66403f435ec8c7e365ce106","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:21:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dafd4e27b942e2ebbf2f809322a704fab62d6b8ea66403f435ec8c7e365ce106"}
{"level":"debug","ts":"2026-07-06T14:21:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dafd4e27b942e2ebbf2f809322a704fab62d6b8ea66403f435ec8c7e365ce106","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:21:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:21:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dafd4e27b942e2ebbf2f809322a704fab62d6b8ea66403f435ec8c7e365ce106"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:21:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dafd4e27b942e2ebbf2f809322a704fab62d6b8ea66403f435ec8c7e365ce106","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dafd4e27b942e2ebbf2f809322a704fab62d6b8ea66403f435ec8c7e365ce106","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:21:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:21:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:21:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dafd4e27b942e2ebbf2f809322a704fab62d6b8ea66403f435ec8c7e365ce106","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dafd4e27b942e2ebbf2f809322a704fab62d6b8ea66403f435ec8c7e365ce106","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dafd4e27b942e2ebbf2f809322a704fab62d6b8ea66403f435ec8c7e365ce106","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:21:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dafd4e27b942e2ebbf2f809322a704fab62d6b8ea66403f435ec8c7e365ce106"}
{"level":"debug","ts":"2026-07-06T14:21:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dafd4e27b942e2ebbf2f809322a704fab62d6b8ea66403f435ec8c7e365ce106","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:21:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dafd4e27b942e2ebbf2f809322a704fab62d6b8ea66403f435ec8c7e365ce106"}
{"level":"debug","ts":"2026-07-06T14:21:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dafd4e27b942e2ebbf2f809322a704fab62d6b8ea66403f435ec8c7e365ce106","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:21:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:21:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dafd4e27b942e2ebbf2f809322a704fab62d6b8ea66403f435ec8c7e365ce106"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:21:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dafd4e27b942e2ebbf2f809322a704fab62d6b8ea66403f435ec8c7e365ce106","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dafd4e27b942e2ebbf2f809322a704fab62d6b8ea66403f435ec8c7e365ce106","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:21:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dafd4e27b942e2ebbf2f809322a704fab62d6b8ea66403f435ec8c7e365ce106"}
{"level":"debug","ts":"2026-07-06T14:21:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2e317dbd1a801aeb436f716e00664d904b68e7240d8a06d0c9739fc5ac64fab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:21:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:21:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:21:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2e317dbd1a801aeb436f716e00664d904b68e7240d8a06d0c9739fc5ac64fab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2e317dbd1a801aeb436f716e00664d904b68e7240d8a06d0c9739fc5ac64fab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:21:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2e317dbd1a801aeb436f716e00664d904b68e7240d8a06d0c9739fc5ac64fab"}
{"level":"debug","ts":"2026-07-06T14:21:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2e317dbd1a801aeb436f716e00664d904b68e7240d8a06d0c9739fc5ac64fab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:21:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2e317dbd1a801aeb436f716e00664d904b68e7240d8a06d0c9739fc5ac64fab"}
{"level":"debug","ts":"2026-07-06T14:21:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2e317dbd1a801aeb436f716e00664d904b68e7240d8a06d0c9739fc5ac64fab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:21:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:21:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f2e317dbd1a801aeb436f716e00664d904b68e7240d8a06d0c9739fc5ac64fab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:21:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2e317dbd1a801aeb436f716e00664d904b68e7240d8a06d0c9739fc5ac64fab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2e317dbd1a801aeb436f716e00664d904b68e7240d8a06d0c9739fc5ac64fab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:21:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2e317dbd1a801aeb436f716e00664d904b68e7240d8a06d0c9739fc5ac64fab"}
{"level":"debug","ts":"2026-07-06T14:21:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf38e6097a654408e0ae46748173c0707b2c18b22f336818ea0e9ef56b3585f5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:21:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf38e6097a654408e0ae46748173c0707b2c18b22f336818ea0e9ef56b3585f5"}
{"level":"debug","ts":"2026-07-06T14:21:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b7ab2371b4d158508fbb8bf0071424bb4c209f7cf46655513c753a786f9d12e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:21:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:21:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:21:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b7ab2371b4d158508fbb8bf0071424bb4c209f7cf46655513c753a786f9d12e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b7ab2371b4d158508fbb8bf0071424bb4c209f7cf46655513c753a786f9d12e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b7ab2371b4d158508fbb8bf0071424bb4c209f7cf46655513c753a786f9d12e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:21:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b7ab2371b4d158508fbb8bf0071424bb4c209f7cf46655513c753a786f9d12e"}
{"level":"debug","ts":"2026-07-06T14:21:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b7ab2371b4d158508fbb8bf0071424bb4c209f7cf46655513c753a786f9d12e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:21:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b7ab2371b4d158508fbb8bf0071424bb4c209f7cf46655513c753a786f9d12e"}
{"level":"debug","ts":"2026-07-06T14:21:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b7ab2371b4d158508fbb8bf0071424bb4c209f7cf46655513c753a786f9d12e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:21:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:21:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b7ab2371b4d158508fbb8bf0071424bb4c209f7cf46655513c753a786f9d12e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:21:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b7ab2371b4d158508fbb8bf0071424bb4c209f7cf46655513c753a786f9d12e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b7ab2371b4d158508fbb8bf0071424bb4c209f7cf46655513c753a786f9d12e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:21:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:21:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:21:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b7ab2371b4d158508fbb8bf0071424bb4c209f7cf46655513c753a786f9d12e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a448e330ca0cb5992c05351abc23eb8ededb28134c25390e9e8943d8ad32123","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b7ab2371b4d158508fbb8bf0071424bb4c209f7cf46655513c753a786f9d12e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b7ab2371b4d158508fbb8bf0071424bb4c209f7cf46655513c753a786f9d12e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:21:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b7ab2371b4d158508fbb8bf0071424bb4c209f7cf46655513c753a786f9d12e"}
{"level":"debug","ts":"2026-07-06T14:21:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b7ab2371b4d158508fbb8bf0071424bb4c209f7cf46655513c753a786f9d12e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:21:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:21:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b7ab2371b4d158508fbb8bf0071424bb4c209f7cf46655513c753a786f9d12e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:21:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a448e330ca0cb5992c05351abc23eb8ededb28134c25390e9e8943d8ad32123"}
{"level":"info","ts":"2026-07-06T14:21:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b7ab2371b4d158508fbb8bf0071424bb4c209f7cf46655513c753a786f9d12e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b7ab2371b4d158508fbb8bf0071424bb4c209f7cf46655513c753a786f9d12e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:21:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:21:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:21:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b7ab2371b4d158508fbb8bf0071424bb4c209f7cf46655513c753a786f9d12e"}
{"level":"info","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b7ab2371b4d158508fbb8bf0071424bb4c209f7cf46655513c753a786f9d12e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b7ab2371b4d158508fbb8bf0071424bb4c209f7cf46655513c753a786f9d12e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b7ab2371b4d158508fbb8bf0071424bb4c209f7cf46655513c753a786f9d12e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b7ab2371b4d158508fbb8bf0071424bb4c209f7cf46655513c753a786f9d12e"}
{"level":"debug","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b7ab2371b4d158508fbb8bf0071424bb4c209f7cf46655513c753a786f9d12e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b7ab2371b4d158508fbb8bf0071424bb4c209f7cf46655513c753a786f9d12e"}
{"level":"debug","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b7ab2371b4d158508fbb8bf0071424bb4c209f7cf46655513c753a786f9d12e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:21:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:21:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b7ab2371b4d158508fbb8bf0071424bb4c209f7cf46655513c753a786f9d12e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b7ab2371b4d158508fbb8bf0071424bb4c209f7cf46655513c753a786f9d12e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b7ab2371b4d158508fbb8bf0071424bb4c209f7cf46655513c753a786f9d12e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b7ab2371b4d158508fbb8bf0071424bb4c209f7cf46655513c753a786f9d12e"}
{"level":"debug","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8fffc520ca6c91e12cf2396a58cb5880ba7c840c284a804f80f2230d1a12f8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:21:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:21:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8fffc520ca6c91e12cf2396a58cb5880ba7c840c284a804f80f2230d1a12f8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8fffc520ca6c91e12cf2396a58cb5880ba7c840c284a804f80f2230d1a12f8f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8fffc520ca6c91e12cf2396a58cb5880ba7c840c284a804f80f2230d1a12f8f"}
{"level":"debug","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8fffc520ca6c91e12cf2396a58cb5880ba7c840c284a804f80f2230d1a12f8f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8fffc520ca6c91e12cf2396a58cb5880ba7c840c284a804f80f2230d1a12f8f"}
{"level":"debug","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8fffc520ca6c91e12cf2396a58cb5880ba7c840c284a804f80f2230d1a12f8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:21:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:21:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e8fffc520ca6c91e12cf2396a58cb5880ba7c840c284a804f80f2230d1a12f8f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8fffc520ca6c91e12cf2396a58cb5880ba7c840c284a804f80f2230d1a12f8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8fffc520ca6c91e12cf2396a58cb5880ba7c840c284a804f80f2230d1a12f8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:21:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:21:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8fffc520ca6c91e12cf2396a58cb5880ba7c840c284a804f80f2230d1a12f8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8fffc520ca6c91e12cf2396a58cb5880ba7c840c284a804f80f2230d1a12f8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8fffc520ca6c91e12cf2396a58cb5880ba7c840c284a804f80f2230d1a12f8f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8fffc520ca6c91e12cf2396a58cb5880ba7c840c284a804f80f2230d1a12f8f"}
{"level":"debug","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8fffc520ca6c91e12cf2396a58cb5880ba7c840c284a804f80f2230d1a12f8f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8fffc520ca6c91e12cf2396a58cb5880ba7c840c284a804f80f2230d1a12f8f"}
{"level":"debug","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dafd4e27b942e2ebbf2f809322a704fab62d6b8ea66403f435ec8c7e365ce106","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:21:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:21:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dafd4e27b942e2ebbf2f809322a704fab62d6b8ea66403f435ec8c7e365ce106","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dafd4e27b942e2ebbf2f809322a704fab62d6b8ea66403f435ec8c7e365ce106","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dafd4e27b942e2ebbf2f809322a704fab62d6b8ea66403f435ec8c7e365ce106","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dafd4e27b942e2ebbf2f809322a704fab62d6b8ea66403f435ec8c7e365ce106"}
{"level":"debug","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8fffc520ca6c91e12cf2396a58cb5880ba7c840c284a804f80f2230d1a12f8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:21:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:21:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e8fffc520ca6c91e12cf2396a58cb5880ba7c840c284a804f80f2230d1a12f8f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dafd4e27b942e2ebbf2f809322a704fab62d6b8ea66403f435ec8c7e365ce106"}
{"level":"info","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8fffc520ca6c91e12cf2396a58cb5880ba7c840c284a804f80f2230d1a12f8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dafd4e27b942e2ebbf2f809322a704fab62d6b8ea66403f435ec8c7e365ce106","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:21:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:21:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dafd4e27b942e2ebbf2f809322a704fab62d6b8ea66403f435ec8c7e365ce106"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dafd4e27b942e2ebbf2f809322a704fab62d6b8ea66403f435ec8c7e365ce106","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8fffc520ca6c91e12cf2396a58cb5880ba7c840c284a804f80f2230d1a12f8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:21:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:21:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8fffc520ca6c91e12cf2396a58cb5880ba7c840c284a804f80f2230d1a12f8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dafd4e27b942e2ebbf2f809322a704fab62d6b8ea66403f435ec8c7e365ce106","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8fffc520ca6c91e12cf2396a58cb5880ba7c840c284a804f80f2230d1a12f8f"}
{"level":"debug","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8fffc520ca6c91e12cf2396a58cb5880ba7c840c284a804f80f2230d1a12f8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:21:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:21:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e8fffc520ca6c91e12cf2396a58cb5880ba7c840c284a804f80f2230d1a12f8f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8fffc520ca6c91e12cf2396a58cb5880ba7c840c284a804f80f2230d1a12f8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8fffc520ca6c91e12cf2396a58cb5880ba7c840c284a804f80f2230d1a12f8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:21:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:21:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e8fffc520ca6c91e12cf2396a58cb5880ba7c840c284a804f80f2230d1a12f8f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e8fffc520ca6c91e12cf2396a58cb5880ba7c840c284a804f80f2230d1a12f8f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e8fffc520ca6c91e12cf2396a58cb5880ba7c840c284a804f80f2230d1a12f8f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8fffc520ca6c91e12cf2396a58cb5880ba7c840c284a804f80f2230d1a12f8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8fffc520ca6c91e12cf2396a58cb5880ba7c840c284a804f80f2230d1a12f8f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dafd4e27b942e2ebbf2f809322a704fab62d6b8ea66403f435ec8c7e365ce106"}
{"level":"info","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8fffc520ca6c91e12cf2396a58cb5880ba7c840c284a804f80f2230d1a12f8f"}
{"level":"debug","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a511473c4065c5f12229b065946f567e374feb2180a23413ac984f21d82f394","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a511473c4065c5f12229b065946f567e374feb2180a23413ac984f21d82f394"}
{"level":"debug","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe76f97d1d15b6b6962b96c0f0f8afe2bc05f12545773312b34f23e825c81706","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:21:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:21:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe76f97d1d15b6b6962b96c0f0f8afe2bc05f12545773312b34f23e825c81706","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe76f97d1d15b6b6962b96c0f0f8afe2bc05f12545773312b34f23e825c81706","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a3e431c2fc8a75cf4ac184ae3e6579b32ddf0274564bac6401ae3804cd920b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe76f97d1d15b6b6962b96c0f0f8afe2bc05f12545773312b34f23e825c81706","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe76f97d1d15b6b6962b96c0f0f8afe2bc05f12545773312b34f23e825c81706"}
{"level":"debug","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe76f97d1d15b6b6962b96c0f0f8afe2bc05f12545773312b34f23e825c81706","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:21:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:21:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe76f97d1d15b6b6962b96c0f0f8afe2bc05f12545773312b34f23e825c81706"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a3e431c2fc8a75cf4ac184ae3e6579b32ddf0274564bac6401ae3804cd920b2"}
{"level":"info","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe76f97d1d15b6b6962b96c0f0f8afe2bc05f12545773312b34f23e825c81706","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe76f97d1d15b6b6962b96c0f0f8afe2bc05f12545773312b34f23e825c81706","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:21:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:21:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe76f97d1d15b6b6962b96c0f0f8afe2bc05f12545773312b34f23e825c81706"}
{"level":"info","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe76f97d1d15b6b6962b96c0f0f8afe2bc05f12545773312b34f23e825c81706","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe76f97d1d15b6b6962b96c0f0f8afe2bc05f12545773312b34f23e825c81706","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe76f97d1d15b6b6962b96c0f0f8afe2bc05f12545773312b34f23e825c81706","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe76f97d1d15b6b6962b96c0f0f8afe2bc05f12545773312b34f23e825c81706"}
{"level":"debug","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe76f97d1d15b6b6962b96c0f0f8afe2bc05f12545773312b34f23e825c81706","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a5e4dd731dd1660c6e9c12b7a1d3ab8d4e2985fdefc9a6c9c94af4d188b3ba9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe76f97d1d15b6b6962b96c0f0f8afe2bc05f12545773312b34f23e825c81706"}
{"level":"debug","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea9f1e8cbf4d6a6bcc37a205a03e6e248ddc251368ce6dec04cb0bb8ccb71a70","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a5e4dd731dd1660c6e9c12b7a1d3ab8d4e2985fdefc9a6c9c94af4d188b3ba9"}
{"level":"debug","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe76f97d1d15b6b6962b96c0f0f8afe2bc05f12545773312b34f23e825c81706","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:21:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:21:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe76f97d1d15b6b6962b96c0f0f8afe2bc05f12545773312b34f23e825c81706"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe76f97d1d15b6b6962b96c0f0f8afe2bc05f12545773312b34f23e825c81706","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe76f97d1d15b6b6962b96c0f0f8afe2bc05f12545773312b34f23e825c81706","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea9f1e8cbf4d6a6bcc37a205a03e6e248ddc251368ce6dec04cb0bb8ccb71a70"}
{"level":"info","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe76f97d1d15b6b6962b96c0f0f8afe2bc05f12545773312b34f23e825c81706"}
{"level":"debug","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"090ac2b0abab191d88609f0d2124610b27c12cd9e93c371e26c09c48744683a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:21:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:21:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"090ac2b0abab191d88609f0d2124610b27c12cd9e93c371e26c09c48744683a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"090ac2b0abab191d88609f0d2124610b27c12cd9e93c371e26c09c48744683a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76faf55deae1b057f34620e3be826809dc6aa86486324b6c130693c51076b844","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"090ac2b0abab191d88609f0d2124610b27c12cd9e93c371e26c09c48744683a8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/090ac2b0abab191d88609f0d2124610b27c12cd9e93c371e26c09c48744683a8"}
{"level":"debug","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a488d04db255a3614e0ebaf9dbaea1bb6f0d4e6af88c02901ef8cf5c3aa0f169","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"090ac2b0abab191d88609f0d2124610b27c12cd9e93c371e26c09c48744683a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:21:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:21:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["090ac2b0abab191d88609f0d2124610b27c12cd9e93c371e26c09c48744683a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76faf55deae1b057f34620e3be826809dc6aa86486324b6c130693c51076b844"}
{"level":"info","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"090ac2b0abab191d88609f0d2124610b27c12cd9e93c371e26c09c48744683a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"090ac2b0abab191d88609f0d2124610b27c12cd9e93c371e26c09c48744683a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:21:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:21:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/090ac2b0abab191d88609f0d2124610b27c12cd9e93c371e26c09c48744683a8"}
{"level":"info","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"090ac2b0abab191d88609f0d2124610b27c12cd9e93c371e26c09c48744683a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db7f8f03bd740daaf3af63f904d919fab07783bc56295eb72a09507201c11699","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"090ac2b0abab191d88609f0d2124610b27c12cd9e93c371e26c09c48744683a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:21:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:21:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["090ac2b0abab191d88609f0d2124610b27c12cd9e93c371e26c09c48744683a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"090ac2b0abab191d88609f0d2124610b27c12cd9e93c371e26c09c48744683a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"090ac2b0abab191d88609f0d2124610b27c12cd9e93c371e26c09c48744683a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:21:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:21:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["090ac2b0abab191d88609f0d2124610b27c12cd9e93c371e26c09c48744683a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a488d04db255a3614e0ebaf9dbaea1bb6f0d4e6af88c02901ef8cf5c3aa0f169"}
{"level":"error","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"090ac2b0abab191d88609f0d2124610b27c12cd9e93c371e26c09c48744683a8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"090ac2b0abab191d88609f0d2124610b27c12cd9e93c371e26c09c48744683a8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"090ac2b0abab191d88609f0d2124610b27c12cd9e93c371e26c09c48744683a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"090ac2b0abab191d88609f0d2124610b27c12cd9e93c371e26c09c48744683a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a400fccd83bd6c1b114618228d4fe6ebc0dcff40c3f2eb5af861d1322fb4c686","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db7f8f03bd740daaf3af63f904d919fab07783bc56295eb72a09507201c11699"}
{"level":"debug","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a972e987d4f62b663a02081eab9fe9be97ca87c4462318dfa0f4441d3204d25","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/090ac2b0abab191d88609f0d2124610b27c12cd9e93c371e26c09c48744683a8"}
{"level":"debug","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"739dee5a24d802653eeb2350023c47c9dd5b8e66f2a2beb285c672ec7016a86a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9c6b69cb37413d2945a868abe01aaf75b30418e2bdd434b9bc9967f5a25dea0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a400fccd83bd6c1b114618228d4fe6ebc0dcff40c3f2eb5af861d1322fb4c686"}
{"level":"info","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a972e987d4f62b663a02081eab9fe9be97ca87c4462318dfa0f4441d3204d25"}
{"level":"info","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/739dee5a24d802653eeb2350023c47c9dd5b8e66f2a2beb285c672ec7016a86a"}
{"level":"debug","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c72acd09bf1079aefb39461b0fd605e7f639ba3fee552d71c339b3cee2534b4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9c6b69cb37413d2945a868abe01aaf75b30418e2bdd434b9bc9967f5a25dea0"}
{"level":"info","ts":"2026-07-06T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c72acd09bf1079aefb39461b0fd605e7f639ba3fee552d71c339b3cee2534b4"}
{"level":"info","ts":"2026-07-06T14:21:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"98b29371-2d4e-4721-ae2f-af4721da68e0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:57240","PortSpecifier":{"PortValue":57240}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"98b29371-2d4e-4721-ae2f-af4721da68e0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0ba2b8.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:21:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"98b29371-2d4e-4721-ae2f-af4721da68e0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:57240","PortSpecifier":{"PortValue":57240}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347695,"nanos":159180071},"http":{"id":"98b29371-2d4e-4721-ae2f-af4721da68e0","method":"POST","headers":{":authority":"e2e-shared-a-0ba2b8.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:21:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"98b29371-2d4e-4721-ae2f-af4721da68e0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T14:21:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"98b29371-2d4e-4721-ae2f-af4721da68e0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d17dc60c-8197-471b-964e-fb38f12d85ba","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=23dc5f28-5320-4b77-a7de-8a9f9a6df124"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/eae81554889a"]}}
{"level":"debug","ts":"2026-07-06T14:21:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"98b29371-2d4e-4721-ae2f-af4721da68e0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/eae81554889a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=23dc5f28-5320-4b77-a7de-8a9f9a6df124"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d17dc60c-8197-471b-964e-fb38f12d85ba","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"76faf55deae1b057f34620e3be826809dc6aa86486324b6c130693c51076b844"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0ba2b8.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:21:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"98b29371-2d4e-4721-ae2f-af4721da68e0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:21:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"98b29371-2d4e-4721-ae2f-af4721da68e0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:21:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"98b29371-2d4e-4721-ae2f-af4721da68e0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0ba2b8/sub-test-model-0ba2b8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:21:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"98b29371-2d4e-4721-ae2f-af4721da68e0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T14:21:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"98b29371-2d4e-4721-ae2f-af4721da68e0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:21:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"98b29371-2d4e-4721-ae2f-af4721da68e0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T14:21:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"98b29371-2d4e-4721-ae2f-af4721da68e0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:21:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"98b29371-2d4e-4721-ae2f-af4721da68e0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:21:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d7cfd6b2-53f7-4a4a-8db1-34178464be51","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:49942","PortSpecifier":{"PortValue":49942}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d7cfd6b2-53f7-4a4a-8db1-34178464be51","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-74bb89.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:21:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d7cfd6b2-53f7-4a4a-8db1-34178464be51","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:49942","PortSpecifier":{"PortValue":49942}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347695,"nanos":196800267},"http":{"id":"d7cfd6b2-53f7-4a4a-8db1-34178464be51","method":"POST","headers":{":authority":"e2e-shared-b-74bb89.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:21:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d7cfd6b2-53f7-4a4a-8db1-34178464be51","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T14:21:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d7cfd6b2-53f7-4a4a-8db1-34178464be51","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d17dc60c-8197-471b-964e-fb38f12d85ba","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=23dc5f28-5320-4b77-a7de-8a9f9a6df124"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/eae81554889a"]}}
{"level":"debug","ts":"2026-07-06T14:21:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d7cfd6b2-53f7-4a4a-8db1-34178464be51","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/eae81554889a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=23dc5f28-5320-4b77-a7de-8a9f9a6df124"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d17dc60c-8197-471b-964e-fb38f12d85ba","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bf38e6097a654408e0ae46748173c0707b2c18b22f336818ea0e9ef56b3585f5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-74bb89.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:21:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d7cfd6b2-53f7-4a4a-8db1-34178464be51","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:21:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d7cfd6b2-53f7-4a4a-8db1-34178464be51","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:21:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d7cfd6b2-53f7-4a4a-8db1-34178464be51","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-74bb89/sub-test-model-74bb89\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:21:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d7cfd6b2-53f7-4a4a-8db1-34178464be51","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T14:21:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d7cfd6b2-53f7-4a4a-8db1-34178464be51","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:21:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d7cfd6b2-53f7-4a4a-8db1-34178464be51","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T14:21:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d7cfd6b2-53f7-4a4a-8db1-34178464be51","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:21:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d7cfd6b2-53f7-4a4a-8db1-34178464be51","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:21:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"34b931d4-af03-4291-9951-5866f726ac68","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:57248","PortSpecifier":{"PortValue":57248}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"34b931d4-af03-4291-9951-5866f726ac68","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-0ba2b8.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:21:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"34b931d4-af03-4291-9951-5866f726ac68","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:57248","PortSpecifier":{"PortValue":57248}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347695,"nanos":234293167},"http":{"id":"34b931d4-af03-4291-9951-5866f726ac68","method":"GET","headers":{":authority":"e2e-shared-a-0ba2b8.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:21:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"34b931d4-af03-4291-9951-5866f726ac68","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1DVp4ikDASjpBAhot_H6SdoK0Bs5FfdSk5pJON3B0OnvVN6YknIwDKpgRZAWd"}
{"level":"debug","ts":"2026-07-06T14:21:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"34b931d4-af03-4291-9951-5866f726ac68","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0ba2b8.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1DVp4ikDASjpBAhot_H6SdoK0Bs5FfdSk5pJON3B0OnvVN6YknIwDKpgRZAWd\"}"}
{"level":"debug","ts":"2026-07-06T14:21:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"34b931d4-af03-4291-9951-5866f726ac68","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0ba2b8.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f2d6c54c-eae9-428e-a0f3-c0e544b75adf","keyName":"e2e-sub-iso-6a8218","subscription":"e2e-a-only-9a9191","tenant":"e2e-shared-a-0ba2b8","userId":"f2d6c54c-eae9-428e-a0f3-c0e544b75adf","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T14:21:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"34b931d4-af03-4291-9951-5866f726ac68","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:21:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"34b931d4-af03-4291-9951-5866f726ac68","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:21:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"34b931d4-af03-4291-9951-5866f726ac68","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:21:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"34b931d4-af03-4291-9951-5866f726ac68","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0ba2b8/sub-test-model-0ba2b8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:21:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"34b931d4-af03-4291-9951-5866f726ac68","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:21:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"34b931d4-af03-4291-9951-5866f726ac68","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-9a9191"}
{"level":"debug","ts":"2026-07-06T14:21:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"34b931d4-af03-4291-9951-5866f726ac68","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T14:21:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"34b931d4-af03-4291-9951-5866f726ac68","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-06T14:21:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"34b931d4-af03-4291-9951-5866f726ac68","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:21:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"34b931d4-af03-4291-9951-5866f726ac68","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:21:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"97fa45a0-4203-4292-9371-cd2ddafa2a8b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:49950","PortSpecifier":{"PortValue":49950}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"97fa45a0-4203-4292-9371-cd2ddafa2a8b","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-74bb89.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:21:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"97fa45a0-4203-4292-9371-cd2ddafa2a8b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:49950","PortSpecifier":{"PortValue":49950}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347695,"nanos":271716264},"http":{"id":"97fa45a0-4203-4292-9371-cd2ddafa2a8b","method":"GET","headers":{":authority":"e2e-shared-b-74bb89.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:21:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"97fa45a0-4203-4292-9371-cd2ddafa2a8b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-15HIpVZAD6VNYSpYJ_u91KEAwz8PPS7ipKRBaIkYjf70u6dcJr7hHQOqqbHmU"}
{"level":"debug","ts":"2026-07-06T14:21:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"97fa45a0-4203-4292-9371-cd2ddafa2a8b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-74bb89.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-15HIpVZAD6VNYSpYJ_u91KEAwz8PPS7ipKRBaIkYjf70u6dcJr7hHQOqqbHmU\"}"}
{"level":"debug","ts":"2026-07-06T14:21:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"97fa45a0-4203-4292-9371-cd2ddafa2a8b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-74bb89.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"27e7bfb3-e8cf-4520-b4b1-fa5982e0c1ad","keyName":"e2e-sub-iso-4b948e","subscription":"e2e-b-only-9a9191","tenant":"e2e-shared-b-74bb89","userId":"27e7bfb3-e8cf-4520-b4b1-fa5982e0c1ad","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T14:21:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"97fa45a0-4203-4292-9371-cd2ddafa2a8b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:21:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"97fa45a0-4203-4292-9371-cd2ddafa2a8b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:21:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"97fa45a0-4203-4292-9371-cd2ddafa2a8b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:21:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"97fa45a0-4203-4292-9371-cd2ddafa2a8b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-74bb89/sub-test-model-74bb89\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:21:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97fa45a0-4203-4292-9371-cd2ddafa2a8b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T14:21:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97fa45a0-4203-4292-9371-cd2ddafa2a8b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:21:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97fa45a0-4203-4292-9371-cd2ddafa2a8b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-9a9191"}
{"level":"debug","ts":"2026-07-06T14:21:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"97fa45a0-4203-4292-9371-cd2ddafa2a8b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-06T14:21:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"97fa45a0-4203-4292-9371-cd2ddafa2a8b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:21:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"97fa45a0-4203-4292-9371-cd2ddafa2a8b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:21:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"47cf6096-fbea-4b90-86d2-3e838282ad4f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:60414","PortSpecifier":{"PortValue":60414}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"47cf6096-fbea-4b90-86d2-3e838282ad4f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0ba2b8.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:21:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"47cf6096-fbea-4b90-86d2-3e838282ad4f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:60414","PortSpecifier":{"PortValue":60414}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347711,"nanos":662013431},"http":{"id":"47cf6096-fbea-4b90-86d2-3e838282ad4f","method":"POST","headers":{":authority":"e2e-shared-a-0ba2b8.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:21:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"47cf6096-fbea-4b90-86d2-3e838282ad4f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T14:21:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"47cf6096-fbea-4b90-86d2-3e838282ad4f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d17dc60c-8197-471b-964e-fb38f12d85ba","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=23dc5f28-5320-4b77-a7de-8a9f9a6df124"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/eae81554889a"]}}
{"level":"debug","ts":"2026-07-06T14:21:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"47cf6096-fbea-4b90-86d2-3e838282ad4f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/eae81554889a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=23dc5f28-5320-4b77-a7de-8a9f9a6df124"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d17dc60c-8197-471b-964e-fb38f12d85ba","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"76faf55deae1b057f34620e3be826809dc6aa86486324b6c130693c51076b844"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0ba2b8.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:21:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47cf6096-fbea-4b90-86d2-3e838282ad4f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:21:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47cf6096-fbea-4b90-86d2-3e838282ad4f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:21:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47cf6096-fbea-4b90-86d2-3e838282ad4f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0ba2b8/sub-test-model-0ba2b8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:21:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"47cf6096-fbea-4b90-86d2-3e838282ad4f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T14:21:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"47cf6096-fbea-4b90-86d2-3e838282ad4f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:21:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"47cf6096-fbea-4b90-86d2-3e838282ad4f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T14:21:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"47cf6096-fbea-4b90-86d2-3e838282ad4f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:21:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"47cf6096-fbea-4b90-86d2-3e838282ad4f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:21:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e4cce767-c9b1-4a37-b9a7-2163f434f704","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:47632","PortSpecifier":{"PortValue":47632}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e4cce767-c9b1-4a37-b9a7-2163f434f704","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-74bb89.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:21:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e4cce767-c9b1-4a37-b9a7-2163f434f704","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:47632","PortSpecifier":{"PortValue":47632}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347711,"nanos":693819678},"http":{"id":"e4cce767-c9b1-4a37-b9a7-2163f434f704","method":"POST","headers":{":authority":"e2e-shared-b-74bb89.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:21:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e4cce767-c9b1-4a37-b9a7-2163f434f704","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T14:21:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e4cce767-c9b1-4a37-b9a7-2163f434f704","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d17dc60c-8197-471b-964e-fb38f12d85ba","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=23dc5f28-5320-4b77-a7de-8a9f9a6df124"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/eae81554889a"]}}
{"level":"debug","ts":"2026-07-06T14:21:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e4cce767-c9b1-4a37-b9a7-2163f434f704","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/eae81554889a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=23dc5f28-5320-4b77-a7de-8a9f9a6df124"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d17dc60c-8197-471b-964e-fb38f12d85ba","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bf38e6097a654408e0ae46748173c0707b2c18b22f336818ea0e9ef56b3585f5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-74bb89.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:21:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4cce767-c9b1-4a37-b9a7-2163f434f704","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:21:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4cce767-c9b1-4a37-b9a7-2163f434f704","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:21:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4cce767-c9b1-4a37-b9a7-2163f434f704","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-74bb89/sub-test-model-74bb89\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:21:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e4cce767-c9b1-4a37-b9a7-2163f434f704","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T14:21:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e4cce767-c9b1-4a37-b9a7-2163f434f704","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:21:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e4cce767-c9b1-4a37-b9a7-2163f434f704","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T14:21:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e4cce767-c9b1-4a37-b9a7-2163f434f704","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:21:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e4cce767-c9b1-4a37-b9a7-2163f434f704","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:21:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3ba771b0-1f32-4824-9525-a99b39c7fbc9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:60430","PortSpecifier":{"PortValue":60430}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3ba771b0-1f32-4824-9525-a99b39c7fbc9","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-0ba2b8.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:21:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3ba771b0-1f32-4824-9525-a99b39c7fbc9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:60430","PortSpecifier":{"PortValue":60430}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347711,"nanos":724049011},"http":{"id":"3ba771b0-1f32-4824-9525-a99b39c7fbc9","method":"POST","headers":{":authority":"e2e-shared-a-0ba2b8.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:21:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3ba771b0-1f32-4824-9525-a99b39c7fbc9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-bG459mZfvzLHM8Sd_h4riV5pw7O5XaCuzovXEI7Re9q08opOwEArCpIeOel9"}
{"level":"debug","ts":"2026-07-06T14:21:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3ba771b0-1f32-4824-9525-a99b39c7fbc9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0ba2b8.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-bG459mZfvzLHM8Sd_h4riV5pw7O5XaCuzovXEI7Re9q08opOwEArCpIeOel9\"}"}
{"level":"debug","ts":"2026-07-06T14:21:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3ba771b0-1f32-4824-9525-a99b39c7fbc9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0ba2b8.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f6fa63dc-9cf2-4365-bc56-a559326835d2","keyName":"e2e-sub-iso-e3b095","subscription":"e2e-shared-sub-e30c10","tenant":"e2e-shared-a-0ba2b8","userId":"f6fa63dc-9cf2-4365-bc56-a559326835d2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T14:21:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3ba771b0-1f32-4824-9525-a99b39c7fbc9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:21:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ba771b0-1f32-4824-9525-a99b39c7fbc9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:21:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ba771b0-1f32-4824-9525-a99b39c7fbc9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:21:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ba771b0-1f32-4824-9525-a99b39c7fbc9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0ba2b8/sub-test-model-0ba2b8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:21:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ba771b0-1f32-4824-9525-a99b39c7fbc9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T14:21:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ba771b0-1f32-4824-9525-a99b39c7fbc9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:21:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ba771b0-1f32-4824-9525-a99b39c7fbc9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-e30c10"}
{"level":"debug","ts":"2026-07-06T14:21:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3ba771b0-1f32-4824-9525-a99b39c7fbc9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-06T14:21:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3ba771b0-1f32-4824-9525-a99b39c7fbc9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:21:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3ba771b0-1f32-4824-9525-a99b39c7fbc9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:21:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e3e22952-8673-4e58-9623-8f186bdaaf8d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:47636","PortSpecifier":{"PortValue":47636}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e3e22952-8673-4e58-9623-8f186bdaaf8d","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-74bb89.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:21:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e3e22952-8673-4e58-9623-8f186bdaaf8d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:47636","PortSpecifier":{"PortValue":47636}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347711,"nanos":751651456},"http":{"id":"e3e22952-8673-4e58-9623-8f186bdaaf8d","method":"POST","headers":{":authority":"e2e-shared-b-74bb89.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:21:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e3e22952-8673-4e58-9623-8f186bdaaf8d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-14gCmJ0uBFZ0COto9_mcNlVpcQSslsiGMsxllzbP9myhk7AVYjYaWRG7VrdIL"}
{"level":"debug","ts":"2026-07-06T14:21:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e3e22952-8673-4e58-9623-8f186bdaaf8d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-74bb89.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-14gCmJ0uBFZ0COto9_mcNlVpcQSslsiGMsxllzbP9myhk7AVYjYaWRG7VrdIL\"}"}
{"level":"debug","ts":"2026-07-06T14:21:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e3e22952-8673-4e58-9623-8f186bdaaf8d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-74bb89.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7b581e92-9d12-422a-bd64-eebeb1366479","keyName":"e2e-sub-iso-db6356","subscription":"e2e-shared-sub-e30c10","tenant":"e2e-shared-b-74bb89","userId":"7b581e92-9d12-422a-bd64-eebeb1366479","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T14:21:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e3e22952-8673-4e58-9623-8f186bdaaf8d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:21:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3e22952-8673-4e58-9623-8f186bdaaf8d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:21:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3e22952-8673-4e58-9623-8f186bdaaf8d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:21:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3e22952-8673-4e58-9623-8f186bdaaf8d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-74bb89/sub-test-model-74bb89\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:21:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3e22952-8673-4e58-9623-8f186bdaaf8d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:21:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3e22952-8673-4e58-9623-8f186bdaaf8d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-e30c10"}
{"level":"debug","ts":"2026-07-06T14:21:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3e22952-8673-4e58-9623-8f186bdaaf8d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T14:21:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e3e22952-8673-4e58-9623-8f186bdaaf8d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-06T14:21:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e3e22952-8673-4e58-9623-8f186bdaaf8d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:21:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e3e22952-8673-4e58-9623-8f186bdaaf8d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:21:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/739dee5a24d802653eeb2350023c47c9dd5b8e66f2a2beb285c672ec7016a86a"}
{"level":"info","ts":"2026-07-06T14:21:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5b7ab2371b4d158508fbb8bf0071424bb4c209f7cf46655513c753a786f9d12e"}
{"level":"info","ts":"2026-07-06T14:21:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8c72acd09bf1079aefb39461b0fd605e7f639ba3fee552d71c339b3cee2534b4"}
{"level":"info","ts":"2026-07-06T14:21:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a488d04db255a3614e0ebaf9dbaea1bb6f0d4e6af88c02901ef8cf5c3aa0f169"}
{"level":"info","ts":"2026-07-06T14:21:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0a5e4dd731dd1660c6e9c12b7a1d3ab8d4e2985fdefc9a6c9c94af4d188b3ba9"}
{"level":"info","ts":"2026-07-06T14:21:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/db7f8f03bd740daaf3af63f904d919fab07783bc56295eb72a09507201c11699"}
{"level":"info","ts":"2026-07-06T14:21:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a400fccd83bd6c1b114618228d4fe6ebc0dcff40c3f2eb5af861d1322fb4c686"}
{"level":"info","ts":"2026-07-06T14:21:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/090ac2b0abab191d88609f0d2124610b27c12cd9e93c371e26c09c48744683a8"}
{"level":"info","ts":"2026-07-06T14:21:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f2e317dbd1a801aeb436f716e00664d904b68e7240d8a06d0c9739fc5ac64fab"}
{"level":"info","ts":"2026-07-06T14:21:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2a511473c4065c5f12229b065946f567e374feb2180a23413ac984f21d82f394"}
{"level":"info","ts":"2026-07-06T14:21:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b9c6b69cb37413d2945a868abe01aaf75b30418e2bdd434b9bc9967f5a25dea0"}
{"level":"info","ts":"2026-07-06T14:21:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6a448e330ca0cb5992c05351abc23eb8ededb28134c25390e9e8943d8ad32123"}
{"level":"info","ts":"2026-07-06T14:21:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9a972e987d4f62b663a02081eab9fe9be97ca87c4462318dfa0f4441d3204d25"}
{"level":"info","ts":"2026-07-06T14:21:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fe76f97d1d15b6b6962b96c0f0f8afe2bc05f12545773312b34f23e825c81706"}
{"level":"info","ts":"2026-07-06T14:21:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e8fffc520ca6c91e12cf2396a58cb5880ba7c840c284a804f80f2230d1a12f8f"}
{"level":"info","ts":"2026-07-06T14:21:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dafd4e27b942e2ebbf2f809322a704fab62d6b8ea66403f435ec8c7e365ce106"}
{"level":"debug","ts":"2026-07-06T14:22:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf730369d5f3c37c1261b87e158d9b6a9a171727c29bdb0a52745663b35d517b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:22:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:22:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf730369d5f3c37c1261b87e158d9b6a9a171727c29bdb0a52745663b35d517b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf730369d5f3c37c1261b87e158d9b6a9a171727c29bdb0a52745663b35d517b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf730369d5f3c37c1261b87e158d9b6a9a171727c29bdb0a52745663b35d517b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:22:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf730369d5f3c37c1261b87e158d9b6a9a171727c29bdb0a52745663b35d517b"}
{"level":"debug","ts":"2026-07-06T14:22:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf730369d5f3c37c1261b87e158d9b6a9a171727c29bdb0a52745663b35d517b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:22:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf730369d5f3c37c1261b87e158d9b6a9a171727c29bdb0a52745663b35d517b"}
{"level":"debug","ts":"2026-07-06T14:22:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf730369d5f3c37c1261b87e158d9b6a9a171727c29bdb0a52745663b35d517b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:22:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:22:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bf730369d5f3c37c1261b87e158d9b6a9a171727c29bdb0a52745663b35d517b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf730369d5f3c37c1261b87e158d9b6a9a171727c29bdb0a52745663b35d517b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf730369d5f3c37c1261b87e158d9b6a9a171727c29bdb0a52745663b35d517b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:22:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:22:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf730369d5f3c37c1261b87e158d9b6a9a171727c29bdb0a52745663b35d517b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf730369d5f3c37c1261b87e158d9b6a9a171727c29bdb0a52745663b35d517b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf730369d5f3c37c1261b87e158d9b6a9a171727c29bdb0a52745663b35d517b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:22:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf730369d5f3c37c1261b87e158d9b6a9a171727c29bdb0a52745663b35d517b"}
{"level":"debug","ts":"2026-07-06T14:22:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf730369d5f3c37c1261b87e158d9b6a9a171727c29bdb0a52745663b35d517b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:22:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf730369d5f3c37c1261b87e158d9b6a9a171727c29bdb0a52745663b35d517b"}
{"level":"debug","ts":"2026-07-06T14:22:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf730369d5f3c37c1261b87e158d9b6a9a171727c29bdb0a52745663b35d517b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:22:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:22:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bf730369d5f3c37c1261b87e158d9b6a9a171727c29bdb0a52745663b35d517b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf730369d5f3c37c1261b87e158d9b6a9a171727c29bdb0a52745663b35d517b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf730369d5f3c37c1261b87e158d9b6a9a171727c29bdb0a52745663b35d517b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:22:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:22:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf730369d5f3c37c1261b87e158d9b6a9a171727c29bdb0a52745663b35d517b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87f1845ee69259073b667258e6f035ca28b848901109f10ba90ba4a97b48fec7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:22:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:22:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf730369d5f3c37c1261b87e158d9b6a9a171727c29bdb0a52745663b35d517b"}
{"level":"info","ts":"2026-07-06T14:22:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87f1845ee69259073b667258e6f035ca28b848901109f10ba90ba4a97b48fec7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf730369d5f3c37c1261b87e158d9b6a9a171727c29bdb0a52745663b35d517b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:22:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:22:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bf730369d5f3c37c1261b87e158d9b6a9a171727c29bdb0a52745663b35d517b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87f1845ee69259073b667258e6f035ca28b848901109f10ba90ba4a97b48fec7"}
{"level":"info","ts":"2026-07-06T14:22:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf730369d5f3c37c1261b87e158d9b6a9a171727c29bdb0a52745663b35d517b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87f1845ee69259073b667258e6f035ca28b848901109f10ba90ba4a97b48fec7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:22:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:22:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["87f1845ee69259073b667258e6f035ca28b848901109f10ba90ba4a97b48fec7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87f1845ee69259073b667258e6f035ca28b848901109f10ba90ba4a97b48fec7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf730369d5f3c37c1261b87e158d9b6a9a171727c29bdb0a52745663b35d517b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:22:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:22:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf730369d5f3c37c1261b87e158d9b6a9a171727c29bdb0a52745663b35d517b"}
{"level":"info","ts":"2026-07-06T14:22:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf730369d5f3c37c1261b87e158d9b6a9a171727c29bdb0a52745663b35d517b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87f1845ee69259073b667258e6f035ca28b848901109f10ba90ba4a97b48fec7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:22:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:22:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87f1845ee69259073b667258e6f035ca28b848901109f10ba90ba4a97b48fec7"}
{"level":"info","ts":"2026-07-06T14:22:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87f1845ee69259073b667258e6f035ca28b848901109f10ba90ba4a97b48fec7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf730369d5f3c37c1261b87e158d9b6a9a171727c29bdb0a52745663b35d517b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87f1845ee69259073b667258e6f035ca28b848901109f10ba90ba4a97b48fec7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:22:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:22:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["87f1845ee69259073b667258e6f035ca28b848901109f10ba90ba4a97b48fec7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf730369d5f3c37c1261b87e158d9b6a9a171727c29bdb0a52745663b35d517b"}
{"level":"info","ts":"2026-07-06T14:22:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87f1845ee69259073b667258e6f035ca28b848901109f10ba90ba4a97b48fec7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf730369d5f3c37c1261b87e158d9b6a9a171727c29bdb0a52745663b35d517b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:22:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:22:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bf730369d5f3c37c1261b87e158d9b6a9a171727c29bdb0a52745663b35d517b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf730369d5f3c37c1261b87e158d9b6a9a171727c29bdb0a52745663b35d517b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87f1845ee69259073b667258e6f035ca28b848901109f10ba90ba4a97b48fec7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:22:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:22:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87f1845ee69259073b667258e6f035ca28b848901109f10ba90ba4a97b48fec7"}
{"level":"info","ts":"2026-07-06T14:22:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87f1845ee69259073b667258e6f035ca28b848901109f10ba90ba4a97b48fec7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf730369d5f3c37c1261b87e158d9b6a9a171727c29bdb0a52745663b35d517b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:22:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:22:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf730369d5f3c37c1261b87e158d9b6a9a171727c29bdb0a52745663b35d517b"}
{"level":"info","ts":"2026-07-06T14:22:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf730369d5f3c37c1261b87e158d9b6a9a171727c29bdb0a52745663b35d517b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87f1845ee69259073b667258e6f035ca28b848901109f10ba90ba4a97b48fec7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf730369d5f3c37c1261b87e158d9b6a9a171727c29bdb0a52745663b35d517b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:22:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:22:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bf730369d5f3c37c1261b87e158d9b6a9a171727c29bdb0a52745663b35d517b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87f1845ee69259073b667258e6f035ca28b848901109f10ba90ba4a97b48fec7"}
{"level":"info","ts":"2026-07-06T14:22:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf730369d5f3c37c1261b87e158d9b6a9a171727c29bdb0a52745663b35d517b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87f1845ee69259073b667258e6f035ca28b848901109f10ba90ba4a97b48fec7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:22:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:22:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["87f1845ee69259073b667258e6f035ca28b848901109f10ba90ba4a97b48fec7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87f1845ee69259073b667258e6f035ca28b848901109f10ba90ba4a97b48fec7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf730369d5f3c37c1261b87e158d9b6a9a171727c29bdb0a52745663b35d517b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:22:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:22:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf730369d5f3c37c1261b87e158d9b6a9a171727c29bdb0a52745663b35d517b"}
{"level":"info","ts":"2026-07-06T14:22:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf730369d5f3c37c1261b87e158d9b6a9a171727c29bdb0a52745663b35d517b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87f1845ee69259073b667258e6f035ca28b848901109f10ba90ba4a97b48fec7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:22:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:22:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87f1845ee69259073b667258e6f035ca28b848901109f10ba90ba4a97b48fec7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf730369d5f3c37c1261b87e158d9b6a9a171727c29bdb0a52745663b35d517b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:22:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:22:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bf730369d5f3c37c1261b87e158d9b6a9a171727c29bdb0a52745663b35d517b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87f1845ee69259073b667258e6f035ca28b848901109f10ba90ba4a97b48fec7"}
{"level":"info","ts":"2026-07-06T14:22:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf730369d5f3c37c1261b87e158d9b6a9a171727c29bdb0a52745663b35d517b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91472444948da42303c9b063d8fd0d9a1cbf0e82eb24b5820a808fa11b4bd06f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:22:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:22:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf730369d5f3c37c1261b87e158d9b6a9a171727c29bdb0a52745663b35d517b"}
{"level":"info","ts":"2026-07-06T14:22:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91472444948da42303c9b063d8fd0d9a1cbf0e82eb24b5820a808fa11b4bd06f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87f1845ee69259073b667258e6f035ca28b848901109f10ba90ba4a97b48fec7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:22:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:22:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["87f1845ee69259073b667258e6f035ca28b848901109f10ba90ba4a97b48fec7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87f1845ee69259073b667258e6f035ca28b848901109f10ba90ba4a97b48fec7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf730369d5f3c37c1261b87e158d9b6a9a171727c29bdb0a52745663b35d517b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91472444948da42303c9b063d8fd0d9a1cbf0e82eb24b5820a808fa11b4bd06f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:22:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:22:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91472444948da42303c9b063d8fd0d9a1cbf0e82eb24b5820a808fa11b4bd06f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87f1845ee69259073b667258e6f035ca28b848901109f10ba90ba4a97b48fec7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91472444948da42303c9b063d8fd0d9a1cbf0e82eb24b5820a808fa11b4bd06f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:22:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91472444948da42303c9b063d8fd0d9a1cbf0e82eb24b5820a808fa11b4bd06f"}
{"level":"debug","ts":"2026-07-06T14:22:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91472444948da42303c9b063d8fd0d9a1cbf0e82eb24b5820a808fa11b4bd06f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:22:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:22:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91472444948da42303c9b063d8fd0d9a1cbf0e82eb24b5820a808fa11b4bd06f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91472444948da42303c9b063d8fd0d9a1cbf0e82eb24b5820a808fa11b4bd06f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91472444948da42303c9b063d8fd0d9a1cbf0e82eb24b5820a808fa11b4bd06f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:22:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87f1845ee69259073b667258e6f035ca28b848901109f10ba90ba4a97b48fec7"}
{"level":"info","ts":"2026-07-06T14:22:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf730369d5f3c37c1261b87e158d9b6a9a171727c29bdb0a52745663b35d517b"}
{"level":"info","ts":"2026-07-06T14:22:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91472444948da42303c9b063d8fd0d9a1cbf0e82eb24b5820a808fa11b4bd06f"}
{"level":"debug","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc9d3fd94c423830eed0ccd0cd9a8a020ff6217b53b8491b04ce6ba379aaea79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:22:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:22:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc9d3fd94c423830eed0ccd0cd9a8a020ff6217b53b8491b04ce6ba379aaea79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc9d3fd94c423830eed0ccd0cd9a8a020ff6217b53b8491b04ce6ba379aaea79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc9d3fd94c423830eed0ccd0cd9a8a020ff6217b53b8491b04ce6ba379aaea79","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc9d3fd94c423830eed0ccd0cd9a8a020ff6217b53b8491b04ce6ba379aaea79"}
{"level":"debug","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc9d3fd94c423830eed0ccd0cd9a8a020ff6217b53b8491b04ce6ba379aaea79","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc9d3fd94c423830eed0ccd0cd9a8a020ff6217b53b8491b04ce6ba379aaea79"}
{"level":"debug","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc9d3fd94c423830eed0ccd0cd9a8a020ff6217b53b8491b04ce6ba379aaea79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:22:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:22:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc9d3fd94c423830eed0ccd0cd9a8a020ff6217b53b8491b04ce6ba379aaea79"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc9d3fd94c423830eed0ccd0cd9a8a020ff6217b53b8491b04ce6ba379aaea79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc9d3fd94c423830eed0ccd0cd9a8a020ff6217b53b8491b04ce6ba379aaea79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:22:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:22:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc9d3fd94c423830eed0ccd0cd9a8a020ff6217b53b8491b04ce6ba379aaea79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16a692d19ddb9cc3384fbcd99004fe895c63b5429f44e82a10811ed0ae35bad8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:22:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:22:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc9d3fd94c423830eed0ccd0cd9a8a020ff6217b53b8491b04ce6ba379aaea79"}
{"level":"info","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16a692d19ddb9cc3384fbcd99004fe895c63b5429f44e82a10811ed0ae35bad8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc9d3fd94c423830eed0ccd0cd9a8a020ff6217b53b8491b04ce6ba379aaea79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:22:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:22:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc9d3fd94c423830eed0ccd0cd9a8a020ff6217b53b8491b04ce6ba379aaea79"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16a692d19ddb9cc3384fbcd99004fe895c63b5429f44e82a10811ed0ae35bad8"}
{"level":"info","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc9d3fd94c423830eed0ccd0cd9a8a020ff6217b53b8491b04ce6ba379aaea79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16a692d19ddb9cc3384fbcd99004fe895c63b5429f44e82a10811ed0ae35bad8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:22:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:22:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["16a692d19ddb9cc3384fbcd99004fe895c63b5429f44e82a10811ed0ae35bad8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16a692d19ddb9cc3384fbcd99004fe895c63b5429f44e82a10811ed0ae35bad8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc9d3fd94c423830eed0ccd0cd9a8a020ff6217b53b8491b04ce6ba379aaea79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:22:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:22:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc9d3fd94c423830eed0ccd0cd9a8a020ff6217b53b8491b04ce6ba379aaea79"}
{"level":"info","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc9d3fd94c423830eed0ccd0cd9a8a020ff6217b53b8491b04ce6ba379aaea79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16a692d19ddb9cc3384fbcd99004fe895c63b5429f44e82a10811ed0ae35bad8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:22:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:22:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16a692d19ddb9cc3384fbcd99004fe895c63b5429f44e82a10811ed0ae35bad8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc9d3fd94c423830eed0ccd0cd9a8a020ff6217b53b8491b04ce6ba379aaea79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:22:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:22:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc9d3fd94c423830eed0ccd0cd9a8a020ff6217b53b8491b04ce6ba379aaea79"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16a692d19ddb9cc3384fbcd99004fe895c63b5429f44e82a10811ed0ae35bad8"}
{"level":"info","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc9d3fd94c423830eed0ccd0cd9a8a020ff6217b53b8491b04ce6ba379aaea79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16a692d19ddb9cc3384fbcd99004fe895c63b5429f44e82a10811ed0ae35bad8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:22:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:22:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["16a692d19ddb9cc3384fbcd99004fe895c63b5429f44e82a10811ed0ae35bad8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc9d3fd94c423830eed0ccd0cd9a8a020ff6217b53b8491b04ce6ba379aaea79"}
{"level":"info","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16a692d19ddb9cc3384fbcd99004fe895c63b5429f44e82a10811ed0ae35bad8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc9d3fd94c423830eed0ccd0cd9a8a020ff6217b53b8491b04ce6ba379aaea79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16a692d19ddb9cc3384fbcd99004fe895c63b5429f44e82a10811ed0ae35bad8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:22:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:22:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16a692d19ddb9cc3384fbcd99004fe895c63b5429f44e82a10811ed0ae35bad8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16a692d19ddb9cc3384fbcd99004fe895c63b5429f44e82a10811ed0ae35bad8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16a692d19ddb9cc3384fbcd99004fe895c63b5429f44e82a10811ed0ae35bad8"}
{"level":"debug","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16a692d19ddb9cc3384fbcd99004fe895c63b5429f44e82a10811ed0ae35bad8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:22:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:22:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["16a692d19ddb9cc3384fbcd99004fe895c63b5429f44e82a10811ed0ae35bad8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16a692d19ddb9cc3384fbcd99004fe895c63b5429f44e82a10811ed0ae35bad8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16a692d19ddb9cc3384fbcd99004fe895c63b5429f44e82a10811ed0ae35bad8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc9d3fd94c423830eed0ccd0cd9a8a020ff6217b53b8491b04ce6ba379aaea79"}
{"level":"info","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16a692d19ddb9cc3384fbcd99004fe895c63b5429f44e82a10811ed0ae35bad8"}
{"level":"debug","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2789ce85c9a3dd3231e7434edebb29afb4709948aa6fec4967153aad8c1ac858","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:22:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:22:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2789ce85c9a3dd3231e7434edebb29afb4709948aa6fec4967153aad8c1ac858","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2789ce85c9a3dd3231e7434edebb29afb4709948aa6fec4967153aad8c1ac858","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2789ce85c9a3dd3231e7434edebb29afb4709948aa6fec4967153aad8c1ac858","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2789ce85c9a3dd3231e7434edebb29afb4709948aa6fec4967153aad8c1ac858"}
{"level":"debug","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2789ce85c9a3dd3231e7434edebb29afb4709948aa6fec4967153aad8c1ac858","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2789ce85c9a3dd3231e7434edebb29afb4709948aa6fec4967153aad8c1ac858"}
{"level":"debug","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2789ce85c9a3dd3231e7434edebb29afb4709948aa6fec4967153aad8c1ac858","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:22:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:22:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2789ce85c9a3dd3231e7434edebb29afb4709948aa6fec4967153aad8c1ac858"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2789ce85c9a3dd3231e7434edebb29afb4709948aa6fec4967153aad8c1ac858","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2789ce85c9a3dd3231e7434edebb29afb4709948aa6fec4967153aad8c1ac858","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:22:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:22:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2789ce85c9a3dd3231e7434edebb29afb4709948aa6fec4967153aad8c1ac858","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c240611a65c30ac39b315ef6bd54fa9dce18100caf9c41d50a191b001227841","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:22:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:22:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2789ce85c9a3dd3231e7434edebb29afb4709948aa6fec4967153aad8c1ac858"}
{"level":"info","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c240611a65c30ac39b315ef6bd54fa9dce18100caf9c41d50a191b001227841","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2789ce85c9a3dd3231e7434edebb29afb4709948aa6fec4967153aad8c1ac858","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:22:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:22:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2789ce85c9a3dd3231e7434edebb29afb4709948aa6fec4967153aad8c1ac858"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2789ce85c9a3dd3231e7434edebb29afb4709948aa6fec4967153aad8c1ac858","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c240611a65c30ac39b315ef6bd54fa9dce18100caf9c41d50a191b001227841","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:22:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:22:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c240611a65c30ac39b315ef6bd54fa9dce18100caf9c41d50a191b001227841"}
{"level":"info","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c240611a65c30ac39b315ef6bd54fa9dce18100caf9c41d50a191b001227841","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2789ce85c9a3dd3231e7434edebb29afb4709948aa6fec4967153aad8c1ac858","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:22:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:22:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2789ce85c9a3dd3231e7434edebb29afb4709948aa6fec4967153aad8c1ac858"}
{"level":"info","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2789ce85c9a3dd3231e7434edebb29afb4709948aa6fec4967153aad8c1ac858","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c240611a65c30ac39b315ef6bd54fa9dce18100caf9c41d50a191b001227841","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2789ce85c9a3dd3231e7434edebb29afb4709948aa6fec4967153aad8c1ac858","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:22:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:22:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2789ce85c9a3dd3231e7434edebb29afb4709948aa6fec4967153aad8c1ac858"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2789ce85c9a3dd3231e7434edebb29afb4709948aa6fec4967153aad8c1ac858","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2789ce85c9a3dd3231e7434edebb29afb4709948aa6fec4967153aad8c1ac858","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:22:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:22:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2789ce85c9a3dd3231e7434edebb29afb4709948aa6fec4967153aad8c1ac858"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c240611a65c30ac39b315ef6bd54fa9dce18100caf9c41d50a191b001227841"}
{"level":"error","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2789ce85c9a3dd3231e7434edebb29afb4709948aa6fec4967153aad8c1ac858","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2789ce85c9a3dd3231e7434edebb29afb4709948aa6fec4967153aad8c1ac858\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c240611a65c30ac39b315ef6bd54fa9dce18100caf9c41d50a191b001227841","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:22:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:22:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4c240611a65c30ac39b315ef6bd54fa9dce18100caf9c41d50a191b001227841"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c240611a65c30ac39b315ef6bd54fa9dce18100caf9c41d50a191b001227841","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2789ce85c9a3dd3231e7434edebb29afb4709948aa6fec4967153aad8c1ac858","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:22:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:22:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2789ce85c9a3dd3231e7434edebb29afb4709948aa6fec4967153aad8c1ac858"}
{"level":"info","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2789ce85c9a3dd3231e7434edebb29afb4709948aa6fec4967153aad8c1ac858","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0a6d7088f58f1b95dde053a38c79dbbb516bfd92d5dd29a031e5e3175d7635a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:22:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:22:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0a6d7088f58f1b95dde053a38c79dbbb516bfd92d5dd29a031e5e3175d7635a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c240611a65c30ac39b315ef6bd54fa9dce18100caf9c41d50a191b001227841","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2789ce85c9a3dd3231e7434edebb29afb4709948aa6fec4967153aad8c1ac858","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:22:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:22:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2789ce85c9a3dd3231e7434edebb29afb4709948aa6fec4967153aad8c1ac858"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0a6d7088f58f1b95dde053a38c79dbbb516bfd92d5dd29a031e5e3175d7635a"}
{"level":"info","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2789ce85c9a3dd3231e7434edebb29afb4709948aa6fec4967153aad8c1ac858","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0a6d7088f58f1b95dde053a38c79dbbb516bfd92d5dd29a031e5e3175d7635a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:22:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:22:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0a6d7088f58f1b95dde053a38c79dbbb516bfd92d5dd29a031e5e3175d7635a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c240611a65c30ac39b315ef6bd54fa9dce18100caf9c41d50a191b001227841"}
{"level":"info","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0a6d7088f58f1b95dde053a38c79dbbb516bfd92d5dd29a031e5e3175d7635a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2789ce85c9a3dd3231e7434edebb29afb4709948aa6fec4967153aad8c1ac858","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:22:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:22:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2789ce85c9a3dd3231e7434edebb29afb4709948aa6fec4967153aad8c1ac858","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0a6d7088f58f1b95dde053a38c79dbbb516bfd92d5dd29a031e5e3175d7635a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2789ce85c9a3dd3231e7434edebb29afb4709948aa6fec4967153aad8c1ac858","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2789ce85c9a3dd3231e7434edebb29afb4709948aa6fec4967153aad8c1ac858","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2789ce85c9a3dd3231e7434edebb29afb4709948aa6fec4967153aad8c1ac858"}
{"level":"debug","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2789ce85c9a3dd3231e7434edebb29afb4709948aa6fec4967153aad8c1ac858","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:22:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:22:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2789ce85c9a3dd3231e7434edebb29afb4709948aa6fec4967153aad8c1ac858"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0a6d7088f58f1b95dde053a38c79dbbb516bfd92d5dd29a031e5e3175d7635a"}
{"level":"info","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2789ce85c9a3dd3231e7434edebb29afb4709948aa6fec4967153aad8c1ac858","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2789ce85c9a3dd3231e7434edebb29afb4709948aa6fec4967153aad8c1ac858","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:22:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:22:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2789ce85c9a3dd3231e7434edebb29afb4709948aa6fec4967153aad8c1ac858"}
{"level":"info","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2789ce85c9a3dd3231e7434edebb29afb4709948aa6fec4967153aad8c1ac858","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2789ce85c9a3dd3231e7434edebb29afb4709948aa6fec4967153aad8c1ac858","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2789ce85c9a3dd3231e7434edebb29afb4709948aa6fec4967153aad8c1ac858","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2789ce85c9a3dd3231e7434edebb29afb4709948aa6fec4967153aad8c1ac858"}
{"level":"debug","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2789ce85c9a3dd3231e7434edebb29afb4709948aa6fec4967153aad8c1ac858","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2789ce85c9a3dd3231e7434edebb29afb4709948aa6fec4967153aad8c1ac858"}
{"level":"debug","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2789ce85c9a3dd3231e7434edebb29afb4709948aa6fec4967153aad8c1ac858","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:22:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:22:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2789ce85c9a3dd3231e7434edebb29afb4709948aa6fec4967153aad8c1ac858"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2789ce85c9a3dd3231e7434edebb29afb4709948aa6fec4967153aad8c1ac858","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2789ce85c9a3dd3231e7434edebb29afb4709948aa6fec4967153aad8c1ac858","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:22:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:22:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2789ce85c9a3dd3231e7434edebb29afb4709948aa6fec4967153aad8c1ac858","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2789ce85c9a3dd3231e7434edebb29afb4709948aa6fec4967153aad8c1ac858","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2789ce85c9a3dd3231e7434edebb29afb4709948aa6fec4967153aad8c1ac858","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2789ce85c9a3dd3231e7434edebb29afb4709948aa6fec4967153aad8c1ac858"}
{"level":"debug","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2789ce85c9a3dd3231e7434edebb29afb4709948aa6fec4967153aad8c1ac858","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2789ce85c9a3dd3231e7434edebb29afb4709948aa6fec4967153aad8c1ac858"}
{"level":"debug","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2789ce85c9a3dd3231e7434edebb29afb4709948aa6fec4967153aad8c1ac858","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:22:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:22:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2789ce85c9a3dd3231e7434edebb29afb4709948aa6fec4967153aad8c1ac858"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2789ce85c9a3dd3231e7434edebb29afb4709948aa6fec4967153aad8c1ac858","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2789ce85c9a3dd3231e7434edebb29afb4709948aa6fec4967153aad8c1ac858","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:22:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:22:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2789ce85c9a3dd3231e7434edebb29afb4709948aa6fec4967153aad8c1ac858","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2789ce85c9a3dd3231e7434edebb29afb4709948aa6fec4967153aad8c1ac858","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2789ce85c9a3dd3231e7434edebb29afb4709948aa6fec4967153aad8c1ac858","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2789ce85c9a3dd3231e7434edebb29afb4709948aa6fec4967153aad8c1ac858"}
{"level":"debug","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2789ce85c9a3dd3231e7434edebb29afb4709948aa6fec4967153aad8c1ac858","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:22:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2789ce85c9a3dd3231e7434edebb29afb4709948aa6fec4967153aad8c1ac858"}
{"level":"debug","ts":"2026-07-06T14:22:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2789ce85c9a3dd3231e7434edebb29afb4709948aa6fec4967153aad8c1ac858","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:22:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:22:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2789ce85c9a3dd3231e7434edebb29afb4709948aa6fec4967153aad8c1ac858"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2789ce85c9a3dd3231e7434edebb29afb4709948aa6fec4967153aad8c1ac858","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2789ce85c9a3dd3231e7434edebb29afb4709948aa6fec4967153aad8c1ac858","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:22:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2789ce85c9a3dd3231e7434edebb29afb4709948aa6fec4967153aad8c1ac858"}
{"level":"debug","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9576128729397dc2f57070fef223c901613721fd7675d8bd48d04a68f9dde6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:22:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:22:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9576128729397dc2f57070fef223c901613721fd7675d8bd48d04a68f9dde6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9576128729397dc2f57070fef223c901613721fd7675d8bd48d04a68f9dde6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9576128729397dc2f57070fef223c901613721fd7675d8bd48d04a68f9dde6c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9576128729397dc2f57070fef223c901613721fd7675d8bd48d04a68f9dde6c"}
{"level":"debug","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9576128729397dc2f57070fef223c901613721fd7675d8bd48d04a68f9dde6c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9576128729397dc2f57070fef223c901613721fd7675d8bd48d04a68f9dde6c"}
{"level":"debug","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9576128729397dc2f57070fef223c901613721fd7675d8bd48d04a68f9dde6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:22:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:22:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9576128729397dc2f57070fef223c901613721fd7675d8bd48d04a68f9dde6c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9576128729397dc2f57070fef223c901613721fd7675d8bd48d04a68f9dde6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9576128729397dc2f57070fef223c901613721fd7675d8bd48d04a68f9dde6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:22:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:22:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9576128729397dc2f57070fef223c901613721fd7675d8bd48d04a68f9dde6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0e64d14bd75d344fdeda26d8b1cd0396540b39e1b65b5064bea74b11b465d50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:22:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:22:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9576128729397dc2f57070fef223c901613721fd7675d8bd48d04a68f9dde6c"}
{"level":"info","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0e64d14bd75d344fdeda26d8b1cd0396540b39e1b65b5064bea74b11b465d50","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9576128729397dc2f57070fef223c901613721fd7675d8bd48d04a68f9dde6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:22:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:22:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9576128729397dc2f57070fef223c901613721fd7675d8bd48d04a68f9dde6c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9576128729397dc2f57070fef223c901613721fd7675d8bd48d04a68f9dde6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0e64d14bd75d344fdeda26d8b1cd0396540b39e1b65b5064bea74b11b465d50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:22:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:22:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0e64d14bd75d344fdeda26d8b1cd0396540b39e1b65b5064bea74b11b465d50"}
{"level":"info","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0e64d14bd75d344fdeda26d8b1cd0396540b39e1b65b5064bea74b11b465d50","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9576128729397dc2f57070fef223c901613721fd7675d8bd48d04a68f9dde6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:22:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:22:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9576128729397dc2f57070fef223c901613721fd7675d8bd48d04a68f9dde6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0e64d14bd75d344fdeda26d8b1cd0396540b39e1b65b5064bea74b11b465d50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:22:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:22:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0e64d14bd75d344fdeda26d8b1cd0396540b39e1b65b5064bea74b11b465d50"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9576128729397dc2f57070fef223c901613721fd7675d8bd48d04a68f9dde6c"}
{"level":"info","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0e64d14bd75d344fdeda26d8b1cd0396540b39e1b65b5064bea74b11b465d50","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9576128729397dc2f57070fef223c901613721fd7675d8bd48d04a68f9dde6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:22:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:22:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9576128729397dc2f57070fef223c901613721fd7675d8bd48d04a68f9dde6c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0e64d14bd75d344fdeda26d8b1cd0396540b39e1b65b5064bea74b11b465d50"}
{"level":"info","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9576128729397dc2f57070fef223c901613721fd7675d8bd48d04a68f9dde6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0e64d14bd75d344fdeda26d8b1cd0396540b39e1b65b5064bea74b11b465d50","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9576128729397dc2f57070fef223c901613721fd7675d8bd48d04a68f9dde6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:22:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:22:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9576128729397dc2f57070fef223c901613721fd7675d8bd48d04a68f9dde6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9576128729397dc2f57070fef223c901613721fd7675d8bd48d04a68f9dde6c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9576128729397dc2f57070fef223c901613721fd7675d8bd48d04a68f9dde6c"}
{"level":"debug","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9576128729397dc2f57070fef223c901613721fd7675d8bd48d04a68f9dde6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:22:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:22:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9576128729397dc2f57070fef223c901613721fd7675d8bd48d04a68f9dde6c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9576128729397dc2f57070fef223c901613721fd7675d8bd48d04a68f9dde6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9576128729397dc2f57070fef223c901613721fd7675d8bd48d04a68f9dde6c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0e64d14bd75d344fdeda26d8b1cd0396540b39e1b65b5064bea74b11b465d50"}
{"level":"info","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9576128729397dc2f57070fef223c901613721fd7675d8bd48d04a68f9dde6c"}
{"level":"debug","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32b5dad0fe07ab53010635e9ce0826a2c22e53bf49c2547e82d778acc77a208d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:22:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:22:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32b5dad0fe07ab53010635e9ce0826a2c22e53bf49c2547e82d778acc77a208d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f187f8130e51d088ac6fff8f66dfd80adcbf5373f61633e84367c408d715095","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:22:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:22:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32b5dad0fe07ab53010635e9ce0826a2c22e53bf49c2547e82d778acc77a208d"}
{"level":"info","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f187f8130e51d088ac6fff8f66dfd80adcbf5373f61633e84367c408d715095","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32b5dad0fe07ab53010635e9ce0826a2c22e53bf49c2547e82d778acc77a208d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:22:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:22:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32b5dad0fe07ab53010635e9ce0826a2c22e53bf49c2547e82d778acc77a208d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f187f8130e51d088ac6fff8f66dfd80adcbf5373f61633e84367c408d715095"}
{"level":"info","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32b5dad0fe07ab53010635e9ce0826a2c22e53bf49c2547e82d778acc77a208d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f187f8130e51d088ac6fff8f66dfd80adcbf5373f61633e84367c408d715095","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:22:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:22:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f187f8130e51d088ac6fff8f66dfd80adcbf5373f61633e84367c408d715095"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f187f8130e51d088ac6fff8f66dfd80adcbf5373f61633e84367c408d715095","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32b5dad0fe07ab53010635e9ce0826a2c22e53bf49c2547e82d778acc77a208d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:22:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:22:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32b5dad0fe07ab53010635e9ce0826a2c22e53bf49c2547e82d778acc77a208d"}
{"level":"info","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32b5dad0fe07ab53010635e9ce0826a2c22e53bf49c2547e82d778acc77a208d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f187f8130e51d088ac6fff8f66dfd80adcbf5373f61633e84367c408d715095","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:22:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:22:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f187f8130e51d088ac6fff8f66dfd80adcbf5373f61633e84367c408d715095"}
{"level":"info","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f187f8130e51d088ac6fff8f66dfd80adcbf5373f61633e84367c408d715095","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32b5dad0fe07ab53010635e9ce0826a2c22e53bf49c2547e82d778acc77a208d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f187f8130e51d088ac6fff8f66dfd80adcbf5373f61633e84367c408d715095","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:22:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:22:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f187f8130e51d088ac6fff8f66dfd80adcbf5373f61633e84367c408d715095"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f187f8130e51d088ac6fff8f66dfd80adcbf5373f61633e84367c408d715095","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32b5dad0fe07ab53010635e9ce0826a2c22e53bf49c2547e82d778acc77a208d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f187f8130e51d088ac6fff8f66dfd80adcbf5373f61633e84367c408d715095","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:22:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:22:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f187f8130e51d088ac6fff8f66dfd80adcbf5373f61633e84367c408d715095"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9f187f8130e51d088ac6fff8f66dfd80adcbf5373f61633e84367c408d715095","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9f187f8130e51d088ac6fff8f66dfd80adcbf5373f61633e84367c408d715095\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f187f8130e51d088ac6fff8f66dfd80adcbf5373f61633e84367c408d715095","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32b5dad0fe07ab53010635e9ce0826a2c22e53bf49c2547e82d778acc77a208d"}
{"level":"debug","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f187f8130e51d088ac6fff8f66dfd80adcbf5373f61633e84367c408d715095","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:22:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:22:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f187f8130e51d088ac6fff8f66dfd80adcbf5373f61633e84367c408d715095","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32b5dad0fe07ab53010635e9ce0826a2c22e53bf49c2547e82d778acc77a208d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:22:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:22:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32b5dad0fe07ab53010635e9ce0826a2c22e53bf49c2547e82d778acc77a208d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f187f8130e51d088ac6fff8f66dfd80adcbf5373f61633e84367c408d715095"}
{"level":"info","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32b5dad0fe07ab53010635e9ce0826a2c22e53bf49c2547e82d778acc77a208d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f187f8130e51d088ac6fff8f66dfd80adcbf5373f61633e84367c408d715095","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32b5dad0fe07ab53010635e9ce0826a2c22e53bf49c2547e82d778acc77a208d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f187f8130e51d088ac6fff8f66dfd80adcbf5373f61633e84367c408d715095"}
{"level":"debug","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f187f8130e51d088ac6fff8f66dfd80adcbf5373f61633e84367c408d715095","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:22:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:22:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f187f8130e51d088ac6fff8f66dfd80adcbf5373f61633e84367c408d715095"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f187f8130e51d088ac6fff8f66dfd80adcbf5373f61633e84367c408d715095","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f187f8130e51d088ac6fff8f66dfd80adcbf5373f61633e84367c408d715095","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32b5dad0fe07ab53010635e9ce0826a2c22e53bf49c2547e82d778acc77a208d"}
{"level":"info","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f187f8130e51d088ac6fff8f66dfd80adcbf5373f61633e84367c408d715095"}
{"level":"debug","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"512020f6f2ccbed4eefe7b06f23efa4e0a37ec6439985924599cbcba816ba848","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:22:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:22:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"512020f6f2ccbed4eefe7b06f23efa4e0a37ec6439985924599cbcba816ba848","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"512020f6f2ccbed4eefe7b06f23efa4e0a37ec6439985924599cbcba816ba848","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:22:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:22:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/512020f6f2ccbed4eefe7b06f23efa4e0a37ec6439985924599cbcba816ba848"}
{"level":"info","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"512020f6f2ccbed4eefe7b06f23efa4e0a37ec6439985924599cbcba816ba848","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"512020f6f2ccbed4eefe7b06f23efa4e0a37ec6439985924599cbcba816ba848","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:22:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:22:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/512020f6f2ccbed4eefe7b06f23efa4e0a37ec6439985924599cbcba816ba848"}
{"level":"error","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"512020f6f2ccbed4eefe7b06f23efa4e0a37ec6439985924599cbcba816ba848","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"512020f6f2ccbed4eefe7b06f23efa4e0a37ec6439985924599cbcba816ba848\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"512020f6f2ccbed4eefe7b06f23efa4e0a37ec6439985924599cbcba816ba848","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"512020f6f2ccbed4eefe7b06f23efa4e0a37ec6439985924599cbcba816ba848","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/512020f6f2ccbed4eefe7b06f23efa4e0a37ec6439985924599cbcba816ba848"}
{"level":"debug","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43530defa5439b114d8b17b28356586dec329941ee52b0dc693eeebf38415cb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:22:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:22:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43530defa5439b114d8b17b28356586dec329941ee52b0dc693eeebf38415cb9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54aab2355b7d89061a1ab42998569f6e7d6d608b19a8e1252a234b468dfc0849","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:22:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:22:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43530defa5439b114d8b17b28356586dec329941ee52b0dc693eeebf38415cb9"}
{"level":"info","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54aab2355b7d89061a1ab42998569f6e7d6d608b19a8e1252a234b468dfc0849","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43530defa5439b114d8b17b28356586dec329941ee52b0dc693eeebf38415cb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:22:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:22:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43530defa5439b114d8b17b28356586dec329941ee52b0dc693eeebf38415cb9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54aab2355b7d89061a1ab42998569f6e7d6d608b19a8e1252a234b468dfc0849"}
{"level":"info","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43530defa5439b114d8b17b28356586dec329941ee52b0dc693eeebf38415cb9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9847030c9c3eda8b8a342bf5471e8e70ca2d03bb596c1a11a37133c5c5c6aaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:22:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:22:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9847030c9c3eda8b8a342bf5471e8e70ca2d03bb596c1a11a37133c5c5c6aaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"512020f6f2ccbed4eefe7b06f23efa4e0a37ec6439985924599cbcba816ba848","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:22:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:22:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["512020f6f2ccbed4eefe7b06f23efa4e0a37ec6439985924599cbcba816ba848"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43530defa5439b114d8b17b28356586dec329941ee52b0dc693eeebf38415cb9"}
{"level":"info","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"512020f6f2ccbed4eefe7b06f23efa4e0a37ec6439985924599cbcba816ba848","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54aab2355b7d89061a1ab42998569f6e7d6d608b19a8e1252a234b468dfc0849","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:22:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:22:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["54aab2355b7d89061a1ab42998569f6e7d6d608b19a8e1252a234b468dfc0849"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9847030c9c3eda8b8a342bf5471e8e70ca2d03bb596c1a11a37133c5c5c6aaa"}
{"level":"info","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54aab2355b7d89061a1ab42998569f6e7d6d608b19a8e1252a234b468dfc0849","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43530defa5439b114d8b17b28356586dec329941ee52b0dc693eeebf38415cb9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9847030c9c3eda8b8a342bf5471e8e70ca2d03bb596c1a11a37133c5c5c6aaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:22:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:22:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f9847030c9c3eda8b8a342bf5471e8e70ca2d03bb596c1a11a37133c5c5c6aaa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9847030c9c3eda8b8a342bf5471e8e70ca2d03bb596c1a11a37133c5c5c6aaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"512020f6f2ccbed4eefe7b06f23efa4e0a37ec6439985924599cbcba816ba848","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54aab2355b7d89061a1ab42998569f6e7d6d608b19a8e1252a234b468dfc0849","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:22:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:22:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54aab2355b7d89061a1ab42998569f6e7d6d608b19a8e1252a234b468dfc0849"}
{"level":"info","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54aab2355b7d89061a1ab42998569f6e7d6d608b19a8e1252a234b468dfc0849","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9847030c9c3eda8b8a342bf5471e8e70ca2d03bb596c1a11a37133c5c5c6aaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54aab2355b7d89061a1ab42998569f6e7d6d608b19a8e1252a234b468dfc0849","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:22:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:22:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["54aab2355b7d89061a1ab42998569f6e7d6d608b19a8e1252a234b468dfc0849"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54aab2355b7d89061a1ab42998569f6e7d6d608b19a8e1252a234b468dfc0849","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54aab2355b7d89061a1ab42998569f6e7d6d608b19a8e1252a234b468dfc0849","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:22:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:22:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["54aab2355b7d89061a1ab42998569f6e7d6d608b19a8e1252a234b468dfc0849"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43530defa5439b114d8b17b28356586dec329941ee52b0dc693eeebf38415cb9"}
{"level":"error","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"54aab2355b7d89061a1ab42998569f6e7d6d608b19a8e1252a234b468dfc0849","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"54aab2355b7d89061a1ab42998569f6e7d6d608b19a8e1252a234b468dfc0849\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54aab2355b7d89061a1ab42998569f6e7d6d608b19a8e1252a234b468dfc0849","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54aab2355b7d89061a1ab42998569f6e7d6d608b19a8e1252a234b468dfc0849","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/512020f6f2ccbed4eefe7b06f23efa4e0a37ec6439985924599cbcba816ba848"}
{"level":"info","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9847030c9c3eda8b8a342bf5471e8e70ca2d03bb596c1a11a37133c5c5c6aaa"}
{"level":"info","ts":"2026-07-06T14:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54aab2355b7d89061a1ab42998569f6e7d6d608b19a8e1252a234b468dfc0849"}
{"level":"debug","ts":"2026-07-06T14:23:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43530defa5439b114d8b17b28356586dec329941ee52b0dc693eeebf38415cb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:23:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:23:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:23:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43530defa5439b114d8b17b28356586dec329941ee52b0dc693eeebf38415cb9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:23:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43530defa5439b114d8b17b28356586dec329941ee52b0dc693eeebf38415cb9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:23:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43530defa5439b114d8b17b28356586dec329941ee52b0dc693eeebf38415cb9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:23:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43530defa5439b114d8b17b28356586dec329941ee52b0dc693eeebf38415cb9"}
{"level":"debug","ts":"2026-07-06T14:23:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43530defa5439b114d8b17b28356586dec329941ee52b0dc693eeebf38415cb9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:23:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43530defa5439b114d8b17b28356586dec329941ee52b0dc693eeebf38415cb9"}
{"level":"debug","ts":"2026-07-06T14:23:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43530defa5439b114d8b17b28356586dec329941ee52b0dc693eeebf38415cb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:23:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:23:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43530defa5439b114d8b17b28356586dec329941ee52b0dc693eeebf38415cb9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:23:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43530defa5439b114d8b17b28356586dec329941ee52b0dc693eeebf38415cb9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:23:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43530defa5439b114d8b17b28356586dec329941ee52b0dc693eeebf38415cb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:23:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:23:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:23:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43530defa5439b114d8b17b28356586dec329941ee52b0dc693eeebf38415cb9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:23:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf730369d5f3c37c1261b87e158d9b6a9a171727c29bdb0a52745663b35d517b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:23:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43530defa5439b114d8b17b28356586dec329941ee52b0dc693eeebf38415cb9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:23:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43530defa5439b114d8b17b28356586dec329941ee52b0dc693eeebf38415cb9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:23:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43530defa5439b114d8b17b28356586dec329941ee52b0dc693eeebf38415cb9"}
{"level":"debug","ts":"2026-07-06T14:23:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43530defa5439b114d8b17b28356586dec329941ee52b0dc693eeebf38415cb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:23:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:23:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43530defa5439b114d8b17b28356586dec329941ee52b0dc693eeebf38415cb9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:23:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf730369d5f3c37c1261b87e158d9b6a9a171727c29bdb0a52745663b35d517b"}
{"level":"info","ts":"2026-07-06T14:23:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43530defa5439b114d8b17b28356586dec329941ee52b0dc693eeebf38415cb9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:23:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43530defa5439b114d8b17b28356586dec329941ee52b0dc693eeebf38415cb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:23:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:23:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:23:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43530defa5439b114d8b17b28356586dec329941ee52b0dc693eeebf38415cb9"}
{"level":"info","ts":"2026-07-06T14:23:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43530defa5439b114d8b17b28356586dec329941ee52b0dc693eeebf38415cb9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:23:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43530defa5439b114d8b17b28356586dec329941ee52b0dc693eeebf38415cb9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:23:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43530defa5439b114d8b17b28356586dec329941ee52b0dc693eeebf38415cb9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:23:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43530defa5439b114d8b17b28356586dec329941ee52b0dc693eeebf38415cb9"}
{"level":"debug","ts":"2026-07-06T14:23:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43530defa5439b114d8b17b28356586dec329941ee52b0dc693eeebf38415cb9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:23:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43530defa5439b114d8b17b28356586dec329941ee52b0dc693eeebf38415cb9"}
{"level":"debug","ts":"2026-07-06T14:23:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43530defa5439b114d8b17b28356586dec329941ee52b0dc693eeebf38415cb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:23:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:23:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43530defa5439b114d8b17b28356586dec329941ee52b0dc693eeebf38415cb9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:23:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43530defa5439b114d8b17b28356586dec329941ee52b0dc693eeebf38415cb9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:23:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43530defa5439b114d8b17b28356586dec329941ee52b0dc693eeebf38415cb9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:23:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43530defa5439b114d8b17b28356586dec329941ee52b0dc693eeebf38415cb9"}
{"level":"debug","ts":"2026-07-06T14:23:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea9f1e8cbf4d6a6bcc37a205a03e6e248ddc251368ce6dec04cb0bb8ccb71a70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:23:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:23:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:23:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea9f1e8cbf4d6a6bcc37a205a03e6e248ddc251368ce6dec04cb0bb8ccb71a70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:23:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea9f1e8cbf4d6a6bcc37a205a03e6e248ddc251368ce6dec04cb0bb8ccb71a70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:23:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea9f1e8cbf4d6a6bcc37a205a03e6e248ddc251368ce6dec04cb0bb8ccb71a70","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:23:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea9f1e8cbf4d6a6bcc37a205a03e6e248ddc251368ce6dec04cb0bb8ccb71a70"}
{"level":"debug","ts":"2026-07-06T14:23:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea9f1e8cbf4d6a6bcc37a205a03e6e248ddc251368ce6dec04cb0bb8ccb71a70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:23:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea9f1e8cbf4d6a6bcc37a205a03e6e248ddc251368ce6dec04cb0bb8ccb71a70","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:23:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea9f1e8cbf4d6a6bcc37a205a03e6e248ddc251368ce6dec04cb0bb8ccb71a70"}
{"level":"debug","ts":"2026-07-06T14:23:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"512020f6f2ccbed4eefe7b06f23efa4e0a37ec6439985924599cbcba816ba848","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:23:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:23:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:23:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"512020f6f2ccbed4eefe7b06f23efa4e0a37ec6439985924599cbcba816ba848","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:23:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"512020f6f2ccbed4eefe7b06f23efa4e0a37ec6439985924599cbcba816ba848","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:23:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"512020f6f2ccbed4eefe7b06f23efa4e0a37ec6439985924599cbcba816ba848","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:23:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/512020f6f2ccbed4eefe7b06f23efa4e0a37ec6439985924599cbcba816ba848"}
{"level":"debug","ts":"2026-07-06T14:23:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"512020f6f2ccbed4eefe7b06f23efa4e0a37ec6439985924599cbcba816ba848","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:23:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/512020f6f2ccbed4eefe7b06f23efa4e0a37ec6439985924599cbcba816ba848"}
{"level":"debug","ts":"2026-07-06T14:23:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea9f1e8cbf4d6a6bcc37a205a03e6e248ddc251368ce6dec04cb0bb8ccb71a70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:23:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:23:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea9f1e8cbf4d6a6bcc37a205a03e6e248ddc251368ce6dec04cb0bb8ccb71a70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:23:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea9f1e8cbf4d6a6bcc37a205a03e6e248ddc251368ce6dec04cb0bb8ccb71a70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:23:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"512020f6f2ccbed4eefe7b06f23efa4e0a37ec6439985924599cbcba816ba848","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:23:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:23:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["512020f6f2ccbed4eefe7b06f23efa4e0a37ec6439985924599cbcba816ba848"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:23:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"512020f6f2ccbed4eefe7b06f23efa4e0a37ec6439985924599cbcba816ba848","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:23:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea9f1e8cbf4d6a6bcc37a205a03e6e248ddc251368ce6dec04cb0bb8ccb71a70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:23:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:23:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:23:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea9f1e8cbf4d6a6bcc37a205a03e6e248ddc251368ce6dec04cb0bb8ccb71a70"}
{"level":"info","ts":"2026-07-06T14:23:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea9f1e8cbf4d6a6bcc37a205a03e6e248ddc251368ce6dec04cb0bb8ccb71a70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:23:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2789ce85c9a3dd3231e7434edebb29afb4709948aa6fec4967153aad8c1ac858","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:23:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:23:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:23:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2789ce85c9a3dd3231e7434edebb29afb4709948aa6fec4967153aad8c1ac858"}
{"level":"info","ts":"2026-07-06T14:23:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2789ce85c9a3dd3231e7434edebb29afb4709948aa6fec4967153aad8c1ac858","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:23:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"512020f6f2ccbed4eefe7b06f23efa4e0a37ec6439985924599cbcba816ba848","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:23:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:23:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:23:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"512020f6f2ccbed4eefe7b06f23efa4e0a37ec6439985924599cbcba816ba848","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:23:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea9f1e8cbf4d6a6bcc37a205a03e6e248ddc251368ce6dec04cb0bb8ccb71a70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:23:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:23:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea9f1e8cbf4d6a6bcc37a205a03e6e248ddc251368ce6dec04cb0bb8ccb71a70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:23:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/512020f6f2ccbed4eefe7b06f23efa4e0a37ec6439985924599cbcba816ba848"}
{"level":"info","ts":"2026-07-06T14:23:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea9f1e8cbf4d6a6bcc37a205a03e6e248ddc251368ce6dec04cb0bb8ccb71a70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:23:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2789ce85c9a3dd3231e7434edebb29afb4709948aa6fec4967153aad8c1ac858","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:23:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:23:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2789ce85c9a3dd3231e7434edebb29afb4709948aa6fec4967153aad8c1ac858"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:23:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2789ce85c9a3dd3231e7434edebb29afb4709948aa6fec4967153aad8c1ac858","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:23:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"512020f6f2ccbed4eefe7b06f23efa4e0a37ec6439985924599cbcba816ba848","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:23:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:23:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["512020f6f2ccbed4eefe7b06f23efa4e0a37ec6439985924599cbcba816ba848"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:23:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea9f1e8cbf4d6a6bcc37a205a03e6e248ddc251368ce6dec04cb0bb8ccb71a70"}
{"level":"info","ts":"2026-07-06T14:23:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"512020f6f2ccbed4eefe7b06f23efa4e0a37ec6439985924599cbcba816ba848","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:23:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea9f1e8cbf4d6a6bcc37a205a03e6e248ddc251368ce6dec04cb0bb8ccb71a70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:23:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2789ce85c9a3dd3231e7434edebb29afb4709948aa6fec4967153aad8c1ac858","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:23:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:23:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:23:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2789ce85c9a3dd3231e7434edebb29afb4709948aa6fec4967153aad8c1ac858"}
{"level":"info","ts":"2026-07-06T14:23:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2789ce85c9a3dd3231e7434edebb29afb4709948aa6fec4967153aad8c1ac858","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:23:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"512020f6f2ccbed4eefe7b06f23efa4e0a37ec6439985924599cbcba816ba848","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:23:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:23:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:23:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"512020f6f2ccbed4eefe7b06f23efa4e0a37ec6439985924599cbcba816ba848","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:23:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c240611a65c30ac39b315ef6bd54fa9dce18100caf9c41d50a191b001227841","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:23:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2789ce85c9a3dd3231e7434edebb29afb4709948aa6fec4967153aad8c1ac858","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:23:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:23:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2789ce85c9a3dd3231e7434edebb29afb4709948aa6fec4967153aad8c1ac858"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:23:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/512020f6f2ccbed4eefe7b06f23efa4e0a37ec6439985924599cbcba816ba848"}
{"level":"info","ts":"2026-07-06T14:23:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2789ce85c9a3dd3231e7434edebb29afb4709948aa6fec4967153aad8c1ac858","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:23:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"512020f6f2ccbed4eefe7b06f23efa4e0a37ec6439985924599cbcba816ba848","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:23:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:23:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["512020f6f2ccbed4eefe7b06f23efa4e0a37ec6439985924599cbcba816ba848"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:23:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea9f1e8cbf4d6a6bcc37a205a03e6e248ddc251368ce6dec04cb0bb8ccb71a70"}
{"level":"info","ts":"2026-07-06T14:23:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"512020f6f2ccbed4eefe7b06f23efa4e0a37ec6439985924599cbcba816ba848","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:23:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2789ce85c9a3dd3231e7434edebb29afb4709948aa6fec4967153aad8c1ac858","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:23:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"512020f6f2ccbed4eefe7b06f23efa4e0a37ec6439985924599cbcba816ba848","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:23:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c240611a65c30ac39b315ef6bd54fa9dce18100caf9c41d50a191b001227841"}
{"level":"info","ts":"2026-07-06T14:23:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2789ce85c9a3dd3231e7434edebb29afb4709948aa6fec4967153aad8c1ac858"}
{"level":"info","ts":"2026-07-06T14:23:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/512020f6f2ccbed4eefe7b06f23efa4e0a37ec6439985924599cbcba816ba848"}
{"level":"debug","ts":"2026-07-06T14:23:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87f1845ee69259073b667258e6f035ca28b848901109f10ba90ba4a97b48fec7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:23:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87f1845ee69259073b667258e6f035ca28b848901109f10ba90ba4a97b48fec7"}
{"level":"debug","ts":"2026-07-06T14:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf38e6097a654408e0ae46748173c0707b2c18b22f336818ea0e9ef56b3585f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:23:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:23:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf38e6097a654408e0ae46748173c0707b2c18b22f336818ea0e9ef56b3585f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf38e6097a654408e0ae46748173c0707b2c18b22f336818ea0e9ef56b3585f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76faf55deae1b057f34620e3be826809dc6aa86486324b6c130693c51076b844","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf38e6097a654408e0ae46748173c0707b2c18b22f336818ea0e9ef56b3585f5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf38e6097a654408e0ae46748173c0707b2c18b22f336818ea0e9ef56b3585f5"}
{"level":"debug","ts":"2026-07-06T14:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf38e6097a654408e0ae46748173c0707b2c18b22f336818ea0e9ef56b3585f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:23:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:23:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bf38e6097a654408e0ae46748173c0707b2c18b22f336818ea0e9ef56b3585f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76faf55deae1b057f34620e3be826809dc6aa86486324b6c130693c51076b844"}
{"level":"info","ts":"2026-07-06T14:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf38e6097a654408e0ae46748173c0707b2c18b22f336818ea0e9ef56b3585f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91472444948da42303c9b063d8fd0d9a1cbf0e82eb24b5820a808fa11b4bd06f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf38e6097a654408e0ae46748173c0707b2c18b22f336818ea0e9ef56b3585f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:23:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:23:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf38e6097a654408e0ae46748173c0707b2c18b22f336818ea0e9ef56b3585f5"}
{"level":"info","ts":"2026-07-06T14:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf38e6097a654408e0ae46748173c0707b2c18b22f336818ea0e9ef56b3585f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16a692d19ddb9cc3384fbcd99004fe895c63b5429f44e82a10811ed0ae35bad8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf38e6097a654408e0ae46748173c0707b2c18b22f336818ea0e9ef56b3585f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:23:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:23:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bf38e6097a654408e0ae46748173c0707b2c18b22f336818ea0e9ef56b3585f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91472444948da42303c9b063d8fd0d9a1cbf0e82eb24b5820a808fa11b4bd06f"}
{"level":"info","ts":"2026-07-06T14:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf38e6097a654408e0ae46748173c0707b2c18b22f336818ea0e9ef56b3585f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a3e431c2fc8a75cf4ac184ae3e6579b32ddf0274564bac6401ae3804cd920b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf38e6097a654408e0ae46748173c0707b2c18b22f336818ea0e9ef56b3585f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf38e6097a654408e0ae46748173c0707b2c18b22f336818ea0e9ef56b3585f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:23:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:23:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf38e6097a654408e0ae46748173c0707b2c18b22f336818ea0e9ef56b3585f5"}
{"level":"info","ts":"2026-07-06T14:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf38e6097a654408e0ae46748173c0707b2c18b22f336818ea0e9ef56b3585f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf38e6097a654408e0ae46748173c0707b2c18b22f336818ea0e9ef56b3585f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf38e6097a654408e0ae46748173c0707b2c18b22f336818ea0e9ef56b3585f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:23:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:23:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bf38e6097a654408e0ae46748173c0707b2c18b22f336818ea0e9ef56b3585f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf38e6097a654408e0ae46748173c0707b2c18b22f336818ea0e9ef56b3585f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf38e6097a654408e0ae46748173c0707b2c18b22f336818ea0e9ef56b3585f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:23:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:23:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bf38e6097a654408e0ae46748173c0707b2c18b22f336818ea0e9ef56b3585f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16a692d19ddb9cc3384fbcd99004fe895c63b5429f44e82a10811ed0ae35bad8"}
{"level":"error","ts":"2026-07-06T14:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"bf38e6097a654408e0ae46748173c0707b2c18b22f336818ea0e9ef56b3585f5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"bf38e6097a654408e0ae46748173c0707b2c18b22f336818ea0e9ef56b3585f5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T14:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf38e6097a654408e0ae46748173c0707b2c18b22f336818ea0e9ef56b3585f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf38e6097a654408e0ae46748173c0707b2c18b22f336818ea0e9ef56b3585f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54aab2355b7d89061a1ab42998569f6e7d6d608b19a8e1252a234b468dfc0849","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a3e431c2fc8a75cf4ac184ae3e6579b32ddf0274564bac6401ae3804cd920b2"}
{"level":"debug","ts":"2026-07-06T14:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9847030c9c3eda8b8a342bf5471e8e70ca2d03bb596c1a11a37133c5c5c6aaa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf38e6097a654408e0ae46748173c0707b2c18b22f336818ea0e9ef56b3585f5"}
{"level":"debug","ts":"2026-07-06T14:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f187f8130e51d088ac6fff8f66dfd80adcbf5373f61633e84367c408d715095","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54aab2355b7d89061a1ab42998569f6e7d6d608b19a8e1252a234b468dfc0849"}
{"level":"info","ts":"2026-07-06T14:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9847030c9c3eda8b8a342bf5471e8e70ca2d03bb596c1a11a37133c5c5c6aaa"}
{"level":"info","ts":"2026-07-06T14:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f187f8130e51d088ac6fff8f66dfd80adcbf5373f61633e84367c408d715095"}
{"level":"debug","ts":"2026-07-06T14:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0e64d14bd75d344fdeda26d8b1cd0396540b39e1b65b5064bea74b11b465d50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:23:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:23:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0e64d14bd75d344fdeda26d8b1cd0396540b39e1b65b5064bea74b11b465d50","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0e64d14bd75d344fdeda26d8b1cd0396540b39e1b65b5064bea74b11b465d50","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32b5dad0fe07ab53010635e9ce0826a2c22e53bf49c2547e82d778acc77a208d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0e64d14bd75d344fdeda26d8b1cd0396540b39e1b65b5064bea74b11b465d50","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0e64d14bd75d344fdeda26d8b1cd0396540b39e1b65b5064bea74b11b465d50"}
{"level":"debug","ts":"2026-07-06T14:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9576128729397dc2f57070fef223c901613721fd7675d8bd48d04a68f9dde6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0e64d14bd75d344fdeda26d8b1cd0396540b39e1b65b5064bea74b11b465d50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:23:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:23:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0e64d14bd75d344fdeda26d8b1cd0396540b39e1b65b5064bea74b11b465d50"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32b5dad0fe07ab53010635e9ce0826a2c22e53bf49c2547e82d778acc77a208d"}
{"level":"info","ts":"2026-07-06T14:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0e64d14bd75d344fdeda26d8b1cd0396540b39e1b65b5064bea74b11b465d50","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0a6d7088f58f1b95dde053a38c79dbbb516bfd92d5dd29a031e5e3175d7635a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0e64d14bd75d344fdeda26d8b1cd0396540b39e1b65b5064bea74b11b465d50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:23:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:23:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0e64d14bd75d344fdeda26d8b1cd0396540b39e1b65b5064bea74b11b465d50"}
{"level":"info","ts":"2026-07-06T14:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0e64d14bd75d344fdeda26d8b1cd0396540b39e1b65b5064bea74b11b465d50","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc9d3fd94c423830eed0ccd0cd9a8a020ff6217b53b8491b04ce6ba379aaea79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0e64d14bd75d344fdeda26d8b1cd0396540b39e1b65b5064bea74b11b465d50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:23:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:23:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0e64d14bd75d344fdeda26d8b1cd0396540b39e1b65b5064bea74b11b465d50"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9576128729397dc2f57070fef223c901613721fd7675d8bd48d04a68f9dde6c"}
{"level":"info","ts":"2026-07-06T14:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0e64d14bd75d344fdeda26d8b1cd0396540b39e1b65b5064bea74b11b465d50","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0e64d14bd75d344fdeda26d8b1cd0396540b39e1b65b5064bea74b11b465d50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:23:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:23:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0e64d14bd75d344fdeda26d8b1cd0396540b39e1b65b5064bea74b11b465d50"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T14:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b0e64d14bd75d344fdeda26d8b1cd0396540b39e1b65b5064bea74b11b465d50","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b0e64d14bd75d344fdeda26d8b1cd0396540b39e1b65b5064bea74b11b465d50\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T14:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0e64d14bd75d344fdeda26d8b1cd0396540b39e1b65b5064bea74b11b465d50","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0e64d14bd75d344fdeda26d8b1cd0396540b39e1b65b5064bea74b11b465d50","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0a6d7088f58f1b95dde053a38c79dbbb516bfd92d5dd29a031e5e3175d7635a"}
{"level":"info","ts":"2026-07-06T14:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0e64d14bd75d344fdeda26d8b1cd0396540b39e1b65b5064bea74b11b465d50"}
{"level":"info","ts":"2026-07-06T14:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc9d3fd94c423830eed0ccd0cd9a8a020ff6217b53b8491b04ce6ba379aaea79"}
{"level":"info","ts":"2026-07-06T14:23:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4434e0a8-ee79-4aff-84d9-de5db3d262d2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:50074","PortSpecifier":{"PortValue":50074}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4434e0a8-ee79-4aff-84d9-de5db3d262d2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0ba2b8.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:23:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4434e0a8-ee79-4aff-84d9-de5db3d262d2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:50074","PortSpecifier":{"PortValue":50074}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347788,"nanos":131027504},"http":{"id":"4434e0a8-ee79-4aff-84d9-de5db3d262d2","method":"POST","headers":{":authority":"e2e-shared-a-0ba2b8.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:23:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4434e0a8-ee79-4aff-84d9-de5db3d262d2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T14:23:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4434e0a8-ee79-4aff-84d9-de5db3d262d2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d17dc60c-8197-471b-964e-fb38f12d85ba","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=23dc5f28-5320-4b77-a7de-8a9f9a6df124"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/eae81554889a"]}}
{"level":"debug","ts":"2026-07-06T14:23:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4434e0a8-ee79-4aff-84d9-de5db3d262d2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/eae81554889a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=23dc5f28-5320-4b77-a7de-8a9f9a6df124"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d17dc60c-8197-471b-964e-fb38f12d85ba","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"76faf55deae1b057f34620e3be826809dc6aa86486324b6c130693c51076b844"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0ba2b8.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:23:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4434e0a8-ee79-4aff-84d9-de5db3d262d2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:23:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4434e0a8-ee79-4aff-84d9-de5db3d262d2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:23:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4434e0a8-ee79-4aff-84d9-de5db3d262d2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0ba2b8/rate-test-model-0ba2b8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:23:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4434e0a8-ee79-4aff-84d9-de5db3d262d2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T14:23:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4434e0a8-ee79-4aff-84d9-de5db3d262d2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:23:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4434e0a8-ee79-4aff-84d9-de5db3d262d2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T14:23:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4434e0a8-ee79-4aff-84d9-de5db3d262d2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:23:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4434e0a8-ee79-4aff-84d9-de5db3d262d2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:23:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fcae806c-acac-4da5-a98a-ed7a39d24798","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:54276","PortSpecifier":{"PortValue":54276}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fcae806c-acac-4da5-a98a-ed7a39d24798","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-74bb89.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:23:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fcae806c-acac-4da5-a98a-ed7a39d24798","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:54276","PortSpecifier":{"PortValue":54276}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347788,"nanos":193604793},"http":{"id":"fcae806c-acac-4da5-a98a-ed7a39d24798","method":"POST","headers":{":authority":"e2e-shared-b-74bb89.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:23:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fcae806c-acac-4da5-a98a-ed7a39d24798","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T14:23:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fcae806c-acac-4da5-a98a-ed7a39d24798","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d17dc60c-8197-471b-964e-fb38f12d85ba","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=23dc5f28-5320-4b77-a7de-8a9f9a6df124"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/eae81554889a"]}}
{"level":"debug","ts":"2026-07-06T14:23:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fcae806c-acac-4da5-a98a-ed7a39d24798","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/eae81554889a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=23dc5f28-5320-4b77-a7de-8a9f9a6df124"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d17dc60c-8197-471b-964e-fb38f12d85ba","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bf38e6097a654408e0ae46748173c0707b2c18b22f336818ea0e9ef56b3585f5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-74bb89.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:23:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fcae806c-acac-4da5-a98a-ed7a39d24798","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:23:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fcae806c-acac-4da5-a98a-ed7a39d24798","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:23:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fcae806c-acac-4da5-a98a-ed7a39d24798","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-74bb89/rate-test-model-74bb89\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:23:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fcae806c-acac-4da5-a98a-ed7a39d24798","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T14:23:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fcae806c-acac-4da5-a98a-ed7a39d24798","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:23:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fcae806c-acac-4da5-a98a-ed7a39d24798","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T14:23:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fcae806c-acac-4da5-a98a-ed7a39d24798","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:23:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fcae806c-acac-4da5-a98a-ed7a39d24798","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:23:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"78dd1507-e4cf-418a-ac1d-4d38bbcc2219","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:50090","PortSpecifier":{"PortValue":50090}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"78dd1507-e4cf-418a-ac1d-4d38bbcc2219","method":"POST","path":"/ai-tenant-e2e-shared-a-0ba2b8/rate-test-model-0ba2b8/v1/completions","host":"e2e-shared-a-0ba2b8.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:23:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"78dd1507-e4cf-418a-ac1d-4d38bbcc2219","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:50090","PortSpecifier":{"PortValue":50090}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347788,"nanos":229112487},"http":{"id":"78dd1507-e4cf-418a-ac1d-4d38bbcc2219","method":"POST","headers":{":authority":"e2e-shared-a-0ba2b8.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0ba2b8/rate-test-model-0ba2b8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:23:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"78dd1507-e4cf-418a-ac1d-4d38bbcc2219","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1R73RHF2lUkFLONez_X9hJfAC6XT4RDPIqpsyLIwVEhck4NdHZxeUW2qNCFvL"}
{"level":"debug","ts":"2026-07-06T14:23:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"78dd1507-e4cf-418a-ac1d-4d38bbcc2219","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0ba2b8.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1R73RHF2lUkFLONez_X9hJfAC6XT4RDPIqpsyLIwVEhck4NdHZxeUW2qNCFvL\"}"}
{"level":"debug","ts":"2026-07-06T14:23:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"78dd1507-e4cf-418a-ac1d-4d38bbcc2219","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0ba2b8.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"541d802f-a384-4ddf-a44c-f9edbc91fa19","keyName":"e2e-rate-a-754e65","subscription":"e2e-rate-iso-a-754e65","tenant":"e2e-shared-a-0ba2b8","userId":"541d802f-a384-4ddf-a44c-f9edbc91fa19","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T14:23:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"78dd1507-e4cf-418a-ac1d-4d38bbcc2219","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0ba2b8.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0ba2b8/rate-test-model-0ba2b8\",\"requestedSubscription\":\"e2e-rate-iso-a-754e65\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T14:23:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"78dd1507-e4cf-418a-ac1d-4d38bbcc2219","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0ba2b8.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0ba2b8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-754e65","namespace":"ai-tenant-e2e-shared-a-0ba2b8","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T14:23:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"78dd1507-e4cf-418a-ac1d-4d38bbcc2219","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:23:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78dd1507-e4cf-418a-ac1d-4d38bbcc2219","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:23:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78dd1507-e4cf-418a-ac1d-4d38bbcc2219","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:23:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78dd1507-e4cf-418a-ac1d-4d38bbcc2219","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0ba2b8/rate-test-model-0ba2b8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:23:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78dd1507-e4cf-418a-ac1d-4d38bbcc2219","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:23:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78dd1507-e4cf-418a-ac1d-4d38bbcc2219","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T14:23:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78dd1507-e4cf-418a-ac1d-4d38bbcc2219","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-754e65"}
{"level":"debug","ts":"2026-07-06T14:23:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78dd1507-e4cf-418a-ac1d-4d38bbcc2219","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:23:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78dd1507-e4cf-418a-ac1d-4d38bbcc2219","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"541d802f-a384-4ddf-a44c-f9edbc91fa19","keyName":"e2e-rate-a-754e65","selected_subscription":"e2e-rate-iso-a-754e65","selected_subscription_key":"ai-tenant-e2e-shared-a-0ba2b8/e2e-rate-iso-a-754e65@ai-tenant-e2e-shared-a-0ba2b8/rate-test-model-0ba2b8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0ba2b8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-754e65","namespace":"ai-tenant-e2e-shared-a-0ba2b8","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T14:23:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"78dd1507-e4cf-418a-ac1d-4d38bbcc2219","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:23:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"78dd1507-e4cf-418a-ac1d-4d38bbcc2219","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:23:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5edbf5f4-646e-42d0-8c58-2e3f5a3adcdf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:53334","PortSpecifier":{"PortValue":53334}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5edbf5f4-646e-42d0-8c58-2e3f5a3adcdf","method":"POST","path":"/ai-tenant-e2e-shared-a-0ba2b8/rate-test-model-0ba2b8/v1/completions","host":"e2e-shared-a-0ba2b8.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:23:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5edbf5f4-646e-42d0-8c58-2e3f5a3adcdf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:53334","PortSpecifier":{"PortValue":53334}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347789,"nanos":292950007},"http":{"id":"5edbf5f4-646e-42d0-8c58-2e3f5a3adcdf","method":"POST","headers":{":authority":"e2e-shared-a-0ba2b8.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0ba2b8/rate-test-model-0ba2b8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:23:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5edbf5f4-646e-42d0-8c58-2e3f5a3adcdf","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1R73RHF2lUkFLONez_X9hJfAC6XT4RDPIqpsyLIwVEhck4NdHZxeUW2qNCFvL"}
{"level":"debug","ts":"2026-07-06T14:23:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5edbf5f4-646e-42d0-8c58-2e3f5a3adcdf","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0ba2b8.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1R73RHF2lUkFLONez_X9hJfAC6XT4RDPIqpsyLIwVEhck4NdHZxeUW2qNCFvL\"}"}
{"level":"debug","ts":"2026-07-06T14:23:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5edbf5f4-646e-42d0-8c58-2e3f5a3adcdf","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0ba2b8.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"541d802f-a384-4ddf-a44c-f9edbc91fa19","keyName":"e2e-rate-a-754e65","subscription":"e2e-rate-iso-a-754e65","tenant":"e2e-shared-a-0ba2b8","userId":"541d802f-a384-4ddf-a44c-f9edbc91fa19","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T14:23:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5edbf5f4-646e-42d0-8c58-2e3f5a3adcdf","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0ba2b8.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0ba2b8/rate-test-model-0ba2b8\",\"requestedSubscription\":\"e2e-rate-iso-a-754e65\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T14:23:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5edbf5f4-646e-42d0-8c58-2e3f5a3adcdf","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0ba2b8.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0ba2b8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-754e65","namespace":"ai-tenant-e2e-shared-a-0ba2b8","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T14:23:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5edbf5f4-646e-42d0-8c58-2e3f5a3adcdf","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:23:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5edbf5f4-646e-42d0-8c58-2e3f5a3adcdf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:23:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5edbf5f4-646e-42d0-8c58-2e3f5a3adcdf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:23:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5edbf5f4-646e-42d0-8c58-2e3f5a3adcdf","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:23:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5edbf5f4-646e-42d0-8c58-2e3f5a3adcdf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0ba2b8/rate-test-model-0ba2b8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:23:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5edbf5f4-646e-42d0-8c58-2e3f5a3adcdf","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:23:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5edbf5f4-646e-42d0-8c58-2e3f5a3adcdf","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T14:23:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5edbf5f4-646e-42d0-8c58-2e3f5a3adcdf","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-754e65"}
{"level":"debug","ts":"2026-07-06T14:23:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5edbf5f4-646e-42d0-8c58-2e3f5a3adcdf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"541d802f-a384-4ddf-a44c-f9edbc91fa19","keyName":"e2e-rate-a-754e65","selected_subscription":"e2e-rate-iso-a-754e65","selected_subscription_key":"ai-tenant-e2e-shared-a-0ba2b8/e2e-rate-iso-a-754e65@ai-tenant-e2e-shared-a-0ba2b8/rate-test-model-0ba2b8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0ba2b8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-754e65","namespace":"ai-tenant-e2e-shared-a-0ba2b8","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T14:23:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5edbf5f4-646e-42d0-8c58-2e3f5a3adcdf","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:23:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5edbf5f4-646e-42d0-8c58-2e3f5a3adcdf","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:23:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8a64792e-f2b2-463b-a01c-043e0597e3ac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:53342","PortSpecifier":{"PortValue":53342}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8a64792e-f2b2-463b-a01c-043e0597e3ac","method":"POST","path":"/ai-tenant-e2e-shared-a-0ba2b8/rate-test-model-0ba2b8/v1/completions","host":"e2e-shared-a-0ba2b8.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:23:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8a64792e-f2b2-463b-a01c-043e0597e3ac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:53342","PortSpecifier":{"PortValue":53342}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347790,"nanos":328608020},"http":{"id":"8a64792e-f2b2-463b-a01c-043e0597e3ac","method":"POST","headers":{":authority":"e2e-shared-a-0ba2b8.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0ba2b8/rate-test-model-0ba2b8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:23:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8a64792e-f2b2-463b-a01c-043e0597e3ac","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1R73RHF2lUkFLONez_X9hJfAC6XT4RDPIqpsyLIwVEhck4NdHZxeUW2qNCFvL"}
{"level":"debug","ts":"2026-07-06T14:23:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8a64792e-f2b2-463b-a01c-043e0597e3ac","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0ba2b8.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1R73RHF2lUkFLONez_X9hJfAC6XT4RDPIqpsyLIwVEhck4NdHZxeUW2qNCFvL\"}"}
{"level":"debug","ts":"2026-07-06T14:23:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8a64792e-f2b2-463b-a01c-043e0597e3ac","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0ba2b8.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"541d802f-a384-4ddf-a44c-f9edbc91fa19","keyName":"e2e-rate-a-754e65","subscription":"e2e-rate-iso-a-754e65","tenant":"e2e-shared-a-0ba2b8","userId":"541d802f-a384-4ddf-a44c-f9edbc91fa19","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T14:23:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8a64792e-f2b2-463b-a01c-043e0597e3ac","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0ba2b8.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0ba2b8/rate-test-model-0ba2b8\",\"requestedSubscription\":\"e2e-rate-iso-a-754e65\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T14:23:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8a64792e-f2b2-463b-a01c-043e0597e3ac","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0ba2b8.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0ba2b8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-754e65","namespace":"ai-tenant-e2e-shared-a-0ba2b8","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T14:23:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8a64792e-f2b2-463b-a01c-043e0597e3ac","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:23:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a64792e-f2b2-463b-a01c-043e0597e3ac","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:23:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a64792e-f2b2-463b-a01c-043e0597e3ac","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:23:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a64792e-f2b2-463b-a01c-043e0597e3ac","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:23:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a64792e-f2b2-463b-a01c-043e0597e3ac","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0ba2b8/rate-test-model-0ba2b8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:23:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a64792e-f2b2-463b-a01c-043e0597e3ac","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:23:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a64792e-f2b2-463b-a01c-043e0597e3ac","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-754e65"}
{"level":"debug","ts":"2026-07-06T14:23:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a64792e-f2b2-463b-a01c-043e0597e3ac","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T14:23:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a64792e-f2b2-463b-a01c-043e0597e3ac","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"541d802f-a384-4ddf-a44c-f9edbc91fa19","keyName":"e2e-rate-a-754e65","selected_subscription":"e2e-rate-iso-a-754e65","selected_subscription_key":"ai-tenant-e2e-shared-a-0ba2b8/e2e-rate-iso-a-754e65@ai-tenant-e2e-shared-a-0ba2b8/rate-test-model-0ba2b8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0ba2b8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-754e65","namespace":"ai-tenant-e2e-shared-a-0ba2b8","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T14:23:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8a64792e-f2b2-463b-a01c-043e0597e3ac","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:23:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8a64792e-f2b2-463b-a01c-043e0597e3ac","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:23:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c43f0b6e-4066-4580-89bf-73d55c247fb2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:54932","PortSpecifier":{"PortValue":54932}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c43f0b6e-4066-4580-89bf-73d55c247fb2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-0ba2b8.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:23:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c43f0b6e-4066-4580-89bf-73d55c247fb2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:54932","PortSpecifier":{"PortValue":54932}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347803,"nanos":419348466},"http":{"id":"c43f0b6e-4066-4580-89bf-73d55c247fb2","method":"POST","headers":{":authority":"e2e-shared-a-0ba2b8.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:23:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c43f0b6e-4066-4580-89bf-73d55c247fb2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T14:23:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c43f0b6e-4066-4580-89bf-73d55c247fb2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d17dc60c-8197-471b-964e-fb38f12d85ba","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=23dc5f28-5320-4b77-a7de-8a9f9a6df124"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/eae81554889a"]}}
{"level":"debug","ts":"2026-07-06T14:23:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c43f0b6e-4066-4580-89bf-73d55c247fb2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/eae81554889a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=23dc5f28-5320-4b77-a7de-8a9f9a6df124"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d17dc60c-8197-471b-964e-fb38f12d85ba","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"76faf55deae1b057f34620e3be826809dc6aa86486324b6c130693c51076b844"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-0ba2b8.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:23:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c43f0b6e-4066-4580-89bf-73d55c247fb2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:23:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c43f0b6e-4066-4580-89bf-73d55c247fb2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:23:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c43f0b6e-4066-4580-89bf-73d55c247fb2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0ba2b8/rate-test-model-0ba2b8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:23:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c43f0b6e-4066-4580-89bf-73d55c247fb2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T14:23:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c43f0b6e-4066-4580-89bf-73d55c247fb2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:23:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c43f0b6e-4066-4580-89bf-73d55c247fb2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T14:23:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c43f0b6e-4066-4580-89bf-73d55c247fb2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:23:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c43f0b6e-4066-4580-89bf-73d55c247fb2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:23:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7e86cd10-2c5a-4c76-ade1-7f03c690ddda","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:43656","PortSpecifier":{"PortValue":43656}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7e86cd10-2c5a-4c76-ade1-7f03c690ddda","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-74bb89.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:23:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7e86cd10-2c5a-4c76-ade1-7f03c690ddda","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:43656","PortSpecifier":{"PortValue":43656}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347803,"nanos":455095131},"http":{"id":"7e86cd10-2c5a-4c76-ade1-7f03c690ddda","method":"POST","headers":{":authority":"e2e-shared-b-74bb89.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:23:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7e86cd10-2c5a-4c76-ade1-7f03c690ddda","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T14:23:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7e86cd10-2c5a-4c76-ade1-7f03c690ddda","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d17dc60c-8197-471b-964e-fb38f12d85ba","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=23dc5f28-5320-4b77-a7de-8a9f9a6df124"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/eae81554889a"]}}
{"level":"debug","ts":"2026-07-06T14:23:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7e86cd10-2c5a-4c76-ade1-7f03c690ddda","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/eae81554889a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=23dc5f28-5320-4b77-a7de-8a9f9a6df124"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d17dc60c-8197-471b-964e-fb38f12d85ba","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bf38e6097a654408e0ae46748173c0707b2c18b22f336818ea0e9ef56b3585f5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-74bb89.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:23:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7e86cd10-2c5a-4c76-ade1-7f03c690ddda","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:23:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7e86cd10-2c5a-4c76-ade1-7f03c690ddda","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:23:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7e86cd10-2c5a-4c76-ade1-7f03c690ddda","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-74bb89/rate-test-model-74bb89\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:23:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7e86cd10-2c5a-4c76-ade1-7f03c690ddda","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T14:23:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7e86cd10-2c5a-4c76-ade1-7f03c690ddda","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T14:23:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7e86cd10-2c5a-4c76-ade1-7f03c690ddda","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T14:23:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7e86cd10-2c5a-4c76-ade1-7f03c690ddda","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:23:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7e86cd10-2c5a-4c76-ade1-7f03c690ddda","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:23:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7b5f4eaf-aada-485d-952c-5e64f583f128","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:54938","PortSpecifier":{"PortValue":54938}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7b5f4eaf-aada-485d-952c-5e64f583f128","method":"POST","path":"/ai-tenant-e2e-shared-a-0ba2b8/rate-test-model-0ba2b8/v1/completions","host":"e2e-shared-a-0ba2b8.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:23:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7b5f4eaf-aada-485d-952c-5e64f583f128","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:54938","PortSpecifier":{"PortValue":54938}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347803,"nanos":487389997},"http":{"id":"7b5f4eaf-aada-485d-952c-5e64f583f128","method":"POST","headers":{":authority":"e2e-shared-a-0ba2b8.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0ba2b8/rate-test-model-0ba2b8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:23:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7b5f4eaf-aada-485d-952c-5e64f583f128","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-izb075QC3mNdWx5u_uRdJltlc4baP2XqysZwgfbkPQ1uz0SRao5fNwzgIhun"}
{"level":"debug","ts":"2026-07-06T14:23:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7b5f4eaf-aada-485d-952c-5e64f583f128","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0ba2b8.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-izb075QC3mNdWx5u_uRdJltlc4baP2XqysZwgfbkPQ1uz0SRao5fNwzgIhun\"}"}
{"level":"debug","ts":"2026-07-06T14:23:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7b5f4eaf-aada-485d-952c-5e64f583f128","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0ba2b8.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3cb98f35-81b1-470b-8cb3-7d74aad65096","keyName":"e2e-rate-a-8377d9","subscription":"e2e-rate-iso-a-8377d9","tenant":"e2e-shared-a-0ba2b8","userId":"3cb98f35-81b1-470b-8cb3-7d74aad65096","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T14:23:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7b5f4eaf-aada-485d-952c-5e64f583f128","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0ba2b8.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0ba2b8/rate-test-model-0ba2b8\",\"requestedSubscription\":\"e2e-rate-iso-a-8377d9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T14:23:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7b5f4eaf-aada-485d-952c-5e64f583f128","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0ba2b8.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0ba2b8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8377d9","namespace":"ai-tenant-e2e-shared-a-0ba2b8","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T14:23:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7b5f4eaf-aada-485d-952c-5e64f583f128","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:23:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7b5f4eaf-aada-485d-952c-5e64f583f128","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:23:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7b5f4eaf-aada-485d-952c-5e64f583f128","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:23:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7b5f4eaf-aada-485d-952c-5e64f583f128","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0ba2b8/rate-test-model-0ba2b8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:23:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7b5f4eaf-aada-485d-952c-5e64f583f128","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:23:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7b5f4eaf-aada-485d-952c-5e64f583f128","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:23:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7b5f4eaf-aada-485d-952c-5e64f583f128","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8377d9"}
{"level":"debug","ts":"2026-07-06T14:23:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7b5f4eaf-aada-485d-952c-5e64f583f128","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T14:23:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7b5f4eaf-aada-485d-952c-5e64f583f128","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3cb98f35-81b1-470b-8cb3-7d74aad65096","keyName":"e2e-rate-a-8377d9","selected_subscription":"e2e-rate-iso-a-8377d9","selected_subscription_key":"ai-tenant-e2e-shared-a-0ba2b8/e2e-rate-iso-a-8377d9@ai-tenant-e2e-shared-a-0ba2b8/rate-test-model-0ba2b8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0ba2b8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8377d9","namespace":"ai-tenant-e2e-shared-a-0ba2b8","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T14:23:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7b5f4eaf-aada-485d-952c-5e64f583f128","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:23:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7b5f4eaf-aada-485d-952c-5e64f583f128","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:23:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a1b2c4cb-8a0c-46dc-85df-40b43ae34f74","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:54944","PortSpecifier":{"PortValue":54944}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a1b2c4cb-8a0c-46dc-85df-40b43ae34f74","method":"POST","path":"/ai-tenant-e2e-shared-a-0ba2b8/rate-test-model-0ba2b8/v1/completions","host":"e2e-shared-a-0ba2b8.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:23:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a1b2c4cb-8a0c-46dc-85df-40b43ae34f74","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:54944","PortSpecifier":{"PortValue":54944}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347804,"nanos":522782459},"http":{"id":"a1b2c4cb-8a0c-46dc-85df-40b43ae34f74","method":"POST","headers":{":authority":"e2e-shared-a-0ba2b8.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0ba2b8/rate-test-model-0ba2b8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:23:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a1b2c4cb-8a0c-46dc-85df-40b43ae34f74","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-izb075QC3mNdWx5u_uRdJltlc4baP2XqysZwgfbkPQ1uz0SRao5fNwzgIhun"}
{"level":"debug","ts":"2026-07-06T14:23:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a1b2c4cb-8a0c-46dc-85df-40b43ae34f74","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0ba2b8.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-izb075QC3mNdWx5u_uRdJltlc4baP2XqysZwgfbkPQ1uz0SRao5fNwzgIhun\"}"}
{"level":"debug","ts":"2026-07-06T14:23:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a1b2c4cb-8a0c-46dc-85df-40b43ae34f74","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0ba2b8.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3cb98f35-81b1-470b-8cb3-7d74aad65096","keyName":"e2e-rate-a-8377d9","subscription":"e2e-rate-iso-a-8377d9","tenant":"e2e-shared-a-0ba2b8","userId":"3cb98f35-81b1-470b-8cb3-7d74aad65096","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T14:23:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a1b2c4cb-8a0c-46dc-85df-40b43ae34f74","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0ba2b8.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0ba2b8/rate-test-model-0ba2b8\",\"requestedSubscription\":\"e2e-rate-iso-a-8377d9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T14:23:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a1b2c4cb-8a0c-46dc-85df-40b43ae34f74","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0ba2b8.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0ba2b8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8377d9","namespace":"ai-tenant-e2e-shared-a-0ba2b8","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T14:23:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a1b2c4cb-8a0c-46dc-85df-40b43ae34f74","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:23:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1b2c4cb-8a0c-46dc-85df-40b43ae34f74","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:23:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1b2c4cb-8a0c-46dc-85df-40b43ae34f74","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:23:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1b2c4cb-8a0c-46dc-85df-40b43ae34f74","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:23:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1b2c4cb-8a0c-46dc-85df-40b43ae34f74","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0ba2b8/rate-test-model-0ba2b8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:23:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a1b2c4cb-8a0c-46dc-85df-40b43ae34f74","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:23:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a1b2c4cb-8a0c-46dc-85df-40b43ae34f74","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8377d9"}
{"level":"debug","ts":"2026-07-06T14:23:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a1b2c4cb-8a0c-46dc-85df-40b43ae34f74","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T14:23:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a1b2c4cb-8a0c-46dc-85df-40b43ae34f74","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3cb98f35-81b1-470b-8cb3-7d74aad65096","keyName":"e2e-rate-a-8377d9","selected_subscription":"e2e-rate-iso-a-8377d9","selected_subscription_key":"ai-tenant-e2e-shared-a-0ba2b8/e2e-rate-iso-a-8377d9@ai-tenant-e2e-shared-a-0ba2b8/rate-test-model-0ba2b8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0ba2b8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8377d9","namespace":"ai-tenant-e2e-shared-a-0ba2b8","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T14:23:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a1b2c4cb-8a0c-46dc-85df-40b43ae34f74","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:23:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a1b2c4cb-8a0c-46dc-85df-40b43ae34f74","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:23:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"888cea10-143c-4ebf-b434-79ab729bd1ad","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:54954","PortSpecifier":{"PortValue":54954}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"888cea10-143c-4ebf-b434-79ab729bd1ad","method":"POST","path":"/ai-tenant-e2e-shared-a-0ba2b8/rate-test-model-0ba2b8/v1/completions","host":"e2e-shared-a-0ba2b8.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:23:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"888cea10-143c-4ebf-b434-79ab729bd1ad","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:54954","PortSpecifier":{"PortValue":54954}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347805,"nanos":555437434},"http":{"id":"888cea10-143c-4ebf-b434-79ab729bd1ad","method":"POST","headers":{":authority":"e2e-shared-a-0ba2b8.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-0ba2b8/rate-test-model-0ba2b8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:23:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"888cea10-143c-4ebf-b434-79ab729bd1ad","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-izb075QC3mNdWx5u_uRdJltlc4baP2XqysZwgfbkPQ1uz0SRao5fNwzgIhun"}
{"level":"debug","ts":"2026-07-06T14:23:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"888cea10-143c-4ebf-b434-79ab729bd1ad","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-0ba2b8.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-izb075QC3mNdWx5u_uRdJltlc4baP2XqysZwgfbkPQ1uz0SRao5fNwzgIhun\"}"}
{"level":"debug","ts":"2026-07-06T14:23:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"888cea10-143c-4ebf-b434-79ab729bd1ad","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0ba2b8.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3cb98f35-81b1-470b-8cb3-7d74aad65096","keyName":"e2e-rate-a-8377d9","subscription":"e2e-rate-iso-a-8377d9","tenant":"e2e-shared-a-0ba2b8","userId":"3cb98f35-81b1-470b-8cb3-7d74aad65096","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T14:23:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"888cea10-143c-4ebf-b434-79ab729bd1ad","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-0ba2b8.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-0ba2b8/rate-test-model-0ba2b8\",\"requestedSubscription\":\"e2e-rate-iso-a-8377d9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T14:23:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"888cea10-143c-4ebf-b434-79ab729bd1ad","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-0ba2b8.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0ba2b8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8377d9","namespace":"ai-tenant-e2e-shared-a-0ba2b8","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T14:23:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"888cea10-143c-4ebf-b434-79ab729bd1ad","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:23:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"888cea10-143c-4ebf-b434-79ab729bd1ad","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:23:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"888cea10-143c-4ebf-b434-79ab729bd1ad","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:23:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"888cea10-143c-4ebf-b434-79ab729bd1ad","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-0ba2b8/rate-test-model-0ba2b8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:23:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"888cea10-143c-4ebf-b434-79ab729bd1ad","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:23:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"888cea10-143c-4ebf-b434-79ab729bd1ad","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:23:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"888cea10-143c-4ebf-b434-79ab729bd1ad","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8377d9"}
{"level":"debug","ts":"2026-07-06T14:23:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"888cea10-143c-4ebf-b434-79ab729bd1ad","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T14:23:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"888cea10-143c-4ebf-b434-79ab729bd1ad","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3cb98f35-81b1-470b-8cb3-7d74aad65096","keyName":"e2e-rate-a-8377d9","selected_subscription":"e2e-rate-iso-a-8377d9","selected_subscription_key":"ai-tenant-e2e-shared-a-0ba2b8/e2e-rate-iso-a-8377d9@ai-tenant-e2e-shared-a-0ba2b8/rate-test-model-0ba2b8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0ba2b8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8377d9","namespace":"ai-tenant-e2e-shared-a-0ba2b8","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T14:23:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"888cea10-143c-4ebf-b434-79ab729bd1ad","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:23:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"888cea10-143c-4ebf-b434-79ab729bd1ad","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:23:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1c0ce466-2370-4d91-8c4a-0c6f32b56148","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:43662","PortSpecifier":{"PortValue":43662}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1c0ce466-2370-4d91-8c4a-0c6f32b56148","method":"POST","path":"/ai-tenant-e2e-shared-b-74bb89/rate-test-model-74bb89/v1/completions","host":"e2e-shared-b-74bb89.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:23:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1c0ce466-2370-4d91-8c4a-0c6f32b56148","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.8:43662","PortSpecifier":{"PortValue":43662}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347805,"nanos":594535515},"http":{"id":"1c0ce466-2370-4d91-8c4a-0c6f32b56148","method":"POST","headers":{":authority":"e2e-shared-b-74bb89.apps.d39888b7-e698-444e-9b06-eae81554889a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-74bb89/rate-test-model-74bb89/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:23:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1c0ce466-2370-4d91-8c4a-0c6f32b56148","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-19SrtGJFbsJvMjE9H_oO81pILf7TiXbtQTGiE0Fir8W41pDkZYvfAJsAxMfgm"}
{"level":"debug","ts":"2026-07-06T14:23:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1c0ce466-2370-4d91-8c4a-0c6f32b56148","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-74bb89.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-19SrtGJFbsJvMjE9H_oO81pILf7TiXbtQTGiE0Fir8W41pDkZYvfAJsAxMfgm\"}"}
{"level":"debug","ts":"2026-07-06T14:23:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1c0ce466-2370-4d91-8c4a-0c6f32b56148","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-74bb89.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"56a28050-ba66-4ee8-b5a6-7bd86d8f7456","keyName":"e2e-rate-b-8377d9","subscription":"e2e-rate-iso-b-8377d9","tenant":"e2e-shared-b-74bb89","userId":"56a28050-ba66-4ee8-b5a6-7bd86d8f7456","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T14:23:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1c0ce466-2370-4d91-8c4a-0c6f32b56148","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-74bb89.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-74bb89/rate-test-model-74bb89\",\"requestedSubscription\":\"e2e-rate-iso-b-8377d9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T14:23:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1c0ce466-2370-4d91-8c4a-0c6f32b56148","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-74bb89.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-74bb89","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-8377d9","namespace":"ai-tenant-e2e-shared-b-74bb89","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T14:23:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1c0ce466-2370-4d91-8c4a-0c6f32b56148","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:23:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1c0ce466-2370-4d91-8c4a-0c6f32b56148","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:23:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1c0ce466-2370-4d91-8c4a-0c6f32b56148","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:23:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1c0ce466-2370-4d91-8c4a-0c6f32b56148","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-74bb89/rate-test-model-74bb89\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:23:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1c0ce466-2370-4d91-8c4a-0c6f32b56148","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:23:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1c0ce466-2370-4d91-8c4a-0c6f32b56148","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:23:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1c0ce466-2370-4d91-8c4a-0c6f32b56148","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-8377d9"}
{"level":"debug","ts":"2026-07-06T14:23:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1c0ce466-2370-4d91-8c4a-0c6f32b56148","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T14:23:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1c0ce466-2370-4d91-8c4a-0c6f32b56148","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"56a28050-ba66-4ee8-b5a6-7bd86d8f7456","keyName":"e2e-rate-b-8377d9","selected_subscription":"e2e-rate-iso-b-8377d9","selected_subscription_key":"ai-tenant-e2e-shared-b-74bb89/e2e-rate-iso-b-8377d9@ai-tenant-e2e-shared-b-74bb89/rate-test-model-74bb89","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-74bb89","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-8377d9","namespace":"ai-tenant-e2e-shared-b-74bb89","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T14:23:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1c0ce466-2370-4d91-8c4a-0c6f32b56148","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:23:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1c0ce466-2370-4d91-8c4a-0c6f32b56148","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5a3e431c2fc8a75cf4ac184ae3e6579b32ddf0274564bac6401ae3804cd920b2"}
{"level":"info","ts":"2026-07-06T14:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bf730369d5f3c37c1261b87e158d9b6a9a171727c29bdb0a52745663b35d517b"}
{"level":"info","ts":"2026-07-06T14:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2789ce85c9a3dd3231e7434edebb29afb4709948aa6fec4967153aad8c1ac858"}
{"level":"info","ts":"2026-07-06T14:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c9576128729397dc2f57070fef223c901613721fd7675d8bd48d04a68f9dde6c"}
{"level":"info","ts":"2026-07-06T14:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b0e64d14bd75d344fdeda26d8b1cd0396540b39e1b65b5064bea74b11b465d50"}
{"level":"info","ts":"2026-07-06T14:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/43530defa5439b114d8b17b28356586dec329941ee52b0dc693eeebf38415cb9"}
{"level":"info","ts":"2026-07-06T14:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/76faf55deae1b057f34620e3be826809dc6aa86486324b6c130693c51076b844"}
{"level":"info","ts":"2026-07-06T14:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f9847030c9c3eda8b8a342bf5471e8e70ca2d03bb596c1a11a37133c5c5c6aaa"}
{"level":"info","ts":"2026-07-06T14:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/54aab2355b7d89061a1ab42998569f6e7d6d608b19a8e1252a234b468dfc0849"}
{"level":"info","ts":"2026-07-06T14:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4c240611a65c30ac39b315ef6bd54fa9dce18100caf9c41d50a191b001227841"}
{"level":"info","ts":"2026-07-06T14:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/91472444948da42303c9b063d8fd0d9a1cbf0e82eb24b5820a808fa11b4bd06f"}
{"level":"info","ts":"2026-07-06T14:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/87f1845ee69259073b667258e6f035ca28b848901109f10ba90ba4a97b48fec7"}
{"level":"info","ts":"2026-07-06T14:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/512020f6f2ccbed4eefe7b06f23efa4e0a37ec6439985924599cbcba816ba848"}
{"level":"info","ts":"2026-07-06T14:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/16a692d19ddb9cc3384fbcd99004fe895c63b5429f44e82a10811ed0ae35bad8"}
{"level":"info","ts":"2026-07-06T14:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f0a6d7088f58f1b95dde053a38c79dbbb516bfd92d5dd29a031e5e3175d7635a"}
{"level":"info","ts":"2026-07-06T14:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/32b5dad0fe07ab53010635e9ce0826a2c22e53bf49c2547e82d778acc77a208d"}
{"level":"info","ts":"2026-07-06T14:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bc9d3fd94c423830eed0ccd0cd9a8a020ff6217b53b8491b04ce6ba379aaea79"}
{"level":"info","ts":"2026-07-06T14:23:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9f187f8130e51d088ac6fff8f66dfd80adcbf5373f61633e84367c408d715095"}
{"level":"info","ts":"2026-07-06T14:24:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bf38e6097a654408e0ae46748173c0707b2c18b22f336818ea0e9ef56b3585f5"}
{"level":"info","ts":"2026-07-06T14:24:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ea9f1e8cbf4d6a6bcc37a205a03e6e248ddc251368ce6dec04cb0bb8ccb71a70"}