--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"debug","ts":"2026-07-08T23:34:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7afe5212-7276-4dde-bc2d-a294dfd77aab","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-08T23:34:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ed3730bb8be3cc8a07b2b7823a7b22eff536eda716e9d123c0e2f5f40af920cd"}
{"level":"info","ts":"2026-07-08T23:35:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/43f4324086981688daea02c1573516a3f518e60e35bc9d62dd9e758aa013e644"}
{"level":"info","ts":"2026-07-08T23:35:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/15db0a5088234a1488c8df42e1b5fde9641878e08441c2166f4f58ec6e6cacef"}
{"level":"info","ts":"2026-07-08T23:35:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1461b761a857cb17a000b435c5d4c88976d03c37064899d48f8cfb61e367a7d3"}
{"level":"info","ts":"2026-07-08T23:35:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7367a04748e1ab08f9d000bb4867fc935d64f5dcaf480d68b89f9fc470c30dac"}
{"level":"info","ts":"2026-07-08T23:35:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c7ac5a333818fe9ececc41ffd42af2931b45a95dc2abf994ee9774a999f166be"}
{"level":"info","ts":"2026-07-08T23:35:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/de365cb70efe40f21a0773383ad05a9561666d96417e97d83721bdf28b259ae7"}
{"level":"info","ts":"2026-07-08T23:35:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/57d2ed22f6e3df1d30690f5ea8bd0ae38316afcee9273de232320db08bfbbac1"}
{"level":"info","ts":"2026-07-08T23:35:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/453a38ad6c5c1c31fde69b7700f13f1df3f712a8f09e2b98729dbc0adb761d8f"}
{"level":"info","ts":"2026-07-08T23:35:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fc79d1900e5b44dc8f08b470e54963cc9997520754fdd4de527c43784de04a5c"}
{"level":"info","ts":"2026-07-08T23:35:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0d4d7ae7253e7fd30b7c195805f88bd2583084bcf33c79141b4da80ea91a932d"}
{"level":"info","ts":"2026-07-08T23:35:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cbf2c97a6e45f339e58de384b5885c03ba9f5c9a7ca945751eb66c961f21e187"}
{"level":"info","ts":"2026-07-08T23:35:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/048fa3a5032cb300f8dafc4f2db4c8588fe7e8e940dccebb408bf594f3e32bc9"}
{"level":"info","ts":"2026-07-08T23:35:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9d12555a79e824e38b2a7b9ae318b5b3e41f8dcfd32f8315b657f668b6d62118"}
{"level":"info","ts":"2026-07-08T23:35:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/69e24ddf1fcd5438c7aa8a6e8197a4a5ce1271c4f69b5d45acc753389c4940fe"}
{"level":"info","ts":"2026-07-08T23:35:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/65af733ace161bee446ea5b95ce64c18f0f84610690657ab028e9b2d893c7b3c"}
{"level":"info","ts":"2026-07-08T23:35:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7e2cee5f6d8d4e06f21e8a1df3d2c6474679ec6cf1696f5a967f3b9c9d845db3"}
{"level":"info","ts":"2026-07-08T23:35:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/da6faf1f4cf007a5f1ddb297a0f6745414f2f86c166282bf17502b7178193674"}
{"level":"info","ts":"2026-07-08T23:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/04c5bea59cafdb50d7d92d76cf6509ab0b349e3756e0439e35717eb6b7ed3ed0"}
{"level":"info","ts":"2026-07-08T23:35:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8789a54a213f95c8b94a09e46badbaecd72a494639f302af5cdc3313fa2d48f0"}
{"level":"info","ts":"2026-07-08T23:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a28454cc27aed0fbf6ae82dd88709c43b6fde10b7fecde86aa62c20910388054"}
{"level":"info","ts":"2026-07-08T23:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ddc23862d2715537ddf3ad3d7f3861f0eea59270fc3580b928dcc0cf3b5b9e6b"}
{"level":"info","ts":"2026-07-08T23:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f40cd2adfa405eae46733ec624c34826b8d6348d52b456b48e90f9da60f981db"}
{"level":"info","ts":"2026-07-08T23:35:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0417fdaa04572c8e8f7c40d8a93799582e711b2962f3349e7ef7179ad008e8a5"}
{"level":"debug","ts":"2026-07-08T23:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8bdcabade25c760c23a4847c8bb4780d570c7579a808445d810f2f5e631597a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:36:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:36:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8bdcabade25c760c23a4847c8bb4780d570c7579a808445d810f2f5e631597a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8bdcabade25c760c23a4847c8bb4780d570c7579a808445d810f2f5e631597a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8bdcabade25c760c23a4847c8bb4780d570c7579a808445d810f2f5e631597a"}
{"level":"debug","ts":"2026-07-08T23:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8bdcabade25c760c23a4847c8bb4780d570c7579a808445d810f2f5e631597a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8bdcabade25c760c23a4847c8bb4780d570c7579a808445d810f2f5e631597a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8bdcabade25c760c23a4847c8bb4780d570c7579a808445d810f2f5e631597a"}
{"level":"debug","ts":"2026-07-08T23:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8bdcabade25c760c23a4847c8bb4780d570c7579a808445d810f2f5e631597a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:36:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:36:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a8bdcabade25c760c23a4847c8bb4780d570c7579a808445d810f2f5e631597a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8bdcabade25c760c23a4847c8bb4780d570c7579a808445d810f2f5e631597a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8bdcabade25c760c23a4847c8bb4780d570c7579a808445d810f2f5e631597a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8bdcabade25c760c23a4847c8bb4780d570c7579a808445d810f2f5e631597a"}
{"level":"debug","ts":"2026-07-08T23:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"448d963cdbb59037ab3cbcf1b73b9971bc62c6575ad8f81737caa976b967b7c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:36:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:36:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"448d963cdbb59037ab3cbcf1b73b9971bc62c6575ad8f81737caa976b967b7c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"448d963cdbb59037ab3cbcf1b73b9971bc62c6575ad8f81737caa976b967b7c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"448d963cdbb59037ab3cbcf1b73b9971bc62c6575ad8f81737caa976b967b7c9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/448d963cdbb59037ab3cbcf1b73b9971bc62c6575ad8f81737caa976b967b7c9"}
{"level":"debug","ts":"2026-07-08T23:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"448d963cdbb59037ab3cbcf1b73b9971bc62c6575ad8f81737caa976b967b7c9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/448d963cdbb59037ab3cbcf1b73b9971bc62c6575ad8f81737caa976b967b7c9"}
{"level":"debug","ts":"2026-07-08T23:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"448d963cdbb59037ab3cbcf1b73b9971bc62c6575ad8f81737caa976b967b7c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:36:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:36:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["448d963cdbb59037ab3cbcf1b73b9971bc62c6575ad8f81737caa976b967b7c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"448d963cdbb59037ab3cbcf1b73b9971bc62c6575ad8f81737caa976b967b7c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"448d963cdbb59037ab3cbcf1b73b9971bc62c6575ad8f81737caa976b967b7c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a6251e282d7084b8155bc3467e38d2ed676de70984fe051289f47917dd29508","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:36:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:36:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a6251e282d7084b8155bc3467e38d2ed676de70984fe051289f47917dd29508","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a6251e282d7084b8155bc3467e38d2ed676de70984fe051289f47917dd29508","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/448d963cdbb59037ab3cbcf1b73b9971bc62c6575ad8f81737caa976b967b7c9"}
{"level":"debug","ts":"2026-07-08T23:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a6251e282d7084b8155bc3467e38d2ed676de70984fe051289f47917dd29508","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:36:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:36:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a6251e282d7084b8155bc3467e38d2ed676de70984fe051289f47917dd29508","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a6251e282d7084b8155bc3467e38d2ed676de70984fe051289f47917dd29508","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a6251e282d7084b8155bc3467e38d2ed676de70984fe051289f47917dd29508"}
{"level":"debug","ts":"2026-07-08T23:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a6251e282d7084b8155bc3467e38d2ed676de70984fe051289f47917dd29508","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a6251e282d7084b8155bc3467e38d2ed676de70984fe051289f47917dd29508"}
{"level":"debug","ts":"2026-07-08T23:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a6251e282d7084b8155bc3467e38d2ed676de70984fe051289f47917dd29508","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:36:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:36:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a6251e282d7084b8155bc3467e38d2ed676de70984fe051289f47917dd29508"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a6251e282d7084b8155bc3467e38d2ed676de70984fe051289f47917dd29508","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a6251e282d7084b8155bc3467e38d2ed676de70984fe051289f47917dd29508","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a6251e282d7084b8155bc3467e38d2ed676de70984fe051289f47917dd29508"}
{"level":"debug","ts":"2026-07-08T23:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a5e9a8994db6f0f1eb3f337f6202b2a2f5598ce3390ee277e81650aff214d04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:36:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:36:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a5e9a8994db6f0f1eb3f337f6202b2a2f5598ce3390ee277e81650aff214d04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a5e9a8994db6f0f1eb3f337f6202b2a2f5598ce3390ee277e81650aff214d04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a5e9a8994db6f0f1eb3f337f6202b2a2f5598ce3390ee277e81650aff214d04","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a5e9a8994db6f0f1eb3f337f6202b2a2f5598ce3390ee277e81650aff214d04"}
{"level":"debug","ts":"2026-07-08T23:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a5e9a8994db6f0f1eb3f337f6202b2a2f5598ce3390ee277e81650aff214d04","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a5e9a8994db6f0f1eb3f337f6202b2a2f5598ce3390ee277e81650aff214d04"}
{"level":"debug","ts":"2026-07-08T23:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a5e9a8994db6f0f1eb3f337f6202b2a2f5598ce3390ee277e81650aff214d04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:36:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:36:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a5e9a8994db6f0f1eb3f337f6202b2a2f5598ce3390ee277e81650aff214d04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a5e9a8994db6f0f1eb3f337f6202b2a2f5598ce3390ee277e81650aff214d04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a5e9a8994db6f0f1eb3f337f6202b2a2f5598ce3390ee277e81650aff214d04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:36:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:36:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a5e9a8994db6f0f1eb3f337f6202b2a2f5598ce3390ee277e81650aff214d04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a5e9a8994db6f0f1eb3f337f6202b2a2f5598ce3390ee277e81650aff214d04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a5e9a8994db6f0f1eb3f337f6202b2a2f5598ce3390ee277e81650aff214d04","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a5e9a8994db6f0f1eb3f337f6202b2a2f5598ce3390ee277e81650aff214d04"}
{"level":"debug","ts":"2026-07-08T23:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a5e9a8994db6f0f1eb3f337f6202b2a2f5598ce3390ee277e81650aff214d04","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a5e9a8994db6f0f1eb3f337f6202b2a2f5598ce3390ee277e81650aff214d04"}
{"level":"debug","ts":"2026-07-08T23:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a5e9a8994db6f0f1eb3f337f6202b2a2f5598ce3390ee277e81650aff214d04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:36:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:36:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a5e9a8994db6f0f1eb3f337f6202b2a2f5598ce3390ee277e81650aff214d04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a5e9a8994db6f0f1eb3f337f6202b2a2f5598ce3390ee277e81650aff214d04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a5e9a8994db6f0f1eb3f337f6202b2a2f5598ce3390ee277e81650aff214d04","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a5e9a8994db6f0f1eb3f337f6202b2a2f5598ce3390ee277e81650aff214d04"}
{"level":"debug","ts":"2026-07-08T23:36:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c4534b05752987397e204411184712597e6c9c1c4ef2c1f410c7988f5c27ba2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:36:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:36:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:36:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c4534b05752987397e204411184712597e6c9c1c4ef2c1f410c7988f5c27ba2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:36:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c4534b05752987397e204411184712597e6c9c1c4ef2c1f410c7988f5c27ba2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:36:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c4534b05752987397e204411184712597e6c9c1c4ef2c1f410c7988f5c27ba2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:36:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c4534b05752987397e204411184712597e6c9c1c4ef2c1f410c7988f5c27ba2"}
{"level":"debug","ts":"2026-07-08T23:36:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c4534b05752987397e204411184712597e6c9c1c4ef2c1f410c7988f5c27ba2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:36:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c4534b05752987397e204411184712597e6c9c1c4ef2c1f410c7988f5c27ba2"}
{"level":"debug","ts":"2026-07-08T23:36:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c4534b05752987397e204411184712597e6c9c1c4ef2c1f410c7988f5c27ba2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:36:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:36:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c4534b05752987397e204411184712597e6c9c1c4ef2c1f410c7988f5c27ba2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:36:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c4534b05752987397e204411184712597e6c9c1c4ef2c1f410c7988f5c27ba2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:36:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c4534b05752987397e204411184712597e6c9c1c4ef2c1f410c7988f5c27ba2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:36:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:36:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:36:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c4534b05752987397e204411184712597e6c9c1c4ef2c1f410c7988f5c27ba2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:36:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4985588b26fbc161016251cf8df25f7374dbe559f86b0595cd4ec5387aea9bfe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:36:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:36:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:36:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c4534b05752987397e204411184712597e6c9c1c4ef2c1f410c7988f5c27ba2"}
{"level":"info","ts":"2026-07-08T23:36:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4985588b26fbc161016251cf8df25f7374dbe559f86b0595cd4ec5387aea9bfe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:36:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c4534b05752987397e204411184712597e6c9c1c4ef2c1f410c7988f5c27ba2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:36:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:36:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c4534b05752987397e204411184712597e6c9c1c4ef2c1f410c7988f5c27ba2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:36:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c4534b05752987397e204411184712597e6c9c1c4ef2c1f410c7988f5c27ba2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:36:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4985588b26fbc161016251cf8df25f7374dbe559f86b0595cd4ec5387aea9bfe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:36:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:36:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4985588b26fbc161016251cf8df25f7374dbe559f86b0595cd4ec5387aea9bfe"}
{"level":"info","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4985588b26fbc161016251cf8df25f7374dbe559f86b0595cd4ec5387aea9bfe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c4534b05752987397e204411184712597e6c9c1c4ef2c1f410c7988f5c27ba2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:36:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:36:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c4534b05752987397e204411184712597e6c9c1c4ef2c1f410c7988f5c27ba2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4985588b26fbc161016251cf8df25f7374dbe559f86b0595cd4ec5387aea9bfe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:36:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:36:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4985588b26fbc161016251cf8df25f7374dbe559f86b0595cd4ec5387aea9bfe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c4534b05752987397e204411184712597e6c9c1c4ef2c1f410c7988f5c27ba2"}
{"level":"info","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4985588b26fbc161016251cf8df25f7374dbe559f86b0595cd4ec5387aea9bfe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c4534b05752987397e204411184712597e6c9c1c4ef2c1f410c7988f5c27ba2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:36:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:36:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c4534b05752987397e204411184712597e6c9c1c4ef2c1f410c7988f5c27ba2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c4534b05752987397e204411184712597e6c9c1c4ef2c1f410c7988f5c27ba2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4985588b26fbc161016251cf8df25f7374dbe559f86b0595cd4ec5387aea9bfe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:36:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:36:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4985588b26fbc161016251cf8df25f7374dbe559f86b0595cd4ec5387aea9bfe"}
{"level":"info","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4985588b26fbc161016251cf8df25f7374dbe559f86b0595cd4ec5387aea9bfe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c4534b05752987397e204411184712597e6c9c1c4ef2c1f410c7988f5c27ba2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:36:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:36:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c4534b05752987397e204411184712597e6c9c1c4ef2c1f410c7988f5c27ba2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4985588b26fbc161016251cf8df25f7374dbe559f86b0595cd4ec5387aea9bfe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:36:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:36:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4985588b26fbc161016251cf8df25f7374dbe559f86b0595cd4ec5387aea9bfe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c4534b05752987397e204411184712597e6c9c1c4ef2c1f410c7988f5c27ba2"}
{"level":"info","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4985588b26fbc161016251cf8df25f7374dbe559f86b0595cd4ec5387aea9bfe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c4534b05752987397e204411184712597e6c9c1c4ef2c1f410c7988f5c27ba2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:36:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:36:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c4534b05752987397e204411184712597e6c9c1c4ef2c1f410c7988f5c27ba2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4985588b26fbc161016251cf8df25f7374dbe559f86b0595cd4ec5387aea9bfe"}
{"level":"info","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c4534b05752987397e204411184712597e6c9c1c4ef2c1f410c7988f5c27ba2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4985588b26fbc161016251cf8df25f7374dbe559f86b0595cd4ec5387aea9bfe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c4534b05752987397e204411184712597e6c9c1c4ef2c1f410c7988f5c27ba2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:36:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:36:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c4534b05752987397e204411184712597e6c9c1c4ef2c1f410c7988f5c27ba2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c4534b05752987397e204411184712597e6c9c1c4ef2c1f410c7988f5c27ba2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c4534b05752987397e204411184712597e6c9c1c4ef2c1f410c7988f5c27ba2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c4534b05752987397e204411184712597e6c9c1c4ef2c1f410c7988f5c27ba2"}
{"level":"debug","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c4534b05752987397e204411184712597e6c9c1c4ef2c1f410c7988f5c27ba2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:36:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:36:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c4534b05752987397e204411184712597e6c9c1c4ef2c1f410c7988f5c27ba2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4985588b26fbc161016251cf8df25f7374dbe559f86b0595cd4ec5387aea9bfe"}
{"level":"info","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c4534b05752987397e204411184712597e6c9c1c4ef2c1f410c7988f5c27ba2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c4534b05752987397e204411184712597e6c9c1c4ef2c1f410c7988f5c27ba2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:36:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:36:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c4534b05752987397e204411184712597e6c9c1c4ef2c1f410c7988f5c27ba2"}
{"level":"info","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c4534b05752987397e204411184712597e6c9c1c4ef2c1f410c7988f5c27ba2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c4534b05752987397e204411184712597e6c9c1c4ef2c1f410c7988f5c27ba2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c4534b05752987397e204411184712597e6c9c1c4ef2c1f410c7988f5c27ba2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c4534b05752987397e204411184712597e6c9c1c4ef2c1f410c7988f5c27ba2"}
{"level":"debug","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c4534b05752987397e204411184712597e6c9c1c4ef2c1f410c7988f5c27ba2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c4534b05752987397e204411184712597e6c9c1c4ef2c1f410c7988f5c27ba2"}
{"level":"debug","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c4534b05752987397e204411184712597e6c9c1c4ef2c1f410c7988f5c27ba2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:36:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:36:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c4534b05752987397e204411184712597e6c9c1c4ef2c1f410c7988f5c27ba2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c4534b05752987397e204411184712597e6c9c1c4ef2c1f410c7988f5c27ba2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c4534b05752987397e204411184712597e6c9c1c4ef2c1f410c7988f5c27ba2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:36:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:36:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c4534b05752987397e204411184712597e6c9c1c4ef2c1f410c7988f5c27ba2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d9e130a750721b56209ccafd0546736c8a84c297f0780f5b6e415d661c0451d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:36:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:36:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c4534b05752987397e204411184712597e6c9c1c4ef2c1f410c7988f5c27ba2"}
{"level":"info","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d9e130a750721b56209ccafd0546736c8a84c297f0780f5b6e415d661c0451d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c4534b05752987397e204411184712597e6c9c1c4ef2c1f410c7988f5c27ba2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:36:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:36:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c4534b05752987397e204411184712597e6c9c1c4ef2c1f410c7988f5c27ba2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c4534b05752987397e204411184712597e6c9c1c4ef2c1f410c7988f5c27ba2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d9e130a750721b56209ccafd0546736c8a84c297f0780f5b6e415d661c0451d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:36:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:36:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d9e130a750721b56209ccafd0546736c8a84c297f0780f5b6e415d661c0451d"}
{"level":"info","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d9e130a750721b56209ccafd0546736c8a84c297f0780f5b6e415d661c0451d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c4534b05752987397e204411184712597e6c9c1c4ef2c1f410c7988f5c27ba2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:36:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:36:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c4534b05752987397e204411184712597e6c9c1c4ef2c1f410c7988f5c27ba2"}
{"level":"info","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c4534b05752987397e204411184712597e6c9c1c4ef2c1f410c7988f5c27ba2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d9e130a750721b56209ccafd0546736c8a84c297f0780f5b6e415d661c0451d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c4534b05752987397e204411184712597e6c9c1c4ef2c1f410c7988f5c27ba2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:36:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:36:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c4534b05752987397e204411184712597e6c9c1c4ef2c1f410c7988f5c27ba2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c4534b05752987397e204411184712597e6c9c1c4ef2c1f410c7988f5c27ba2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c4534b05752987397e204411184712597e6c9c1c4ef2c1f410c7988f5c27ba2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:36:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:36:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c4534b05752987397e204411184712597e6c9c1c4ef2c1f410c7988f5c27ba2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d9e130a750721b56209ccafd0546736c8a84c297f0780f5b6e415d661c0451d"}
{"level":"error","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8c4534b05752987397e204411184712597e6c9c1c4ef2c1f410c7988f5c27ba2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8c4534b05752987397e204411184712597e6c9c1c4ef2c1f410c7988f5c27ba2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d9e130a750721b56209ccafd0546736c8a84c297f0780f5b6e415d661c0451d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:36:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:36:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d9e130a750721b56209ccafd0546736c8a84c297f0780f5b6e415d661c0451d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d9e130a750721b56209ccafd0546736c8a84c297f0780f5b6e415d661c0451d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c4534b05752987397e204411184712597e6c9c1c4ef2c1f410c7988f5c27ba2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:36:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:36:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c4534b05752987397e204411184712597e6c9c1c4ef2c1f410c7988f5c27ba2"}
{"level":"info","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c4534b05752987397e204411184712597e6c9c1c4ef2c1f410c7988f5c27ba2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d9e130a750721b56209ccafd0546736c8a84c297f0780f5b6e415d661c0451d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:36:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:36:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d9e130a750721b56209ccafd0546736c8a84c297f0780f5b6e415d661c0451d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c4534b05752987397e204411184712597e6c9c1c4ef2c1f410c7988f5c27ba2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:36:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:36:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c4534b05752987397e204411184712597e6c9c1c4ef2c1f410c7988f5c27ba2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d9e130a750721b56209ccafd0546736c8a84c297f0780f5b6e415d661c0451d"}
{"level":"info","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c4534b05752987397e204411184712597e6c9c1c4ef2c1f410c7988f5c27ba2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d9e130a750721b56209ccafd0546736c8a84c297f0780f5b6e415d661c0451d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:36:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:36:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d9e130a750721b56209ccafd0546736c8a84c297f0780f5b6e415d661c0451d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d9e130a750721b56209ccafd0546736c8a84c297f0780f5b6e415d661c0451d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c4534b05752987397e204411184712597e6c9c1c4ef2c1f410c7988f5c27ba2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:36:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:36:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c4534b05752987397e204411184712597e6c9c1c4ef2c1f410c7988f5c27ba2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d9e130a750721b56209ccafd0546736c8a84c297f0780f5b6e415d661c0451d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c4534b05752987397e204411184712597e6c9c1c4ef2c1f410c7988f5c27ba2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c4534b05752987397e204411184712597e6c9c1c4ef2c1f410c7988f5c27ba2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c4534b05752987397e204411184712597e6c9c1c4ef2c1f410c7988f5c27ba2"}
{"level":"debug","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0dec4de11afe7961c193f5a49176cfc4c9f63e91c9981e59fa41278069500ad8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:36:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:36:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d9e130a750721b56209ccafd0546736c8a84c297f0780f5b6e415d661c0451d"}
{"level":"info","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0dec4de11afe7961c193f5a49176cfc4c9f63e91c9981e59fa41278069500ad8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c4534b05752987397e204411184712597e6c9c1c4ef2c1f410c7988f5c27ba2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0dec4de11afe7961c193f5a49176cfc4c9f63e91c9981e59fa41278069500ad8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0dec4de11afe7961c193f5a49176cfc4c9f63e91c9981e59fa41278069500ad8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c4534b05752987397e204411184712597e6c9c1c4ef2c1f410c7988f5c27ba2"}
{"level":"debug","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0dec4de11afe7961c193f5a49176cfc4c9f63e91c9981e59fa41278069500ad8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:36:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:36:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0dec4de11afe7961c193f5a49176cfc4c9f63e91c9981e59fa41278069500ad8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0dec4de11afe7961c193f5a49176cfc4c9f63e91c9981e59fa41278069500ad8"}
{"level":"debug","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c4534b05752987397e204411184712597e6c9c1c4ef2c1f410c7988f5c27ba2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:36:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:36:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c4534b05752987397e204411184712597e6c9c1c4ef2c1f410c7988f5c27ba2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c4534b05752987397e204411184712597e6c9c1c4ef2c1f410c7988f5c27ba2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0dec4de11afe7961c193f5a49176cfc4c9f63e91c9981e59fa41278069500ad8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c4534b05752987397e204411184712597e6c9c1c4ef2c1f410c7988f5c27ba2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0dec4de11afe7961c193f5a49176cfc4c9f63e91c9981e59fa41278069500ad8"}
{"level":"debug","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0dec4de11afe7961c193f5a49176cfc4c9f63e91c9981e59fa41278069500ad8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:36:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:36:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0dec4de11afe7961c193f5a49176cfc4c9f63e91c9981e59fa41278069500ad8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c4534b05752987397e204411184712597e6c9c1c4ef2c1f410c7988f5c27ba2"}
{"level":"info","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0dec4de11afe7961c193f5a49176cfc4c9f63e91c9981e59fa41278069500ad8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0dec4de11afe7961c193f5a49176cfc4c9f63e91c9981e59fa41278069500ad8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:36:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0dec4de11afe7961c193f5a49176cfc4c9f63e91c9981e59fa41278069500ad8"}
{"level":"info","ts":"2026-07-08T23:36:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6a5e9a8994db6f0f1eb3f337f6202b2a2f5598ce3390ee277e81650aff214d04"}
{"level":"info","ts":"2026-07-08T23:36:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7a6251e282d7084b8155bc3467e38d2ed676de70984fe051289f47917dd29508"}
{"level":"info","ts":"2026-07-08T23:36:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4985588b26fbc161016251cf8df25f7374dbe559f86b0595cd4ec5387aea9bfe"}
{"level":"info","ts":"2026-07-08T23:36:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/448d963cdbb59037ab3cbcf1b73b9971bc62c6575ad8f81737caa976b967b7c9"}
{"level":"info","ts":"2026-07-08T23:36:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6d9e130a750721b56209ccafd0546736c8a84c297f0780f5b6e415d661c0451d"}
{"level":"info","ts":"2026-07-08T23:36:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0dec4de11afe7961c193f5a49176cfc4c9f63e91c9981e59fa41278069500ad8"}
{"level":"info","ts":"2026-07-08T23:36:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a8bdcabade25c760c23a4847c8bb4780d570c7579a808445d810f2f5e631597a"}
{"level":"info","ts":"2026-07-08T23:36:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8c4534b05752987397e204411184712597e6c9c1c4ef2c1f410c7988f5c27ba2"}
{"level":"debug","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fce3fee7c38dee40284a2342da9e6c75d6278fda8338879f14db089e2d26d4cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:37:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:37:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fce3fee7c38dee40284a2342da9e6c75d6278fda8338879f14db089e2d26d4cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fce3fee7c38dee40284a2342da9e6c75d6278fda8338879f14db089e2d26d4cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fce3fee7c38dee40284a2342da9e6c75d6278fda8338879f14db089e2d26d4cb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fce3fee7c38dee40284a2342da9e6c75d6278fda8338879f14db089e2d26d4cb"}
{"level":"debug","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fce3fee7c38dee40284a2342da9e6c75d6278fda8338879f14db089e2d26d4cb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fce3fee7c38dee40284a2342da9e6c75d6278fda8338879f14db089e2d26d4cb"}
{"level":"debug","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fce3fee7c38dee40284a2342da9e6c75d6278fda8338879f14db089e2d26d4cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:37:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:37:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fce3fee7c38dee40284a2342da9e6c75d6278fda8338879f14db089e2d26d4cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fce3fee7c38dee40284a2342da9e6c75d6278fda8338879f14db089e2d26d4cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fce3fee7c38dee40284a2342da9e6c75d6278fda8338879f14db089e2d26d4cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:37:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:37:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fce3fee7c38dee40284a2342da9e6c75d6278fda8338879f14db089e2d26d4cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fce3fee7c38dee40284a2342da9e6c75d6278fda8338879f14db089e2d26d4cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fce3fee7c38dee40284a2342da9e6c75d6278fda8338879f14db089e2d26d4cb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fce3fee7c38dee40284a2342da9e6c75d6278fda8338879f14db089e2d26d4cb"}
{"level":"debug","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fce3fee7c38dee40284a2342da9e6c75d6278fda8338879f14db089e2d26d4cb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fce3fee7c38dee40284a2342da9e6c75d6278fda8338879f14db089e2d26d4cb"}
{"level":"debug","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fce3fee7c38dee40284a2342da9e6c75d6278fda8338879f14db089e2d26d4cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:37:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:37:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fce3fee7c38dee40284a2342da9e6c75d6278fda8338879f14db089e2d26d4cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fce3fee7c38dee40284a2342da9e6c75d6278fda8338879f14db089e2d26d4cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fce3fee7c38dee40284a2342da9e6c75d6278fda8338879f14db089e2d26d4cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:37:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:37:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fce3fee7c38dee40284a2342da9e6c75d6278fda8338879f14db089e2d26d4cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fce3fee7c38dee40284a2342da9e6c75d6278fda8338879f14db089e2d26d4cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fce3fee7c38dee40284a2342da9e6c75d6278fda8338879f14db089e2d26d4cb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fce3fee7c38dee40284a2342da9e6c75d6278fda8338879f14db089e2d26d4cb"}
{"level":"debug","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fce3fee7c38dee40284a2342da9e6c75d6278fda8338879f14db089e2d26d4cb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fce3fee7c38dee40284a2342da9e6c75d6278fda8338879f14db089e2d26d4cb"}
{"level":"debug","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fce3fee7c38dee40284a2342da9e6c75d6278fda8338879f14db089e2d26d4cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:37:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:37:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fce3fee7c38dee40284a2342da9e6c75d6278fda8338879f14db089e2d26d4cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fce3fee7c38dee40284a2342da9e6c75d6278fda8338879f14db089e2d26d4cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fce3fee7c38dee40284a2342da9e6c75d6278fda8338879f14db089e2d26d4cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:37:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:37:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fce3fee7c38dee40284a2342da9e6c75d6278fda8338879f14db089e2d26d4cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fce3fee7c38dee40284a2342da9e6c75d6278fda8338879f14db089e2d26d4cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fce3fee7c38dee40284a2342da9e6c75d6278fda8338879f14db089e2d26d4cb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fce3fee7c38dee40284a2342da9e6c75d6278fda8338879f14db089e2d26d4cb"}
{"level":"debug","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fce3fee7c38dee40284a2342da9e6c75d6278fda8338879f14db089e2d26d4cb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fce3fee7c38dee40284a2342da9e6c75d6278fda8338879f14db089e2d26d4cb"}
{"level":"debug","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fce3fee7c38dee40284a2342da9e6c75d6278fda8338879f14db089e2d26d4cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:37:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:37:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fce3fee7c38dee40284a2342da9e6c75d6278fda8338879f14db089e2d26d4cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fce3fee7c38dee40284a2342da9e6c75d6278fda8338879f14db089e2d26d4cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fce3fee7c38dee40284a2342da9e6c75d6278fda8338879f14db089e2d26d4cb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fce3fee7c38dee40284a2342da9e6c75d6278fda8338879f14db089e2d26d4cb"}
{"level":"debug","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"912735ad3a27f2f8f0312622922a1ab8ed1c96b566083137e41a29b49fe330f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:37:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:37:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"912735ad3a27f2f8f0312622922a1ab8ed1c96b566083137e41a29b49fe330f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"912735ad3a27f2f8f0312622922a1ab8ed1c96b566083137e41a29b49fe330f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"912735ad3a27f2f8f0312622922a1ab8ed1c96b566083137e41a29b49fe330f7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/912735ad3a27f2f8f0312622922a1ab8ed1c96b566083137e41a29b49fe330f7"}
{"level":"debug","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"912735ad3a27f2f8f0312622922a1ab8ed1c96b566083137e41a29b49fe330f7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/912735ad3a27f2f8f0312622922a1ab8ed1c96b566083137e41a29b49fe330f7"}
{"level":"debug","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"912735ad3a27f2f8f0312622922a1ab8ed1c96b566083137e41a29b49fe330f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:37:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:37:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["912735ad3a27f2f8f0312622922a1ab8ed1c96b566083137e41a29b49fe330f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"912735ad3a27f2f8f0312622922a1ab8ed1c96b566083137e41a29b49fe330f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"912735ad3a27f2f8f0312622922a1ab8ed1c96b566083137e41a29b49fe330f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:37:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:37:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"912735ad3a27f2f8f0312622922a1ab8ed1c96b566083137e41a29b49fe330f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a252eb011603ed6137e2af41de00be6f860e294a55f59f2ef017cfe69e6a13c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:37:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:37:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/912735ad3a27f2f8f0312622922a1ab8ed1c96b566083137e41a29b49fe330f7"}
{"level":"info","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a252eb011603ed6137e2af41de00be6f860e294a55f59f2ef017cfe69e6a13c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"912735ad3a27f2f8f0312622922a1ab8ed1c96b566083137e41a29b49fe330f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:37:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:37:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["912735ad3a27f2f8f0312622922a1ab8ed1c96b566083137e41a29b49fe330f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"912735ad3a27f2f8f0312622922a1ab8ed1c96b566083137e41a29b49fe330f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64813919dc3a839702554c3fceaca7f261d453cc50a76f91dc90c6b9582d3e50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:37:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:37:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a252eb011603ed6137e2af41de00be6f860e294a55f59f2ef017cfe69e6a13c0"}
{"level":"info","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64813919dc3a839702554c3fceaca7f261d453cc50a76f91dc90c6b9582d3e50","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a252eb011603ed6137e2af41de00be6f860e294a55f59f2ef017cfe69e6a13c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:37:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:37:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a252eb011603ed6137e2af41de00be6f860e294a55f59f2ef017cfe69e6a13c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64813919dc3a839702554c3fceaca7f261d453cc50a76f91dc90c6b9582d3e50"}
{"level":"info","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a252eb011603ed6137e2af41de00be6f860e294a55f59f2ef017cfe69e6a13c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"912735ad3a27f2f8f0312622922a1ab8ed1c96b566083137e41a29b49fe330f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:37:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:37:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"912735ad3a27f2f8f0312622922a1ab8ed1c96b566083137e41a29b49fe330f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64813919dc3a839702554c3fceaca7f261d453cc50a76f91dc90c6b9582d3e50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:37:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:37:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64813919dc3a839702554c3fceaca7f261d453cc50a76f91dc90c6b9582d3e50"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/912735ad3a27f2f8f0312622922a1ab8ed1c96b566083137e41a29b49fe330f7"}
{"level":"info","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64813919dc3a839702554c3fceaca7f261d453cc50a76f91dc90c6b9582d3e50","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a252eb011603ed6137e2af41de00be6f860e294a55f59f2ef017cfe69e6a13c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:37:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:37:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a252eb011603ed6137e2af41de00be6f860e294a55f59f2ef017cfe69e6a13c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"912735ad3a27f2f8f0312622922a1ab8ed1c96b566083137e41a29b49fe330f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:37:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:37:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["912735ad3a27f2f8f0312622922a1ab8ed1c96b566083137e41a29b49fe330f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a252eb011603ed6137e2af41de00be6f860e294a55f59f2ef017cfe69e6a13c0"}
{"level":"info","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"912735ad3a27f2f8f0312622922a1ab8ed1c96b566083137e41a29b49fe330f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64813919dc3a839702554c3fceaca7f261d453cc50a76f91dc90c6b9582d3e50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:37:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:37:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64813919dc3a839702554c3fceaca7f261d453cc50a76f91dc90c6b9582d3e50","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a252eb011603ed6137e2af41de00be6f860e294a55f59f2ef017cfe69e6a13c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:37:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:37:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a252eb011603ed6137e2af41de00be6f860e294a55f59f2ef017cfe69e6a13c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64813919dc3a839702554c3fceaca7f261d453cc50a76f91dc90c6b9582d3e50"}
{"level":"info","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a252eb011603ed6137e2af41de00be6f860e294a55f59f2ef017cfe69e6a13c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1601a1d8a54caf21e35ff5c0ac3442b16c40d91274a3da32202f01268bb4e4af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:37:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:37:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/912735ad3a27f2f8f0312622922a1ab8ed1c96b566083137e41a29b49fe330f7"}
{"level":"info","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1601a1d8a54caf21e35ff5c0ac3442b16c40d91274a3da32202f01268bb4e4af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"912735ad3a27f2f8f0312622922a1ab8ed1c96b566083137e41a29b49fe330f7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64813919dc3a839702554c3fceaca7f261d453cc50a76f91dc90c6b9582d3e50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:37:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:37:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64813919dc3a839702554c3fceaca7f261d453cc50a76f91dc90c6b9582d3e50"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64813919dc3a839702554c3fceaca7f261d453cc50a76f91dc90c6b9582d3e50","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a252eb011603ed6137e2af41de00be6f860e294a55f59f2ef017cfe69e6a13c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:37:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:37:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a252eb011603ed6137e2af41de00be6f860e294a55f59f2ef017cfe69e6a13c0"}
{"level":"info","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a252eb011603ed6137e2af41de00be6f860e294a55f59f2ef017cfe69e6a13c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1601a1d8a54caf21e35ff5c0ac3442b16c40d91274a3da32202f01268bb4e4af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:37:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:37:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1601a1d8a54caf21e35ff5c0ac3442b16c40d91274a3da32202f01268bb4e4af"}
{"level":"info","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1601a1d8a54caf21e35ff5c0ac3442b16c40d91274a3da32202f01268bb4e4af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64813919dc3a839702554c3fceaca7f261d453cc50a76f91dc90c6b9582d3e50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:37:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:37:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64813919dc3a839702554c3fceaca7f261d453cc50a76f91dc90c6b9582d3e50","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a252eb011603ed6137e2af41de00be6f860e294a55f59f2ef017cfe69e6a13c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:37:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:37:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a252eb011603ed6137e2af41de00be6f860e294a55f59f2ef017cfe69e6a13c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64813919dc3a839702554c3fceaca7f261d453cc50a76f91dc90c6b9582d3e50"}
{"level":"info","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a252eb011603ed6137e2af41de00be6f860e294a55f59f2ef017cfe69e6a13c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1601a1d8a54caf21e35ff5c0ac3442b16c40d91274a3da32202f01268bb4e4af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:37:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:37:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1601a1d8a54caf21e35ff5c0ac3442b16c40d91274a3da32202f01268bb4e4af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1601a1d8a54caf21e35ff5c0ac3442b16c40d91274a3da32202f01268bb4e4af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64813919dc3a839702554c3fceaca7f261d453cc50a76f91dc90c6b9582d3e50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:37:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:37:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64813919dc3a839702554c3fceaca7f261d453cc50a76f91dc90c6b9582d3e50"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a252eb011603ed6137e2af41de00be6f860e294a55f59f2ef017cfe69e6a13c0"}
{"level":"info","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64813919dc3a839702554c3fceaca7f261d453cc50a76f91dc90c6b9582d3e50","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e57ee8dce540272635984cf7d211b1b890b1dc3f0f7f1ff14d545a96d07f1b74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:37:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:37:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e57ee8dce540272635984cf7d211b1b890b1dc3f0f7f1ff14d545a96d07f1b74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a252eb011603ed6137e2af41de00be6f860e294a55f59f2ef017cfe69e6a13c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1601a1d8a54caf21e35ff5c0ac3442b16c40d91274a3da32202f01268bb4e4af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:37:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:37:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1601a1d8a54caf21e35ff5c0ac3442b16c40d91274a3da32202f01268bb4e4af"}
{"level":"info","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1601a1d8a54caf21e35ff5c0ac3442b16c40d91274a3da32202f01268bb4e4af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64813919dc3a839702554c3fceaca7f261d453cc50a76f91dc90c6b9582d3e50","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e57ee8dce540272635984cf7d211b1b890b1dc3f0f7f1ff14d545a96d07f1b74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:37:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:37:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e57ee8dce540272635984cf7d211b1b890b1dc3f0f7f1ff14d545a96d07f1b74"}
{"level":"info","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e57ee8dce540272635984cf7d211b1b890b1dc3f0f7f1ff14d545a96d07f1b74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1601a1d8a54caf21e35ff5c0ac3442b16c40d91274a3da32202f01268bb4e4af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:37:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:37:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1601a1d8a54caf21e35ff5c0ac3442b16c40d91274a3da32202f01268bb4e4af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1601a1d8a54caf21e35ff5c0ac3442b16c40d91274a3da32202f01268bb4e4af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e57ee8dce540272635984cf7d211b1b890b1dc3f0f7f1ff14d545a96d07f1b74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:37:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:37:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e57ee8dce540272635984cf7d211b1b890b1dc3f0f7f1ff14d545a96d07f1b74"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e57ee8dce540272635984cf7d211b1b890b1dc3f0f7f1ff14d545a96d07f1b74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1601a1d8a54caf21e35ff5c0ac3442b16c40d91274a3da32202f01268bb4e4af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e57ee8dce540272635984cf7d211b1b890b1dc3f0f7f1ff14d545a96d07f1b74","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64813919dc3a839702554c3fceaca7f261d453cc50a76f91dc90c6b9582d3e50"}
{"level":"info","ts":"2026-07-08T23:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a252eb011603ed6137e2af41de00be6f860e294a55f59f2ef017cfe69e6a13c0"}
{"level":"info","ts":"2026-07-08T23:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1601a1d8a54caf21e35ff5c0ac3442b16c40d91274a3da32202f01268bb4e4af"}
{"level":"info","ts":"2026-07-08T23:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e57ee8dce540272635984cf7d211b1b890b1dc3f0f7f1ff14d545a96d07f1b74"}
{"level":"debug","ts":"2026-07-08T23:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecc608525ff8fbdd2cca7f26f3c0e68c50577955eb6f5e1f0a6e0a3495d8a2da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:37:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:37:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecc608525ff8fbdd2cca7f26f3c0e68c50577955eb6f5e1f0a6e0a3495d8a2da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed4bed6a686f4a512db4385382ba01b705e7ce8866a578b888fd67c4b62a578c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:37:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:37:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecc608525ff8fbdd2cca7f26f3c0e68c50577955eb6f5e1f0a6e0a3495d8a2da"}
{"level":"info","ts":"2026-07-08T23:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed4bed6a686f4a512db4385382ba01b705e7ce8866a578b888fd67c4b62a578c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecc608525ff8fbdd2cca7f26f3c0e68c50577955eb6f5e1f0a6e0a3495d8a2da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:37:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:37:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ecc608525ff8fbdd2cca7f26f3c0e68c50577955eb6f5e1f0a6e0a3495d8a2da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecc608525ff8fbdd2cca7f26f3c0e68c50577955eb6f5e1f0a6e0a3495d8a2da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"113ec1a4091db28255ac91aeb3ddd21da5fb565f62ea378cba89535b69f86f77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:37:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:37:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed4bed6a686f4a512db4385382ba01b705e7ce8866a578b888fd67c4b62a578c"}
{"level":"info","ts":"2026-07-08T23:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"113ec1a4091db28255ac91aeb3ddd21da5fb565f62ea378cba89535b69f86f77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed4bed6a686f4a512db4385382ba01b705e7ce8866a578b888fd67c4b62a578c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:37:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:37:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed4bed6a686f4a512db4385382ba01b705e7ce8866a578b888fd67c4b62a578c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed4bed6a686f4a512db4385382ba01b705e7ce8866a578b888fd67c4b62a578c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49c366dd794ad4213874878f44710b1de69bfa3c95f645e2ad18b9d0b4b88300","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:37:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:37:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecc608525ff8fbdd2cca7f26f3c0e68c50577955eb6f5e1f0a6e0a3495d8a2da"}
{"level":"info","ts":"2026-07-08T23:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49c366dd794ad4213874878f44710b1de69bfa3c95f645e2ad18b9d0b4b88300","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ecc608525ff8fbdd2cca7f26f3c0e68c50577955eb6f5e1f0a6e0a3495d8a2da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63ef80d805d28d2a0f989569a88e2aff2f518b4f2d1576a1a99f2cc5e9fa8598","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:37:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:37:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63ef80d805d28d2a0f989569a88e2aff2f518b4f2d1576a1a99f2cc5e9fa8598","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"113ec1a4091db28255ac91aeb3ddd21da5fb565f62ea378cba89535b69f86f77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:37:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:37:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/113ec1a4091db28255ac91aeb3ddd21da5fb565f62ea378cba89535b69f86f77"}
{"level":"info","ts":"2026-07-08T23:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"113ec1a4091db28255ac91aeb3ddd21da5fb565f62ea378cba89535b69f86f77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed4bed6a686f4a512db4385382ba01b705e7ce8866a578b888fd67c4b62a578c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49c366dd794ad4213874878f44710b1de69bfa3c95f645e2ad18b9d0b4b88300","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:37:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:37:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49c366dd794ad4213874878f44710b1de69bfa3c95f645e2ad18b9d0b4b88300","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63ef80d805d28d2a0f989569a88e2aff2f518b4f2d1576a1a99f2cc5e9fa8598","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07be2283df4ace392f01165483752186898f1dca068cb3edf53b2db64dcaf20d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:37:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:37:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49c366dd794ad4213874878f44710b1de69bfa3c95f645e2ad18b9d0b4b88300"}
{"level":"info","ts":"2026-07-08T23:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07be2283df4ace392f01165483752186898f1dca068cb3edf53b2db64dcaf20d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"113ec1a4091db28255ac91aeb3ddd21da5fb565f62ea378cba89535b69f86f77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:37:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:37:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["113ec1a4091db28255ac91aeb3ddd21da5fb565f62ea378cba89535b69f86f77"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed4bed6a686f4a512db4385382ba01b705e7ce8866a578b888fd67c4b62a578c"}
{"level":"info","ts":"2026-07-08T23:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"113ec1a4091db28255ac91aeb3ddd21da5fb565f62ea378cba89535b69f86f77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49c366dd794ad4213874878f44710b1de69bfa3c95f645e2ad18b9d0b4b88300","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:37:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:37:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["49c366dd794ad4213874878f44710b1de69bfa3c95f645e2ad18b9d0b4b88300"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49c366dd794ad4213874878f44710b1de69bfa3c95f645e2ad18b9d0b4b88300","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63ef80d805d28d2a0f989569a88e2aff2f518b4f2d1576a1a99f2cc5e9fa8598","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:37:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:37:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63ef80d805d28d2a0f989569a88e2aff2f518b4f2d1576a1a99f2cc5e9fa8598"}
{"level":"info","ts":"2026-07-08T23:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63ef80d805d28d2a0f989569a88e2aff2f518b4f2d1576a1a99f2cc5e9fa8598","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07be2283df4ace392f01165483752186898f1dca068cb3edf53b2db64dcaf20d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:37:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:37:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07be2283df4ace392f01165483752186898f1dca068cb3edf53b2db64dcaf20d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"113ec1a4091db28255ac91aeb3ddd21da5fb565f62ea378cba89535b69f86f77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49c366dd794ad4213874878f44710b1de69bfa3c95f645e2ad18b9d0b4b88300","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63ef80d805d28d2a0f989569a88e2aff2f518b4f2d1576a1a99f2cc5e9fa8598","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:37:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:37:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63ef80d805d28d2a0f989569a88e2aff2f518b4f2d1576a1a99f2cc5e9fa8598"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07be2283df4ace392f01165483752186898f1dca068cb3edf53b2db64dcaf20d"}
{"level":"info","ts":"2026-07-08T23:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63ef80d805d28d2a0f989569a88e2aff2f518b4f2d1576a1a99f2cc5e9fa8598","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07be2283df4ace392f01165483752186898f1dca068cb3edf53b2db64dcaf20d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:37:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:37:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07be2283df4ace392f01165483752186898f1dca068cb3edf53b2db64dcaf20d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07be2283df4ace392f01165483752186898f1dca068cb3edf53b2db64dcaf20d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63ef80d805d28d2a0f989569a88e2aff2f518b4f2d1576a1a99f2cc5e9fa8598","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07be2283df4ace392f01165483752186898f1dca068cb3edf53b2db64dcaf20d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/113ec1a4091db28255ac91aeb3ddd21da5fb565f62ea378cba89535b69f86f77"}
{"level":"info","ts":"2026-07-08T23:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49c366dd794ad4213874878f44710b1de69bfa3c95f645e2ad18b9d0b4b88300"}
{"level":"info","ts":"2026-07-08T23:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63ef80d805d28d2a0f989569a88e2aff2f518b4f2d1576a1a99f2cc5e9fa8598"}
{"level":"info","ts":"2026-07-08T23:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07be2283df4ace392f01165483752186898f1dca068cb3edf53b2db64dcaf20d"}
{"level":"debug","ts":"2026-07-08T23:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5bdd616101d3a7e08bfb7a69ed6c83a920fae759971353e487f783aa60ec75e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:37:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:37:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5bdd616101d3a7e08bfb7a69ed6c83a920fae759971353e487f783aa60ec75e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5bdd616101d3a7e08bfb7a69ed6c83a920fae759971353e487f783aa60ec75e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5bdd616101d3a7e08bfb7a69ed6c83a920fae759971353e487f783aa60ec75e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5bdd616101d3a7e08bfb7a69ed6c83a920fae759971353e487f783aa60ec75e"}
{"level":"debug","ts":"2026-07-08T23:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5bdd616101d3a7e08bfb7a69ed6c83a920fae759971353e487f783aa60ec75e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5bdd616101d3a7e08bfb7a69ed6c83a920fae759971353e487f783aa60ec75e"}
{"level":"debug","ts":"2026-07-08T23:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5bdd616101d3a7e08bfb7a69ed6c83a920fae759971353e487f783aa60ec75e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:37:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:37:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5bdd616101d3a7e08bfb7a69ed6c83a920fae759971353e487f783aa60ec75e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5bdd616101d3a7e08bfb7a69ed6c83a920fae759971353e487f783aa60ec75e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5bdd616101d3a7e08bfb7a69ed6c83a920fae759971353e487f783aa60ec75e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5bdd616101d3a7e08bfb7a69ed6c83a920fae759971353e487f783aa60ec75e"}
{"level":"debug","ts":"2026-07-08T23:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dde462ee0ed19ab91fea531e70d975cbbf4d37ef7b3668f9aa2b9b19f136254c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:37:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:37:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dde462ee0ed19ab91fea531e70d975cbbf4d37ef7b3668f9aa2b9b19f136254c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dde462ee0ed19ab91fea531e70d975cbbf4d37ef7b3668f9aa2b9b19f136254c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:37:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:37:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dde462ee0ed19ab91fea531e70d975cbbf4d37ef7b3668f9aa2b9b19f136254c"}
{"level":"info","ts":"2026-07-08T23:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dde462ee0ed19ab91fea531e70d975cbbf4d37ef7b3668f9aa2b9b19f136254c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dde462ee0ed19ab91fea531e70d975cbbf4d37ef7b3668f9aa2b9b19f136254c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:37:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:37:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-08T23:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"dde462ee0ed19ab91fea531e70d975cbbf4d37ef7b3668f9aa2b9b19f136254c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"dde462ee0ed19ab91fea531e70d975cbbf4d37ef7b3668f9aa2b9b19f136254c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-08T23:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dde462ee0ed19ab91fea531e70d975cbbf4d37ef7b3668f9aa2b9b19f136254c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dde462ee0ed19ab91fea531e70d975cbbf4d37ef7b3668f9aa2b9b19f136254c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dde462ee0ed19ab91fea531e70d975cbbf4d37ef7b3668f9aa2b9b19f136254c"}
{"level":"info","ts":"2026-07-08T23:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dde462ee0ed19ab91fea531e70d975cbbf4d37ef7b3668f9aa2b9b19f136254c"}
{"level":"debug","ts":"2026-07-08T23:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91979e2361386492b6e53ac7d6f31850dede1149e2ad7f0fd71e27ff888c04d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:37:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:37:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91979e2361386492b6e53ac7d6f31850dede1149e2ad7f0fd71e27ff888c04d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91979e2361386492b6e53ac7d6f31850dede1149e2ad7f0fd71e27ff888c04d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91979e2361386492b6e53ac7d6f31850dede1149e2ad7f0fd71e27ff888c04d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dde462ee0ed19ab91fea531e70d975cbbf4d37ef7b3668f9aa2b9b19f136254c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:37:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:37:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dde462ee0ed19ab91fea531e70d975cbbf4d37ef7b3668f9aa2b9b19f136254c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91979e2361386492b6e53ac7d6f31850dede1149e2ad7f0fd71e27ff888c04d7"}
{"level":"info","ts":"2026-07-08T23:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dde462ee0ed19ab91fea531e70d975cbbf4d37ef7b3668f9aa2b9b19f136254c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dde462ee0ed19ab91fea531e70d975cbbf4d37ef7b3668f9aa2b9b19f136254c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91979e2361386492b6e53ac7d6f31850dede1149e2ad7f0fd71e27ff888c04d7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91979e2361386492b6e53ac7d6f31850dede1149e2ad7f0fd71e27ff888c04d7"}
{"level":"info","ts":"2026-07-08T23:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dde462ee0ed19ab91fea531e70d975cbbf4d37ef7b3668f9aa2b9b19f136254c"}
{"level":"debug","ts":"2026-07-08T23:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91979e2361386492b6e53ac7d6f31850dede1149e2ad7f0fd71e27ff888c04d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:37:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:37:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91979e2361386492b6e53ac7d6f31850dede1149e2ad7f0fd71e27ff888c04d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91979e2361386492b6e53ac7d6f31850dede1149e2ad7f0fd71e27ff888c04d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91979e2361386492b6e53ac7d6f31850dede1149e2ad7f0fd71e27ff888c04d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:37:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:37:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91979e2361386492b6e53ac7d6f31850dede1149e2ad7f0fd71e27ff888c04d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a655dbf86a24572317ccb578a9127a6c0b6856fc18156064996fb15303254680","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:37:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:37:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91979e2361386492b6e53ac7d6f31850dede1149e2ad7f0fd71e27ff888c04d7"}
{"level":"info","ts":"2026-07-08T23:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a655dbf86a24572317ccb578a9127a6c0b6856fc18156064996fb15303254680","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91979e2361386492b6e53ac7d6f31850dede1149e2ad7f0fd71e27ff888c04d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:37:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:37:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91979e2361386492b6e53ac7d6f31850dede1149e2ad7f0fd71e27ff888c04d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91979e2361386492b6e53ac7d6f31850dede1149e2ad7f0fd71e27ff888c04d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a655dbf86a24572317ccb578a9127a6c0b6856fc18156064996fb15303254680","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:37:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:37:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a655dbf86a24572317ccb578a9127a6c0b6856fc18156064996fb15303254680"}
{"level":"info","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a655dbf86a24572317ccb578a9127a6c0b6856fc18156064996fb15303254680","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91979e2361386492b6e53ac7d6f31850dede1149e2ad7f0fd71e27ff888c04d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:37:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:37:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91979e2361386492b6e53ac7d6f31850dede1149e2ad7f0fd71e27ff888c04d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a655dbf86a24572317ccb578a9127a6c0b6856fc18156064996fb15303254680","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:37:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:37:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a655dbf86a24572317ccb578a9127a6c0b6856fc18156064996fb15303254680"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91979e2361386492b6e53ac7d6f31850dede1149e2ad7f0fd71e27ff888c04d7"}
{"level":"info","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a655dbf86a24572317ccb578a9127a6c0b6856fc18156064996fb15303254680","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91979e2361386492b6e53ac7d6f31850dede1149e2ad7f0fd71e27ff888c04d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:37:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:37:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91979e2361386492b6e53ac7d6f31850dede1149e2ad7f0fd71e27ff888c04d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a655dbf86a24572317ccb578a9127a6c0b6856fc18156064996fb15303254680"}
{"level":"info","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91979e2361386492b6e53ac7d6f31850dede1149e2ad7f0fd71e27ff888c04d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a655dbf86a24572317ccb578a9127a6c0b6856fc18156064996fb15303254680","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91979e2361386492b6e53ac7d6f31850dede1149e2ad7f0fd71e27ff888c04d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:37:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:37:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91979e2361386492b6e53ac7d6f31850dede1149e2ad7f0fd71e27ff888c04d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91979e2361386492b6e53ac7d6f31850dede1149e2ad7f0fd71e27ff888c04d7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91979e2361386492b6e53ac7d6f31850dede1149e2ad7f0fd71e27ff888c04d7"}
{"level":"debug","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91979e2361386492b6e53ac7d6f31850dede1149e2ad7f0fd71e27ff888c04d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:37:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:37:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91979e2361386492b6e53ac7d6f31850dede1149e2ad7f0fd71e27ff888c04d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91979e2361386492b6e53ac7d6f31850dede1149e2ad7f0fd71e27ff888c04d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91979e2361386492b6e53ac7d6f31850dede1149e2ad7f0fd71e27ff888c04d7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a655dbf86a24572317ccb578a9127a6c0b6856fc18156064996fb15303254680"}
{"level":"info","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91979e2361386492b6e53ac7d6f31850dede1149e2ad7f0fd71e27ff888c04d7"}
{"level":"debug","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69a0fcc1fecaebe7f9e6e4ff01f9109aacee313826fe77ac623d018b6ec64e72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:37:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:37:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69a0fcc1fecaebe7f9e6e4ff01f9109aacee313826fe77ac623d018b6ec64e72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69a0fcc1fecaebe7f9e6e4ff01f9109aacee313826fe77ac623d018b6ec64e72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69a0fcc1fecaebe7f9e6e4ff01f9109aacee313826fe77ac623d018b6ec64e72","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69a0fcc1fecaebe7f9e6e4ff01f9109aacee313826fe77ac623d018b6ec64e72"}
{"level":"debug","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69a0fcc1fecaebe7f9e6e4ff01f9109aacee313826fe77ac623d018b6ec64e72","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69a0fcc1fecaebe7f9e6e4ff01f9109aacee313826fe77ac623d018b6ec64e72"}
{"level":"debug","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69a0fcc1fecaebe7f9e6e4ff01f9109aacee313826fe77ac623d018b6ec64e72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:37:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:37:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69a0fcc1fecaebe7f9e6e4ff01f9109aacee313826fe77ac623d018b6ec64e72"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69a0fcc1fecaebe7f9e6e4ff01f9109aacee313826fe77ac623d018b6ec64e72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69a0fcc1fecaebe7f9e6e4ff01f9109aacee313826fe77ac623d018b6ec64e72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:37:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:37:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69a0fcc1fecaebe7f9e6e4ff01f9109aacee313826fe77ac623d018b6ec64e72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69a0fcc1fecaebe7f9e6e4ff01f9109aacee313826fe77ac623d018b6ec64e72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5e5033228c0ad4565d71bd034e10a0c4074735726d624c5cf4ce2f71841448f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:37:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:37:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69a0fcc1fecaebe7f9e6e4ff01f9109aacee313826fe77ac623d018b6ec64e72"}
{"level":"info","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5e5033228c0ad4565d71bd034e10a0c4074735726d624c5cf4ce2f71841448f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69a0fcc1fecaebe7f9e6e4ff01f9109aacee313826fe77ac623d018b6ec64e72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:37:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:37:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69a0fcc1fecaebe7f9e6e4ff01f9109aacee313826fe77ac623d018b6ec64e72"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5e5033228c0ad4565d71bd034e10a0c4074735726d624c5cf4ce2f71841448f"}
{"level":"info","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69a0fcc1fecaebe7f9e6e4ff01f9109aacee313826fe77ac623d018b6ec64e72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5e5033228c0ad4565d71bd034e10a0c4074735726d624c5cf4ce2f71841448f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:37:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:37:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5e5033228c0ad4565d71bd034e10a0c4074735726d624c5cf4ce2f71841448f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5e5033228c0ad4565d71bd034e10a0c4074735726d624c5cf4ce2f71841448f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69a0fcc1fecaebe7f9e6e4ff01f9109aacee313826fe77ac623d018b6ec64e72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:37:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:37:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69a0fcc1fecaebe7f9e6e4ff01f9109aacee313826fe77ac623d018b6ec64e72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5e5033228c0ad4565d71bd034e10a0c4074735726d624c5cf4ce2f71841448f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69a0fcc1fecaebe7f9e6e4ff01f9109aacee313826fe77ac623d018b6ec64e72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69a0fcc1fecaebe7f9e6e4ff01f9109aacee313826fe77ac623d018b6ec64e72","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69a0fcc1fecaebe7f9e6e4ff01f9109aacee313826fe77ac623d018b6ec64e72"}
{"level":"debug","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69a0fcc1fecaebe7f9e6e4ff01f9109aacee313826fe77ac623d018b6ec64e72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:37:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:37:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69a0fcc1fecaebe7f9e6e4ff01f9109aacee313826fe77ac623d018b6ec64e72"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69a0fcc1fecaebe7f9e6e4ff01f9109aacee313826fe77ac623d018b6ec64e72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69a0fcc1fecaebe7f9e6e4ff01f9109aacee313826fe77ac623d018b6ec64e72","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5e5033228c0ad4565d71bd034e10a0c4074735726d624c5cf4ce2f71841448f"}
{"level":"info","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69a0fcc1fecaebe7f9e6e4ff01f9109aacee313826fe77ac623d018b6ec64e72"}
{"level":"debug","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3b9a24d7022550c41fb72e7538760c8b2ec7c3d3689bcd91ecbf432fd78b9a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:37:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:37:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3b9a24d7022550c41fb72e7538760c8b2ec7c3d3689bcd91ecbf432fd78b9a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3b9a24d7022550c41fb72e7538760c8b2ec7c3d3689bcd91ecbf432fd78b9a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:37:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:37:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3b9a24d7022550c41fb72e7538760c8b2ec7c3d3689bcd91ecbf432fd78b9a6"}
{"level":"info","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3b9a24d7022550c41fb72e7538760c8b2ec7c3d3689bcd91ecbf432fd78b9a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3b9a24d7022550c41fb72e7538760c8b2ec7c3d3689bcd91ecbf432fd78b9a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:37:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:37:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a3b9a24d7022550c41fb72e7538760c8b2ec7c3d3689bcd91ecbf432fd78b9a6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a3b9a24d7022550c41fb72e7538760c8b2ec7c3d3689bcd91ecbf432fd78b9a6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3b9a24d7022550c41fb72e7538760c8b2ec7c3d3689bcd91ecbf432fd78b9a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3b9a24d7022550c41fb72e7538760c8b2ec7c3d3689bcd91ecbf432fd78b9a6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3b9a24d7022550c41fb72e7538760c8b2ec7c3d3689bcd91ecbf432fd78b9a6"}
{"level":"info","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3b9a24d7022550c41fb72e7538760c8b2ec7c3d3689bcd91ecbf432fd78b9a6"}
{"level":"debug","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5882ffb4a614cb907375f0afdab27206b43e76fbd644d904687af36194dc0fad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:37:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:37:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5882ffb4a614cb907375f0afdab27206b43e76fbd644d904687af36194dc0fad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e1406833069c59235a44626804f5acc071a06be9a65591114088a2d4dd97e94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:37:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:37:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5882ffb4a614cb907375f0afdab27206b43e76fbd644d904687af36194dc0fad"}
{"level":"info","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e1406833069c59235a44626804f5acc071a06be9a65591114088a2d4dd97e94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3b9a24d7022550c41fb72e7538760c8b2ec7c3d3689bcd91ecbf432fd78b9a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:37:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:37:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a3b9a24d7022550c41fb72e7538760c8b2ec7c3d3689bcd91ecbf432fd78b9a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3b9a24d7022550c41fb72e7538760c8b2ec7c3d3689bcd91ecbf432fd78b9a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5882ffb4a614cb907375f0afdab27206b43e76fbd644d904687af36194dc0fad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:37:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:37:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5882ffb4a614cb907375f0afdab27206b43e76fbd644d904687af36194dc0fad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e1406833069c59235a44626804f5acc071a06be9a65591114088a2d4dd97e94"}
{"level":"info","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5882ffb4a614cb907375f0afdab27206b43e76fbd644d904687af36194dc0fad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e1406833069c59235a44626804f5acc071a06be9a65591114088a2d4dd97e94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:37:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:37:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e1406833069c59235a44626804f5acc071a06be9a65591114088a2d4dd97e94"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e1406833069c59235a44626804f5acc071a06be9a65591114088a2d4dd97e94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3b9a24d7022550c41fb72e7538760c8b2ec7c3d3689bcd91ecbf432fd78b9a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5882ffb4a614cb907375f0afdab27206b43e76fbd644d904687af36194dc0fad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:37:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:37:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5882ffb4a614cb907375f0afdab27206b43e76fbd644d904687af36194dc0fad"}
{"level":"info","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5882ffb4a614cb907375f0afdab27206b43e76fbd644d904687af36194dc0fad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e1406833069c59235a44626804f5acc071a06be9a65591114088a2d4dd97e94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5882ffb4a614cb907375f0afdab27206b43e76fbd644d904687af36194dc0fad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:37:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:37:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5882ffb4a614cb907375f0afdab27206b43e76fbd644d904687af36194dc0fad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3b9a24d7022550c41fb72e7538760c8b2ec7c3d3689bcd91ecbf432fd78b9a6"}
{"level":"info","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5882ffb4a614cb907375f0afdab27206b43e76fbd644d904687af36194dc0fad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5882ffb4a614cb907375f0afdab27206b43e76fbd644d904687af36194dc0fad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:37:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:37:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5882ffb4a614cb907375f0afdab27206b43e76fbd644d904687af36194dc0fad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5882ffb4a614cb907375f0afdab27206b43e76fbd644d904687af36194dc0fad","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5882ffb4a614cb907375f0afdab27206b43e76fbd644d904687af36194dc0fad\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5882ffb4a614cb907375f0afdab27206b43e76fbd644d904687af36194dc0fad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5882ffb4a614cb907375f0afdab27206b43e76fbd644d904687af36194dc0fad","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e1406833069c59235a44626804f5acc071a06be9a65591114088a2d4dd97e94"}
{"level":"info","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5882ffb4a614cb907375f0afdab27206b43e76fbd644d904687af36194dc0fad"}
{"level":"debug","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbcf6b95babf43ce3c02740081e03621a18c93cbe4e3c07c16acd0927e7f54a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:37:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:37:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbcf6b95babf43ce3c02740081e03621a18c93cbe4e3c07c16acd0927e7f54a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a5d4b1ee2630cf744a6e25392b2cc1708c2616603893c26d81a4390ffba8798","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:37:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:37:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbcf6b95babf43ce3c02740081e03621a18c93cbe4e3c07c16acd0927e7f54a1"}
{"level":"info","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a5d4b1ee2630cf744a6e25392b2cc1708c2616603893c26d81a4390ffba8798","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbcf6b95babf43ce3c02740081e03621a18c93cbe4e3c07c16acd0927e7f54a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:37:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:37:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cbcf6b95babf43ce3c02740081e03621a18c93cbe4e3c07c16acd0927e7f54a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbcf6b95babf43ce3c02740081e03621a18c93cbe4e3c07c16acd0927e7f54a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c9d61f1b082de375e18d1f9e06bc7ba43cbef8c82c7f355f97f0838179c3723","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:37:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:37:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a5d4b1ee2630cf744a6e25392b2cc1708c2616603893c26d81a4390ffba8798"}
{"level":"info","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c9d61f1b082de375e18d1f9e06bc7ba43cbef8c82c7f355f97f0838179c3723","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a5d4b1ee2630cf744a6e25392b2cc1708c2616603893c26d81a4390ffba8798","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:37:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:37:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a5d4b1ee2630cf744a6e25392b2cc1708c2616603893c26d81a4390ffba8798"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a5d4b1ee2630cf744a6e25392b2cc1708c2616603893c26d81a4390ffba8798","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbcf6b95babf43ce3c02740081e03621a18c93cbe4e3c07c16acd0927e7f54a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:37:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:37:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbcf6b95babf43ce3c02740081e03621a18c93cbe4e3c07c16acd0927e7f54a1"}
{"level":"info","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbcf6b95babf43ce3c02740081e03621a18c93cbe4e3c07c16acd0927e7f54a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c9d61f1b082de375e18d1f9e06bc7ba43cbef8c82c7f355f97f0838179c3723","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:37:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:37:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c9d61f1b082de375e18d1f9e06bc7ba43cbef8c82c7f355f97f0838179c3723"}
{"level":"info","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c9d61f1b082de375e18d1f9e06bc7ba43cbef8c82c7f355f97f0838179c3723","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a5d4b1ee2630cf744a6e25392b2cc1708c2616603893c26d81a4390ffba8798","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:37:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:37:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a5d4b1ee2630cf744a6e25392b2cc1708c2616603893c26d81a4390ffba8798","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbcf6b95babf43ce3c02740081e03621a18c93cbe4e3c07c16acd0927e7f54a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:37:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:37:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cbcf6b95babf43ce3c02740081e03621a18c93cbe4e3c07c16acd0927e7f54a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a5d4b1ee2630cf744a6e25392b2cc1708c2616603893c26d81a4390ffba8798"}
{"level":"info","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbcf6b95babf43ce3c02740081e03621a18c93cbe4e3c07c16acd0927e7f54a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c9d61f1b082de375e18d1f9e06bc7ba43cbef8c82c7f355f97f0838179c3723","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:37:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:37:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0c9d61f1b082de375e18d1f9e06bc7ba43cbef8c82c7f355f97f0838179c3723"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c9d61f1b082de375e18d1f9e06bc7ba43cbef8c82c7f355f97f0838179c3723","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a5d4b1ee2630cf744a6e25392b2cc1708c2616603893c26d81a4390ffba8798","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:37:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:37:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a5d4b1ee2630cf744a6e25392b2cc1708c2616603893c26d81a4390ffba8798"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbcf6b95babf43ce3c02740081e03621a18c93cbe4e3c07c16acd0927e7f54a1"}
{"level":"info","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a5d4b1ee2630cf744a6e25392b2cc1708c2616603893c26d81a4390ffba8798","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cbcf6b95babf43ce3c02740081e03621a18c93cbe4e3c07c16acd0927e7f54a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c9d61f1b082de375e18d1f9e06bc7ba43cbef8c82c7f355f97f0838179c3723","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:37:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:37:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c9d61f1b082de375e18d1f9e06bc7ba43cbef8c82c7f355f97f0838179c3723"}
{"level":"info","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c9d61f1b082de375e18d1f9e06bc7ba43cbef8c82c7f355f97f0838179c3723","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a5d4b1ee2630cf744a6e25392b2cc1708c2616603893c26d81a4390ffba8798","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:37:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:37:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a5d4b1ee2630cf744a6e25392b2cc1708c2616603893c26d81a4390ffba8798","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c9d61f1b082de375e18d1f9e06bc7ba43cbef8c82c7f355f97f0838179c3723","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:37:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:37:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0c9d61f1b082de375e18d1f9e06bc7ba43cbef8c82c7f355f97f0838179c3723"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a5d4b1ee2630cf744a6e25392b2cc1708c2616603893c26d81a4390ffba8798"}
{"level":"info","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c9d61f1b082de375e18d1f9e06bc7ba43cbef8c82c7f355f97f0838179c3723","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a5d4b1ee2630cf744a6e25392b2cc1708c2616603893c26d81a4390ffba8798","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:37:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:37:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a5d4b1ee2630cf744a6e25392b2cc1708c2616603893c26d81a4390ffba8798"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a5d4b1ee2630cf744a6e25392b2cc1708c2616603893c26d81a4390ffba8798","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c9d61f1b082de375e18d1f9e06bc7ba43cbef8c82c7f355f97f0838179c3723","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a5d4b1ee2630cf744a6e25392b2cc1708c2616603893c26d81a4390ffba8798","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbcf6b95babf43ce3c02740081e03621a18c93cbe4e3c07c16acd0927e7f54a1"}
{"level":"info","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c9d61f1b082de375e18d1f9e06bc7ba43cbef8c82c7f355f97f0838179c3723"}
{"level":"info","ts":"2026-07-08T23:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a5d4b1ee2630cf744a6e25392b2cc1708c2616603893c26d81a4390ffba8798"}
{"level":"info","ts":"2026-07-08T23:38:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b29567a1-6317-49b1-9ae2-817aa5c752cd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:59794","PortSpecifier":{"PortValue":59794}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b29567a1-6317-49b1-9ae2-817aa5c752cd","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-45d83d.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T23:38:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b29567a1-6317-49b1-9ae2-817aa5c752cd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:59794","PortSpecifier":{"PortValue":59794}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783553881,"nanos":607755727},"http":{"id":"b29567a1-6317-49b1-9ae2-817aa5c752cd","method":"POST","headers":{":authority":"e2e-shared-a-45d83d.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:38:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b29567a1-6317-49b1-9ae2-817aa5c752cd","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-08T23:38:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b29567a1-6317-49b1-9ae2-817aa5c752cd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4eb469ed-bde9-4b74-b02d-b674c54e5440","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=bc060732-2068-4968-bbfb-220d44e07ffa"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb0dcd2f307a"]}}
{"level":"debug","ts":"2026-07-08T23:38:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b29567a1-6317-49b1-9ae2-817aa5c752cd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb0dcd2f307a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=bc060732-2068-4968-bbfb-220d44e07ffa"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4eb469ed-bde9-4b74-b02d-b674c54e5440","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"07be2283df4ace392f01165483752186898f1dca068cb3edf53b2db64dcaf20d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-45d83d.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:38:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b29567a1-6317-49b1-9ae2-817aa5c752cd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:38:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b29567a1-6317-49b1-9ae2-817aa5c752cd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:38:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b29567a1-6317-49b1-9ae2-817aa5c752cd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-45d83d/auth-test-model-45d83d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:38:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b29567a1-6317-49b1-9ae2-817aa5c752cd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-08T23:38:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b29567a1-6317-49b1-9ae2-817aa5c752cd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T23:38:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b29567a1-6317-49b1-9ae2-817aa5c752cd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-08T23:38:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b29567a1-6317-49b1-9ae2-817aa5c752cd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T23:38:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b29567a1-6317-49b1-9ae2-817aa5c752cd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T23:38:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2fca3a22-60f4-4659-9e7b-db7f7c7d7bb9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:50780","PortSpecifier":{"PortValue":50780}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2fca3a22-60f4-4659-9e7b-db7f7c7d7bb9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-59ce67.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T23:38:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2fca3a22-60f4-4659-9e7b-db7f7c7d7bb9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:50780","PortSpecifier":{"PortValue":50780}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783553881,"nanos":674786109},"http":{"id":"2fca3a22-60f4-4659-9e7b-db7f7c7d7bb9","method":"POST","headers":{":authority":"e2e-shared-b-59ce67.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:38:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2fca3a22-60f4-4659-9e7b-db7f7c7d7bb9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-08T23:38:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2fca3a22-60f4-4659-9e7b-db7f7c7d7bb9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4eb469ed-bde9-4b74-b02d-b674c54e5440","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=bc060732-2068-4968-bbfb-220d44e07ffa"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb0dcd2f307a"]}}
{"level":"debug","ts":"2026-07-08T23:38:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2fca3a22-60f4-4659-9e7b-db7f7c7d7bb9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb0dcd2f307a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=bc060732-2068-4968-bbfb-220d44e07ffa"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4eb469ed-bde9-4b74-b02d-b674c54e5440","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0c9d61f1b082de375e18d1f9e06bc7ba43cbef8c82c7f355f97f0838179c3723"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-59ce67.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:38:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2fca3a22-60f4-4659-9e7b-db7f7c7d7bb9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:38:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2fca3a22-60f4-4659-9e7b-db7f7c7d7bb9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:38:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2fca3a22-60f4-4659-9e7b-db7f7c7d7bb9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-59ce67/auth-test-model-59ce67\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:38:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2fca3a22-60f4-4659-9e7b-db7f7c7d7bb9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-08T23:38:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2fca3a22-60f4-4659-9e7b-db7f7c7d7bb9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T23:38:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2fca3a22-60f4-4659-9e7b-db7f7c7d7bb9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-08T23:38:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2fca3a22-60f4-4659-9e7b-db7f7c7d7bb9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T23:38:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2fca3a22-60f4-4659-9e7b-db7f7c7d7bb9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T23:38:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"38ea2e38-d75b-4e2c-898f-5c9abd667909","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:59808","PortSpecifier":{"PortValue":59808}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"38ea2e38-d75b-4e2c-898f-5c9abd667909","method":"GET","path":"/maas-api/v1/api-keys/d85e7940-54d7-40f0-a118-b5e6cfd41c22","host":"e2e-shared-a-45d83d.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T23:38:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"38ea2e38-d75b-4e2c-898f-5c9abd667909","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:59808","PortSpecifier":{"PortValue":59808}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783553881,"nanos":774987573},"http":{"id":"38ea2e38-d75b-4e2c-898f-5c9abd667909","method":"GET","headers":{":authority":"e2e-shared-a-45d83d.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/d85e7940-54d7-40f0-a118-b5e6cfd41c22",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:38:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"38ea2e38-d75b-4e2c-898f-5c9abd667909","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-08T23:38:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"38ea2e38-d75b-4e2c-898f-5c9abd667909","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4eb469ed-bde9-4b74-b02d-b674c54e5440","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=bc060732-2068-4968-bbfb-220d44e07ffa"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb0dcd2f307a"]}}
{"level":"debug","ts":"2026-07-08T23:38:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"38ea2e38-d75b-4e2c-898f-5c9abd667909","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb0dcd2f307a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=bc060732-2068-4968-bbfb-220d44e07ffa"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4eb469ed-bde9-4b74-b02d-b674c54e5440","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"07be2283df4ace392f01165483752186898f1dca068cb3edf53b2db64dcaf20d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-45d83d.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/d85e7940-54d7-40f0-a118-b5e6cfd41c22",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:38:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"38ea2e38-d75b-4e2c-898f-5c9abd667909","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:38:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"38ea2e38-d75b-4e2c-898f-5c9abd667909","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:38:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"38ea2e38-d75b-4e2c-898f-5c9abd667909","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-45d83d/auth-test-model-45d83d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:38:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"38ea2e38-d75b-4e2c-898f-5c9abd667909","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-08T23:38:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"38ea2e38-d75b-4e2c-898f-5c9abd667909","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T23:38:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"38ea2e38-d75b-4e2c-898f-5c9abd667909","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-08T23:38:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"38ea2e38-d75b-4e2c-898f-5c9abd667909","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T23:38:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"38ea2e38-d75b-4e2c-898f-5c9abd667909","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T23:38:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0a63e39f-67d0-4775-8dd8-a6522a27486b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:50790","PortSpecifier":{"PortValue":50790}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0a63e39f-67d0-4775-8dd8-a6522a27486b","method":"GET","path":"/maas-api/v1/api-keys/5c673d22-a37f-43e9-aa08-61708d9b0b1e","host":"e2e-shared-b-59ce67.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T23:38:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0a63e39f-67d0-4775-8dd8-a6522a27486b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:50790","PortSpecifier":{"PortValue":50790}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783553881,"nanos":813223353},"http":{"id":"0a63e39f-67d0-4775-8dd8-a6522a27486b","method":"GET","headers":{":authority":"e2e-shared-b-59ce67.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/5c673d22-a37f-43e9-aa08-61708d9b0b1e",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:38:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0a63e39f-67d0-4775-8dd8-a6522a27486b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-08T23:38:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0a63e39f-67d0-4775-8dd8-a6522a27486b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4eb469ed-bde9-4b74-b02d-b674c54e5440","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=bc060732-2068-4968-bbfb-220d44e07ffa"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb0dcd2f307a"]}}
{"level":"debug","ts":"2026-07-08T23:38:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0a63e39f-67d0-4775-8dd8-a6522a27486b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb0dcd2f307a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=bc060732-2068-4968-bbfb-220d44e07ffa"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4eb469ed-bde9-4b74-b02d-b674c54e5440","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0c9d61f1b082de375e18d1f9e06bc7ba43cbef8c82c7f355f97f0838179c3723"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-59ce67.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/5c673d22-a37f-43e9-aa08-61708d9b0b1e",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:38:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a63e39f-67d0-4775-8dd8-a6522a27486b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:38:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a63e39f-67d0-4775-8dd8-a6522a27486b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:38:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a63e39f-67d0-4775-8dd8-a6522a27486b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-59ce67/auth-test-model-59ce67\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:38:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0a63e39f-67d0-4775-8dd8-a6522a27486b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-08T23:38:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0a63e39f-67d0-4775-8dd8-a6522a27486b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T23:38:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0a63e39f-67d0-4775-8dd8-a6522a27486b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-08T23:38:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0a63e39f-67d0-4775-8dd8-a6522a27486b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T23:38:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0a63e39f-67d0-4775-8dd8-a6522a27486b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T23:38:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"65e50fa7-484e-41b2-bd90-8742f1fddac1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:54542","PortSpecifier":{"PortValue":54542}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"65e50fa7-484e-41b2-bd90-8742f1fddac1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-45d83d.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T23:38:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"65e50fa7-484e-41b2-bd90-8742f1fddac1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:54542","PortSpecifier":{"PortValue":54542}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783553898,"nanos":828387592},"http":{"id":"65e50fa7-484e-41b2-bd90-8742f1fddac1","method":"POST","headers":{":authority":"e2e-shared-a-45d83d.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:38:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"65e50fa7-484e-41b2-bd90-8742f1fddac1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-08T23:38:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"65e50fa7-484e-41b2-bd90-8742f1fddac1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4eb469ed-bde9-4b74-b02d-b674c54e5440","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=bc060732-2068-4968-bbfb-220d44e07ffa"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb0dcd2f307a"]}}
{"level":"debug","ts":"2026-07-08T23:38:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"65e50fa7-484e-41b2-bd90-8742f1fddac1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb0dcd2f307a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=bc060732-2068-4968-bbfb-220d44e07ffa"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4eb469ed-bde9-4b74-b02d-b674c54e5440","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"07be2283df4ace392f01165483752186898f1dca068cb3edf53b2db64dcaf20d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-45d83d.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:38:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65e50fa7-484e-41b2-bd90-8742f1fddac1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:38:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65e50fa7-484e-41b2-bd90-8742f1fddac1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:38:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65e50fa7-484e-41b2-bd90-8742f1fddac1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-45d83d/auth-test-model-45d83d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:38:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"65e50fa7-484e-41b2-bd90-8742f1fddac1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-08T23:38:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"65e50fa7-484e-41b2-bd90-8742f1fddac1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T23:38:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"65e50fa7-484e-41b2-bd90-8742f1fddac1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-08T23:38:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"65e50fa7-484e-41b2-bd90-8742f1fddac1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T23:38:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"65e50fa7-484e-41b2-bd90-8742f1fddac1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T23:38:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b2175862-bb9c-49bf-a35c-f38dcdea0d4e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:55028","PortSpecifier":{"PortValue":55028}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b2175862-bb9c-49bf-a35c-f38dcdea0d4e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-59ce67.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T23:38:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b2175862-bb9c-49bf-a35c-f38dcdea0d4e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:55028","PortSpecifier":{"PortValue":55028}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783553898,"nanos":861257975},"http":{"id":"b2175862-bb9c-49bf-a35c-f38dcdea0d4e","method":"POST","headers":{":authority":"e2e-shared-b-59ce67.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:38:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b2175862-bb9c-49bf-a35c-f38dcdea0d4e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-08T23:38:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b2175862-bb9c-49bf-a35c-f38dcdea0d4e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4eb469ed-bde9-4b74-b02d-b674c54e5440","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=bc060732-2068-4968-bbfb-220d44e07ffa"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb0dcd2f307a"]}}
{"level":"debug","ts":"2026-07-08T23:38:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b2175862-bb9c-49bf-a35c-f38dcdea0d4e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb0dcd2f307a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=bc060732-2068-4968-bbfb-220d44e07ffa"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4eb469ed-bde9-4b74-b02d-b674c54e5440","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0c9d61f1b082de375e18d1f9e06bc7ba43cbef8c82c7f355f97f0838179c3723"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-59ce67.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:38:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b2175862-bb9c-49bf-a35c-f38dcdea0d4e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:38:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b2175862-bb9c-49bf-a35c-f38dcdea0d4e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:38:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b2175862-bb9c-49bf-a35c-f38dcdea0d4e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-59ce67/auth-test-model-59ce67\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:38:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b2175862-bb9c-49bf-a35c-f38dcdea0d4e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-08T23:38:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b2175862-bb9c-49bf-a35c-f38dcdea0d4e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T23:38:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b2175862-bb9c-49bf-a35c-f38dcdea0d4e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-08T23:38:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b2175862-bb9c-49bf-a35c-f38dcdea0d4e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T23:38:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b2175862-bb9c-49bf-a35c-f38dcdea0d4e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T23:38:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e8a21519-26e0-4e71-8355-3621e8f39583","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:54554","PortSpecifier":{"PortValue":54554}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e8a21519-26e0-4e71-8355-3621e8f39583","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-45d83d.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T23:38:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e8a21519-26e0-4e71-8355-3621e8f39583","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:54554","PortSpecifier":{"PortValue":54554}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783553898,"nanos":897244808},"http":{"id":"e8a21519-26e0-4e71-8355-3621e8f39583","method":"GET","headers":{":authority":"e2e-shared-a-45d83d.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:38:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e8a21519-26e0-4e71-8355-3621e8f39583","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1d6qb3JdsJZ39qhas_PUmwO7awtqnkNvDnoVg9mkayFAMqB1pI1YhTlDAn6Kr"}
{"level":"debug","ts":"2026-07-08T23:38:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e8a21519-26e0-4e71-8355-3621e8f39583","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-45d83d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1d6qb3JdsJZ39qhas_PUmwO7awtqnkNvDnoVg9mkayFAMqB1pI1YhTlDAn6Kr\"}"}
{"level":"debug","ts":"2026-07-08T23:38:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e8a21519-26e0-4e71-8355-3621e8f39583","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-45d83d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cd69f30f-d95e-4670-9ff0-4f0fa1b0533b","keyName":"e2e-auth-iso-a-461b04","subscription":"e2e-auth-iso-5af18a","tenant":"e2e-shared-a-45d83d","userId":"cd69f30f-d95e-4670-9ff0-4f0fa1b0533b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-08T23:38:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e8a21519-26e0-4e71-8355-3621e8f39583","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:38:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e8a21519-26e0-4e71-8355-3621e8f39583","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:38:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e8a21519-26e0-4e71-8355-3621e8f39583","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:38:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e8a21519-26e0-4e71-8355-3621e8f39583","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-45d83d/auth-test-model-45d83d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:38:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e8a21519-26e0-4e71-8355-3621e8f39583","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-08T23:38:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e8a21519-26e0-4e71-8355-3621e8f39583","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T23:38:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e8a21519-26e0-4e71-8355-3621e8f39583","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-5af18a"}
{"level":"debug","ts":"2026-07-08T23:38:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e8a21519-26e0-4e71-8355-3621e8f39583","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-08T23:38:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e8a21519-26e0-4e71-8355-3621e8f39583","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T23:38:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e8a21519-26e0-4e71-8355-3621e8f39583","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T23:38:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a67395e1-2412-4e37-ae3c-77cd696fdde6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:57752","PortSpecifier":{"PortValue":57752}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a67395e1-2412-4e37-ae3c-77cd696fdde6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-45d83d.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T23:38:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a67395e1-2412-4e37-ae3c-77cd696fdde6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:57752","PortSpecifier":{"PortValue":57752}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783553915,"nanos":909915151},"http":{"id":"a67395e1-2412-4e37-ae3c-77cd696fdde6","method":"POST","headers":{":authority":"e2e-shared-a-45d83d.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:38:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a67395e1-2412-4e37-ae3c-77cd696fdde6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-08T23:38:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a67395e1-2412-4e37-ae3c-77cd696fdde6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4eb469ed-bde9-4b74-b02d-b674c54e5440","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=bc060732-2068-4968-bbfb-220d44e07ffa"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb0dcd2f307a"]}}
{"level":"debug","ts":"2026-07-08T23:38:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a67395e1-2412-4e37-ae3c-77cd696fdde6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb0dcd2f307a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=bc060732-2068-4968-bbfb-220d44e07ffa"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4eb469ed-bde9-4b74-b02d-b674c54e5440","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"07be2283df4ace392f01165483752186898f1dca068cb3edf53b2db64dcaf20d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-45d83d.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:38:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a67395e1-2412-4e37-ae3c-77cd696fdde6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:38:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a67395e1-2412-4e37-ae3c-77cd696fdde6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:38:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a67395e1-2412-4e37-ae3c-77cd696fdde6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-45d83d/auth-test-model-45d83d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:38:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a67395e1-2412-4e37-ae3c-77cd696fdde6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-08T23:38:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a67395e1-2412-4e37-ae3c-77cd696fdde6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-08T23:38:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a67395e1-2412-4e37-ae3c-77cd696fdde6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-08T23:38:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a67395e1-2412-4e37-ae3c-77cd696fdde6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T23:38:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a67395e1-2412-4e37-ae3c-77cd696fdde6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T23:38:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8706fad2-2cb3-4fd6-a1c9-679485aca4d0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:44852","PortSpecifier":{"PortValue":44852}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8706fad2-2cb3-4fd6-a1c9-679485aca4d0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-59ce67.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T23:38:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8706fad2-2cb3-4fd6-a1c9-679485aca4d0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:44852","PortSpecifier":{"PortValue":44852}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783553915,"nanos":948124394},"http":{"id":"8706fad2-2cb3-4fd6-a1c9-679485aca4d0","method":"POST","headers":{":authority":"e2e-shared-b-59ce67.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:38:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8706fad2-2cb3-4fd6-a1c9-679485aca4d0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-08T23:38:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8706fad2-2cb3-4fd6-a1c9-679485aca4d0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4eb469ed-bde9-4b74-b02d-b674c54e5440","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=bc060732-2068-4968-bbfb-220d44e07ffa"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb0dcd2f307a"]}}
{"level":"debug","ts":"2026-07-08T23:38:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8706fad2-2cb3-4fd6-a1c9-679485aca4d0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb0dcd2f307a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=bc060732-2068-4968-bbfb-220d44e07ffa"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4eb469ed-bde9-4b74-b02d-b674c54e5440","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0c9d61f1b082de375e18d1f9e06bc7ba43cbef8c82c7f355f97f0838179c3723"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-59ce67.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:38:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8706fad2-2cb3-4fd6-a1c9-679485aca4d0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:38:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8706fad2-2cb3-4fd6-a1c9-679485aca4d0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:38:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8706fad2-2cb3-4fd6-a1c9-679485aca4d0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-59ce67/auth-test-model-59ce67\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:38:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8706fad2-2cb3-4fd6-a1c9-679485aca4d0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-08T23:38:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8706fad2-2cb3-4fd6-a1c9-679485aca4d0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T23:38:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8706fad2-2cb3-4fd6-a1c9-679485aca4d0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-08T23:38:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8706fad2-2cb3-4fd6-a1c9-679485aca4d0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T23:38:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8706fad2-2cb3-4fd6-a1c9-679485aca4d0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T23:38:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"16ce55d0-a46f-4dc7-8659-acd07b3039a0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:44864","PortSpecifier":{"PortValue":44864}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"16ce55d0-a46f-4dc7-8659-acd07b3039a0","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-59ce67.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T23:38:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"16ce55d0-a46f-4dc7-8659-acd07b3039a0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:44864","PortSpecifier":{"PortValue":44864}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783553915,"nanos":984330072},"http":{"id":"16ce55d0-a46f-4dc7-8659-acd07b3039a0","method":"GET","headers":{":authority":"e2e-shared-b-59ce67.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:38:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"16ce55d0-a46f-4dc7-8659-acd07b3039a0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-avlEuNXnFgOi6rU2_yelZBsak2wJJnv7WjYjCh5Vhj3u8rTHUmnTVqw5Ig9v"}
{"level":"debug","ts":"2026-07-08T23:38:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"16ce55d0-a46f-4dc7-8659-acd07b3039a0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-59ce67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-avlEuNXnFgOi6rU2_yelZBsak2wJJnv7WjYjCh5Vhj3u8rTHUmnTVqw5Ig9v\"}"}
{"level":"debug","ts":"2026-07-08T23:38:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"16ce55d0-a46f-4dc7-8659-acd07b3039a0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-59ce67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-08T23:38:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"16ce55d0-a46f-4dc7-8659-acd07b3039a0","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"0c9d61f1b082de375e18d1f9e06bc7ba43cbef8c82c7f355f97f0838179c3723"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-59ce67.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:38:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16ce55d0-a46f-4dc7-8659-acd07b3039a0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:38:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"16ce55d0-a46f-4dc7-8659-acd07b3039a0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-08T23:38:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"16ce55d0-a46f-4dc7-8659-acd07b3039a0","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-08T23:38:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"16ce55d0-a46f-4dc7-8659-acd07b3039a0","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-08T23:38:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ed330bdd-0d3b-4e2b-a2bd-f840a91c6c98","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:57718","PortSpecifier":{"PortValue":57718}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ed330bdd-0d3b-4e2b-a2bd-f840a91c6c98","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-45d83d.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T23:38:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ed330bdd-0d3b-4e2b-a2bd-f840a91c6c98","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:57718","PortSpecifier":{"PortValue":57718}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783553932,"nanos":987137513},"http":{"id":"ed330bdd-0d3b-4e2b-a2bd-f840a91c6c98","method":"POST","headers":{":authority":"e2e-shared-a-45d83d.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:38:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ed330bdd-0d3b-4e2b-a2bd-f840a91c6c98","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-08T23:38:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ed330bdd-0d3b-4e2b-a2bd-f840a91c6c98","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4eb469ed-bde9-4b74-b02d-b674c54e5440","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=bc060732-2068-4968-bbfb-220d44e07ffa"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb0dcd2f307a"]}}
{"level":"debug","ts":"2026-07-08T23:38:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ed330bdd-0d3b-4e2b-a2bd-f840a91c6c98","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb0dcd2f307a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=bc060732-2068-4968-bbfb-220d44e07ffa"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4eb469ed-bde9-4b74-b02d-b674c54e5440","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"07be2283df4ace392f01165483752186898f1dca068cb3edf53b2db64dcaf20d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-45d83d.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:38:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ed330bdd-0d3b-4e2b-a2bd-f840a91c6c98","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:38:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ed330bdd-0d3b-4e2b-a2bd-f840a91c6c98","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:38:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ed330bdd-0d3b-4e2b-a2bd-f840a91c6c98","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-45d83d/auth-test-model-45d83d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:38:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ed330bdd-0d3b-4e2b-a2bd-f840a91c6c98","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-08T23:38:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ed330bdd-0d3b-4e2b-a2bd-f840a91c6c98","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T23:38:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ed330bdd-0d3b-4e2b-a2bd-f840a91c6c98","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-08T23:38:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ed330bdd-0d3b-4e2b-a2bd-f840a91c6c98","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T23:38:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ed330bdd-0d3b-4e2b-a2bd-f840a91c6c98","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T23:38:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b3484e6b-1200-496e-b33d-31d402e88274","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:54914","PortSpecifier":{"PortValue":54914}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b3484e6b-1200-496e-b33d-31d402e88274","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-59ce67.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T23:38:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b3484e6b-1200-496e-b33d-31d402e88274","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:54914","PortSpecifier":{"PortValue":54914}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783553933,"nanos":18117270},"http":{"id":"b3484e6b-1200-496e-b33d-31d402e88274","method":"POST","headers":{":authority":"e2e-shared-b-59ce67.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:38:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b3484e6b-1200-496e-b33d-31d402e88274","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-08T23:38:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b3484e6b-1200-496e-b33d-31d402e88274","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4eb469ed-bde9-4b74-b02d-b674c54e5440","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=bc060732-2068-4968-bbfb-220d44e07ffa"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb0dcd2f307a"]}}
{"level":"debug","ts":"2026-07-08T23:38:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b3484e6b-1200-496e-b33d-31d402e88274","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb0dcd2f307a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=bc060732-2068-4968-bbfb-220d44e07ffa"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4eb469ed-bde9-4b74-b02d-b674c54e5440","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0c9d61f1b082de375e18d1f9e06bc7ba43cbef8c82c7f355f97f0838179c3723"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-59ce67.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:38:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3484e6b-1200-496e-b33d-31d402e88274","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:38:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3484e6b-1200-496e-b33d-31d402e88274","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:38:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3484e6b-1200-496e-b33d-31d402e88274","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-59ce67/auth-test-model-59ce67\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:38:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b3484e6b-1200-496e-b33d-31d402e88274","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-08T23:38:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b3484e6b-1200-496e-b33d-31d402e88274","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T23:38:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b3484e6b-1200-496e-b33d-31d402e88274","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-08T23:38:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b3484e6b-1200-496e-b33d-31d402e88274","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T23:38:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b3484e6b-1200-496e-b33d-31d402e88274","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T23:38:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"94f0686d-1572-4578-8b14-14cd6eaf9fde","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:57726","PortSpecifier":{"PortValue":57726}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"94f0686d-1572-4578-8b14-14cd6eaf9fde","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-45d83d.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T23:38:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"94f0686d-1572-4578-8b14-14cd6eaf9fde","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:57726","PortSpecifier":{"PortValue":57726}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783553933,"nanos":55317694},"http":{"id":"94f0686d-1572-4578-8b14-14cd6eaf9fde","method":"POST","headers":{":authority":"e2e-shared-a-45d83d.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:38:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"94f0686d-1572-4578-8b14-14cd6eaf9fde","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-08T23:38:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"94f0686d-1572-4578-8b14-14cd6eaf9fde","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4eb469ed-bde9-4b74-b02d-b674c54e5440","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=bc060732-2068-4968-bbfb-220d44e07ffa"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb0dcd2f307a"]}}
{"level":"debug","ts":"2026-07-08T23:38:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"94f0686d-1572-4578-8b14-14cd6eaf9fde","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb0dcd2f307a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=bc060732-2068-4968-bbfb-220d44e07ffa"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4eb469ed-bde9-4b74-b02d-b674c54e5440","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"07be2283df4ace392f01165483752186898f1dca068cb3edf53b2db64dcaf20d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-45d83d.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:38:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"94f0686d-1572-4578-8b14-14cd6eaf9fde","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:38:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"94f0686d-1572-4578-8b14-14cd6eaf9fde","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:38:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"94f0686d-1572-4578-8b14-14cd6eaf9fde","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-45d83d/auth-test-model-45d83d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:38:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"94f0686d-1572-4578-8b14-14cd6eaf9fde","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-08T23:38:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"94f0686d-1572-4578-8b14-14cd6eaf9fde","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T23:38:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"94f0686d-1572-4578-8b14-14cd6eaf9fde","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-08T23:38:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"94f0686d-1572-4578-8b14-14cd6eaf9fde","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T23:38:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"94f0686d-1572-4578-8b14-14cd6eaf9fde","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T23:38:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9cd0fe02-1f32-496d-8c9b-59988e479cd0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:54918","PortSpecifier":{"PortValue":54918}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9cd0fe02-1f32-496d-8c9b-59988e479cd0","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-59ce67.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T23:38:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9cd0fe02-1f32-496d-8c9b-59988e479cd0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:54918","PortSpecifier":{"PortValue":54918}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783553933,"nanos":89220506},"http":{"id":"9cd0fe02-1f32-496d-8c9b-59988e479cd0","method":"POST","headers":{":authority":"e2e-shared-b-59ce67.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:38:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9cd0fe02-1f32-496d-8c9b-59988e479cd0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-08T23:38:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9cd0fe02-1f32-496d-8c9b-59988e479cd0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4eb469ed-bde9-4b74-b02d-b674c54e5440","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=bc060732-2068-4968-bbfb-220d44e07ffa"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb0dcd2f307a"]}}
{"level":"debug","ts":"2026-07-08T23:38:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9cd0fe02-1f32-496d-8c9b-59988e479cd0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb0dcd2f307a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=bc060732-2068-4968-bbfb-220d44e07ffa"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4eb469ed-bde9-4b74-b02d-b674c54e5440","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0c9d61f1b082de375e18d1f9e06bc7ba43cbef8c82c7f355f97f0838179c3723"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-59ce67.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:38:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9cd0fe02-1f32-496d-8c9b-59988e479cd0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:38:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9cd0fe02-1f32-496d-8c9b-59988e479cd0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:38:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9cd0fe02-1f32-496d-8c9b-59988e479cd0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-59ce67/auth-test-model-59ce67\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:38:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9cd0fe02-1f32-496d-8c9b-59988e479cd0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-08T23:38:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9cd0fe02-1f32-496d-8c9b-59988e479cd0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T23:38:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9cd0fe02-1f32-496d-8c9b-59988e479cd0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-08T23:38:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9cd0fe02-1f32-496d-8c9b-59988e479cd0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T23:38:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9cd0fe02-1f32-496d-8c9b-59988e479cd0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T23:39:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1fef9243-f11e-44e3-9443-5e1bd5a87dca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:52738","PortSpecifier":{"PortValue":52738}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1fef9243-f11e-44e3-9443-5e1bd5a87dca","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-45d83d.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T23:39:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1fef9243-f11e-44e3-9443-5e1bd5a87dca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:52738","PortSpecifier":{"PortValue":52738}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783553950,"nanos":129443174},"http":{"id":"1fef9243-f11e-44e3-9443-5e1bd5a87dca","method":"POST","headers":{":authority":"e2e-shared-a-45d83d.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:39:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1fef9243-f11e-44e3-9443-5e1bd5a87dca","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-08T23:39:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1fef9243-f11e-44e3-9443-5e1bd5a87dca","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4eb469ed-bde9-4b74-b02d-b674c54e5440","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=bc060732-2068-4968-bbfb-220d44e07ffa"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb0dcd2f307a"]}}
{"level":"debug","ts":"2026-07-08T23:39:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1fef9243-f11e-44e3-9443-5e1bd5a87dca","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb0dcd2f307a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=bc060732-2068-4968-bbfb-220d44e07ffa"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4eb469ed-bde9-4b74-b02d-b674c54e5440","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"07be2283df4ace392f01165483752186898f1dca068cb3edf53b2db64dcaf20d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-45d83d.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:39:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1fef9243-f11e-44e3-9443-5e1bd5a87dca","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:39:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1fef9243-f11e-44e3-9443-5e1bd5a87dca","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:39:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1fef9243-f11e-44e3-9443-5e1bd5a87dca","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-45d83d/auth-test-model-45d83d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:39:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1fef9243-f11e-44e3-9443-5e1bd5a87dca","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-08T23:39:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1fef9243-f11e-44e3-9443-5e1bd5a87dca","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-08T23:39:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1fef9243-f11e-44e3-9443-5e1bd5a87dca","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-08T23:39:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1fef9243-f11e-44e3-9443-5e1bd5a87dca","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T23:39:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1fef9243-f11e-44e3-9443-5e1bd5a87dca","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T23:39:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ef64846f-39a1-47b6-bc2d-89c6756976c6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:59378","PortSpecifier":{"PortValue":59378}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ef64846f-39a1-47b6-bc2d-89c6756976c6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-59ce67.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T23:39:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ef64846f-39a1-47b6-bc2d-89c6756976c6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:59378","PortSpecifier":{"PortValue":59378}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783553950,"nanos":161149603},"http":{"id":"ef64846f-39a1-47b6-bc2d-89c6756976c6","method":"POST","headers":{":authority":"e2e-shared-b-59ce67.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:39:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ef64846f-39a1-47b6-bc2d-89c6756976c6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-08T23:39:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ef64846f-39a1-47b6-bc2d-89c6756976c6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4eb469ed-bde9-4b74-b02d-b674c54e5440","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=bc060732-2068-4968-bbfb-220d44e07ffa"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb0dcd2f307a"]}}
{"level":"debug","ts":"2026-07-08T23:39:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ef64846f-39a1-47b6-bc2d-89c6756976c6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb0dcd2f307a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=bc060732-2068-4968-bbfb-220d44e07ffa"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4eb469ed-bde9-4b74-b02d-b674c54e5440","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0c9d61f1b082de375e18d1f9e06bc7ba43cbef8c82c7f355f97f0838179c3723"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-59ce67.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:39:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef64846f-39a1-47b6-bc2d-89c6756976c6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:39:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef64846f-39a1-47b6-bc2d-89c6756976c6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:39:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef64846f-39a1-47b6-bc2d-89c6756976c6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-59ce67/auth-test-model-59ce67\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:39:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ef64846f-39a1-47b6-bc2d-89c6756976c6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-08T23:39:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef64846f-39a1-47b6-bc2d-89c6756976c6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-08T23:39:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef64846f-39a1-47b6-bc2d-89c6756976c6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-08T23:39:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ef64846f-39a1-47b6-bc2d-89c6756976c6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T23:39:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ef64846f-39a1-47b6-bc2d-89c6756976c6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T23:39:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4e4bb618-9cf2-472a-8af4-755aef5714ff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:59386","PortSpecifier":{"PortValue":59386}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4e4bb618-9cf2-472a-8af4-755aef5714ff","method":"GET","path":"/maas-api/v1/api-keys/a2e22f1d-6183-45a3-9905-6a915a5283cf","host":"e2e-shared-b-59ce67.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T23:39:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4e4bb618-9cf2-472a-8af4-755aef5714ff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:59386","PortSpecifier":{"PortValue":59386}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783553950,"nanos":191917491},"http":{"id":"4e4bb618-9cf2-472a-8af4-755aef5714ff","method":"GET","headers":{":authority":"e2e-shared-b-59ce67.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/a2e22f1d-6183-45a3-9905-6a915a5283cf",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:39:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4e4bb618-9cf2-472a-8af4-755aef5714ff","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-08T23:39:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4e4bb618-9cf2-472a-8af4-755aef5714ff","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4eb469ed-bde9-4b74-b02d-b674c54e5440","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=bc060732-2068-4968-bbfb-220d44e07ffa"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb0dcd2f307a"]}}
{"level":"debug","ts":"2026-07-08T23:39:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4e4bb618-9cf2-472a-8af4-755aef5714ff","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb0dcd2f307a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=bc060732-2068-4968-bbfb-220d44e07ffa"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4eb469ed-bde9-4b74-b02d-b674c54e5440","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0c9d61f1b082de375e18d1f9e06bc7ba43cbef8c82c7f355f97f0838179c3723"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-59ce67.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/a2e22f1d-6183-45a3-9905-6a915a5283cf",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:39:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e4bb618-9cf2-472a-8af4-755aef5714ff","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:39:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e4bb618-9cf2-472a-8af4-755aef5714ff","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:39:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e4bb618-9cf2-472a-8af4-755aef5714ff","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-59ce67/auth-test-model-59ce67\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:39:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4e4bb618-9cf2-472a-8af4-755aef5714ff","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-08T23:39:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e4bb618-9cf2-472a-8af4-755aef5714ff","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-08T23:39:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e4bb618-9cf2-472a-8af4-755aef5714ff","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-08T23:39:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4e4bb618-9cf2-472a-8af4-755aef5714ff","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T23:39:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4e4bb618-9cf2-472a-8af4-755aef5714ff","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T23:39:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d5a86a23-ca7a-48e0-9289-675a28b239df","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:52744","PortSpecifier":{"PortValue":52744}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d5a86a23-ca7a-48e0-9289-675a28b239df","method":"GET","path":"/maas-api/v1/api-keys/a2e22f1d-6183-45a3-9905-6a915a5283cf","host":"e2e-shared-a-45d83d.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T23:39:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d5a86a23-ca7a-48e0-9289-675a28b239df","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:52744","PortSpecifier":{"PortValue":52744}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783553950,"nanos":219068145},"http":{"id":"d5a86a23-ca7a-48e0-9289-675a28b239df","method":"GET","headers":{":authority":"e2e-shared-a-45d83d.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/a2e22f1d-6183-45a3-9905-6a915a5283cf",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:39:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d5a86a23-ca7a-48e0-9289-675a28b239df","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-08T23:39:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d5a86a23-ca7a-48e0-9289-675a28b239df","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4eb469ed-bde9-4b74-b02d-b674c54e5440","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=bc060732-2068-4968-bbfb-220d44e07ffa"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb0dcd2f307a"]}}
{"level":"debug","ts":"2026-07-08T23:39:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d5a86a23-ca7a-48e0-9289-675a28b239df","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb0dcd2f307a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=bc060732-2068-4968-bbfb-220d44e07ffa"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4eb469ed-bde9-4b74-b02d-b674c54e5440","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"07be2283df4ace392f01165483752186898f1dca068cb3edf53b2db64dcaf20d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-45d83d.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/a2e22f1d-6183-45a3-9905-6a915a5283cf",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:39:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5a86a23-ca7a-48e0-9289-675a28b239df","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:39:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5a86a23-ca7a-48e0-9289-675a28b239df","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:39:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5a86a23-ca7a-48e0-9289-675a28b239df","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-45d83d/auth-test-model-45d83d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:39:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d5a86a23-ca7a-48e0-9289-675a28b239df","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-08T23:39:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d5a86a23-ca7a-48e0-9289-675a28b239df","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T23:39:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d5a86a23-ca7a-48e0-9289-675a28b239df","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-08T23:39:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d5a86a23-ca7a-48e0-9289-675a28b239df","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T23:39:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d5a86a23-ca7a-48e0-9289-675a28b239df","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T23:39:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dd8d632d-23b1-4339-ac3f-47ca08181b7e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:60522","PortSpecifier":{"PortValue":60522}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dd8d632d-23b1-4339-ac3f-47ca08181b7e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-45d83d.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T23:39:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dd8d632d-23b1-4339-ac3f-47ca08181b7e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:60522","PortSpecifier":{"PortValue":60522}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783553965,"nanos":137780188},"http":{"id":"dd8d632d-23b1-4339-ac3f-47ca08181b7e","method":"POST","headers":{":authority":"e2e-shared-a-45d83d.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:39:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"dd8d632d-23b1-4339-ac3f-47ca08181b7e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-08T23:39:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dd8d632d-23b1-4339-ac3f-47ca08181b7e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4eb469ed-bde9-4b74-b02d-b674c54e5440","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=bc060732-2068-4968-bbfb-220d44e07ffa"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb0dcd2f307a"]}}
{"level":"debug","ts":"2026-07-08T23:39:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dd8d632d-23b1-4339-ac3f-47ca08181b7e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb0dcd2f307a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=bc060732-2068-4968-bbfb-220d44e07ffa"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4eb469ed-bde9-4b74-b02d-b674c54e5440","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"07be2283df4ace392f01165483752186898f1dca068cb3edf53b2db64dcaf20d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-45d83d.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:39:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd8d632d-23b1-4339-ac3f-47ca08181b7e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:39:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd8d632d-23b1-4339-ac3f-47ca08181b7e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:39:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd8d632d-23b1-4339-ac3f-47ca08181b7e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-45d83d/auth-test-model-45d83d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:39:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dd8d632d-23b1-4339-ac3f-47ca08181b7e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-08T23:39:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dd8d632d-23b1-4339-ac3f-47ca08181b7e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T23:39:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dd8d632d-23b1-4339-ac3f-47ca08181b7e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-08T23:39:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dd8d632d-23b1-4339-ac3f-47ca08181b7e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T23:39:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dd8d632d-23b1-4339-ac3f-47ca08181b7e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T23:39:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2936b0de-7653-9bbe-8ebc-fff2f039a571","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:53234","PortSpecifier":{"PortValue":53234}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2936b0de-7653-9bbe-8ebc-fff2f039a571","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-59ce67.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T23:39:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2936b0de-7653-9bbe-8ebc-fff2f039a571","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:53234","PortSpecifier":{"PortValue":53234}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783553965,"nanos":170086535},"http":{"id":"2936b0de-7653-9bbe-8ebc-fff2f039a571","method":"POST","headers":{":authority":"e2e-shared-b-59ce67.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:39:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2936b0de-7653-9bbe-8ebc-fff2f039a571","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-08T23:39:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2936b0de-7653-9bbe-8ebc-fff2f039a571","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4eb469ed-bde9-4b74-b02d-b674c54e5440","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=bc060732-2068-4968-bbfb-220d44e07ffa"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb0dcd2f307a"]}}
{"level":"debug","ts":"2026-07-08T23:39:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2936b0de-7653-9bbe-8ebc-fff2f039a571","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb0dcd2f307a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=bc060732-2068-4968-bbfb-220d44e07ffa"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4eb469ed-bde9-4b74-b02d-b674c54e5440","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0c9d61f1b082de375e18d1f9e06bc7ba43cbef8c82c7f355f97f0838179c3723"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-59ce67.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:39:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2936b0de-7653-9bbe-8ebc-fff2f039a571","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:39:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2936b0de-7653-9bbe-8ebc-fff2f039a571","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:39:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2936b0de-7653-9bbe-8ebc-fff2f039a571","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-59ce67/auth-test-model-59ce67\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:39:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2936b0de-7653-9bbe-8ebc-fff2f039a571","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-08T23:39:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2936b0de-7653-9bbe-8ebc-fff2f039a571","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-08T23:39:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2936b0de-7653-9bbe-8ebc-fff2f039a571","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-08T23:39:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2936b0de-7653-9bbe-8ebc-fff2f039a571","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T23:39:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2936b0de-7653-9bbe-8ebc-fff2f039a571","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T23:39:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2f4cc142-3897-4790-b784-5a012c1be661","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:60524","PortSpecifier":{"PortValue":60524}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2f4cc142-3897-4790-b784-5a012c1be661","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-45d83d.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T23:39:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2f4cc142-3897-4790-b784-5a012c1be661","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:60524","PortSpecifier":{"PortValue":60524}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783553965,"nanos":201629302},"http":{"id":"2f4cc142-3897-4790-b784-5a012c1be661","method":"POST","headers":{":authority":"e2e-shared-a-45d83d.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:39:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2f4cc142-3897-4790-b784-5a012c1be661","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1AuFdAnNc8DFBSn9r_wFg8PYfXNfAWWmgO2K5j0ZK2UXLI6xsmKSgcbmBF449"}
{"level":"debug","ts":"2026-07-08T23:39:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2f4cc142-3897-4790-b784-5a012c1be661","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-45d83d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1AuFdAnNc8DFBSn9r_wFg8PYfXNfAWWmgO2K5j0ZK2UXLI6xsmKSgcbmBF449\"}"}
{"level":"debug","ts":"2026-07-08T23:39:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2f4cc142-3897-4790-b784-5a012c1be661","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-45d83d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7e5a1413-98c9-41f4-b0fc-ed8e96bd354d","keyName":"e2e-auth-iso-a-305a71","subscription":"e2e-auth-iso-97b083","tenant":"e2e-shared-a-45d83d","userId":"7e5a1413-98c9-41f4-b0fc-ed8e96bd354d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-08T23:39:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2f4cc142-3897-4790-b784-5a012c1be661","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:39:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f4cc142-3897-4790-b784-5a012c1be661","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:39:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f4cc142-3897-4790-b784-5a012c1be661","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:39:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f4cc142-3897-4790-b784-5a012c1be661","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-45d83d/auth-test-model-45d83d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:39:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2f4cc142-3897-4790-b784-5a012c1be661","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T23:39:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2f4cc142-3897-4790-b784-5a012c1be661","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-08T23:39:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2f4cc142-3897-4790-b784-5a012c1be661","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-97b083"}
{"level":"debug","ts":"2026-07-08T23:39:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2f4cc142-3897-4790-b784-5a012c1be661","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-08T23:39:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2f4cc142-3897-4790-b784-5a012c1be661","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T23:39:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2f4cc142-3897-4790-b784-5a012c1be661","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T23:39:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/912735ad3a27f2f8f0312622922a1ab8ed1c96b566083137e41a29b49fe330f7"}
{"level":"info","ts":"2026-07-08T23:39:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a3b9a24d7022550c41fb72e7538760c8b2ec7c3d3689bcd91ecbf432fd78b9a6"}
{"level":"info","ts":"2026-07-08T23:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/64813919dc3a839702554c3fceaca7f261d453cc50a76f91dc90c6b9582d3e50"}
{"level":"info","ts":"2026-07-08T23:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cbcf6b95babf43ce3c02740081e03621a18c93cbe4e3c07c16acd0927e7f54a1"}
{"level":"info","ts":"2026-07-08T23:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/113ec1a4091db28255ac91aeb3ddd21da5fb565f62ea378cba89535b69f86f77"}
{"level":"info","ts":"2026-07-08T23:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fce3fee7c38dee40284a2342da9e6c75d6278fda8338879f14db089e2d26d4cb"}
{"level":"info","ts":"2026-07-08T23:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e5e5033228c0ad4565d71bd034e10a0c4074735726d624c5cf4ce2f71841448f"}
{"level":"info","ts":"2026-07-08T23:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e57ee8dce540272635984cf7d211b1b890b1dc3f0f7f1ff14d545a96d07f1b74"}
{"level":"info","ts":"2026-07-08T23:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ed4bed6a686f4a512db4385382ba01b705e7ce8866a578b888fd67c4b62a578c"}
{"level":"info","ts":"2026-07-08T23:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a655dbf86a24572317ccb578a9127a6c0b6856fc18156064996fb15303254680"}
{"level":"info","ts":"2026-07-08T23:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/49c366dd794ad4213874878f44710b1de69bfa3c95f645e2ad18b9d0b4b88300"}
{"level":"info","ts":"2026-07-08T23:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8e1406833069c59235a44626804f5acc071a06be9a65591114088a2d4dd97e94"}
{"level":"info","ts":"2026-07-08T23:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/91979e2361386492b6e53ac7d6f31850dede1149e2ad7f0fd71e27ff888c04d7"}
{"level":"info","ts":"2026-07-08T23:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3a5d4b1ee2630cf744a6e25392b2cc1708c2616603893c26d81a4390ffba8798"}
{"level":"info","ts":"2026-07-08T23:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/69a0fcc1fecaebe7f9e6e4ff01f9109aacee313826fe77ac623d018b6ec64e72"}
{"level":"info","ts":"2026-07-08T23:39:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ecc608525ff8fbdd2cca7f26f3c0e68c50577955eb6f5e1f0a6e0a3495d8a2da"}
{"level":"debug","ts":"2026-07-08T23:39:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a84b7b77e2f3f1c38bef7e4b463621caaabf26ae665bc4043caab1b018ed855","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:39:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:39:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:39:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a84b7b77e2f3f1c38bef7e4b463621caaabf26ae665bc4043caab1b018ed855","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:39:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a84b7b77e2f3f1c38bef7e4b463621caaabf26ae665bc4043caab1b018ed855","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:39:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a84b7b77e2f3f1c38bef7e4b463621caaabf26ae665bc4043caab1b018ed855","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:39:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a84b7b77e2f3f1c38bef7e4b463621caaabf26ae665bc4043caab1b018ed855"}
{"level":"debug","ts":"2026-07-08T23:39:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a84b7b77e2f3f1c38bef7e4b463621caaabf26ae665bc4043caab1b018ed855","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:39:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a84b7b77e2f3f1c38bef7e4b463621caaabf26ae665bc4043caab1b018ed855"}
{"level":"debug","ts":"2026-07-08T23:39:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a84b7b77e2f3f1c38bef7e4b463621caaabf26ae665bc4043caab1b018ed855","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:39:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:39:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a84b7b77e2f3f1c38bef7e4b463621caaabf26ae665bc4043caab1b018ed855"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:39:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a84b7b77e2f3f1c38bef7e4b463621caaabf26ae665bc4043caab1b018ed855","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:39:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a84b7b77e2f3f1c38bef7e4b463621caaabf26ae665bc4043caab1b018ed855","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:39:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a84b7b77e2f3f1c38bef7e4b463621caaabf26ae665bc4043caab1b018ed855"}
{"level":"debug","ts":"2026-07-08T23:39:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9cce9c738728acf36d8b96ddd7e3256d8a1b658465a1fd06ebc1f7d1cb3bc1df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:39:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:39:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:39:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9cce9c738728acf36d8b96ddd7e3256d8a1b658465a1fd06ebc1f7d1cb3bc1df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:39:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9cce9c738728acf36d8b96ddd7e3256d8a1b658465a1fd06ebc1f7d1cb3bc1df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:39:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9cce9c738728acf36d8b96ddd7e3256d8a1b658465a1fd06ebc1f7d1cb3bc1df","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:39:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cce9c738728acf36d8b96ddd7e3256d8a1b658465a1fd06ebc1f7d1cb3bc1df"}
{"level":"debug","ts":"2026-07-08T23:39:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9cce9c738728acf36d8b96ddd7e3256d8a1b658465a1fd06ebc1f7d1cb3bc1df","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:39:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cce9c738728acf36d8b96ddd7e3256d8a1b658465a1fd06ebc1f7d1cb3bc1df"}
{"level":"debug","ts":"2026-07-08T23:39:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9cce9c738728acf36d8b96ddd7e3256d8a1b658465a1fd06ebc1f7d1cb3bc1df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:39:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:39:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9cce9c738728acf36d8b96ddd7e3256d8a1b658465a1fd06ebc1f7d1cb3bc1df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:39:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9cce9c738728acf36d8b96ddd7e3256d8a1b658465a1fd06ebc1f7d1cb3bc1df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:39:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9cce9c738728acf36d8b96ddd7e3256d8a1b658465a1fd06ebc1f7d1cb3bc1df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:39:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:39:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:39:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9cce9c738728acf36d8b96ddd7e3256d8a1b658465a1fd06ebc1f7d1cb3bc1df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:39:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69db5f7c625d9965b9f139e18b6dba2699f889f08153336b3d02afc57a956bc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:39:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:39:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:39:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cce9c738728acf36d8b96ddd7e3256d8a1b658465a1fd06ebc1f7d1cb3bc1df"}
{"level":"info","ts":"2026-07-08T23:39:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69db5f7c625d9965b9f139e18b6dba2699f889f08153336b3d02afc57a956bc9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:39:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9cce9c738728acf36d8b96ddd7e3256d8a1b658465a1fd06ebc1f7d1cb3bc1df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:39:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:39:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9cce9c738728acf36d8b96ddd7e3256d8a1b658465a1fd06ebc1f7d1cb3bc1df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:39:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9cce9c738728acf36d8b96ddd7e3256d8a1b658465a1fd06ebc1f7d1cb3bc1df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:39:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69db5f7c625d9965b9f139e18b6dba2699f889f08153336b3d02afc57a956bc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:39:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:39:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:39:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69db5f7c625d9965b9f139e18b6dba2699f889f08153336b3d02afc57a956bc9"}
{"level":"info","ts":"2026-07-08T23:39:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69db5f7c625d9965b9f139e18b6dba2699f889f08153336b3d02afc57a956bc9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:39:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9cce9c738728acf36d8b96ddd7e3256d8a1b658465a1fd06ebc1f7d1cb3bc1df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:39:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:39:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:39:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9cce9c738728acf36d8b96ddd7e3256d8a1b658465a1fd06ebc1f7d1cb3bc1df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:39:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69db5f7c625d9965b9f139e18b6dba2699f889f08153336b3d02afc57a956bc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:39:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:39:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69db5f7c625d9965b9f139e18b6dba2699f889f08153336b3d02afc57a956bc9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:39:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cce9c738728acf36d8b96ddd7e3256d8a1b658465a1fd06ebc1f7d1cb3bc1df"}
{"level":"info","ts":"2026-07-08T23:39:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69db5f7c625d9965b9f139e18b6dba2699f889f08153336b3d02afc57a956bc9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:39:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9cce9c738728acf36d8b96ddd7e3256d8a1b658465a1fd06ebc1f7d1cb3bc1df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:39:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:39:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9cce9c738728acf36d8b96ddd7e3256d8a1b658465a1fd06ebc1f7d1cb3bc1df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:39:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9cce9c738728acf36d8b96ddd7e3256d8a1b658465a1fd06ebc1f7d1cb3bc1df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:39:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69db5f7c625d9965b9f139e18b6dba2699f889f08153336b3d02afc57a956bc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:39:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:39:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:39:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69db5f7c625d9965b9f139e18b6dba2699f889f08153336b3d02afc57a956bc9"}
{"level":"info","ts":"2026-07-08T23:39:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69db5f7c625d9965b9f139e18b6dba2699f889f08153336b3d02afc57a956bc9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:39:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9cce9c738728acf36d8b96ddd7e3256d8a1b658465a1fd06ebc1f7d1cb3bc1df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:39:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:39:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:39:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9cce9c738728acf36d8b96ddd7e3256d8a1b658465a1fd06ebc1f7d1cb3bc1df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:39:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69db5f7c625d9965b9f139e18b6dba2699f889f08153336b3d02afc57a956bc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:39:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:39:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69db5f7c625d9965b9f139e18b6dba2699f889f08153336b3d02afc57a956bc9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:39:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69db5f7c625d9965b9f139e18b6dba2699f889f08153336b3d02afc57a956bc9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:39:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9cce9c738728acf36d8b96ddd7e3256d8a1b658465a1fd06ebc1f7d1cb3bc1df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:39:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69db5f7c625d9965b9f139e18b6dba2699f889f08153336b3d02afc57a956bc9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:39:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cce9c738728acf36d8b96ddd7e3256d8a1b658465a1fd06ebc1f7d1cb3bc1df"}
{"level":"debug","ts":"2026-07-08T23:39:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9cce9c738728acf36d8b96ddd7e3256d8a1b658465a1fd06ebc1f7d1cb3bc1df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:39:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:39:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9cce9c738728acf36d8b96ddd7e3256d8a1b658465a1fd06ebc1f7d1cb3bc1df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:39:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9cce9c738728acf36d8b96ddd7e3256d8a1b658465a1fd06ebc1f7d1cb3bc1df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:39:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9cce9c738728acf36d8b96ddd7e3256d8a1b658465a1fd06ebc1f7d1cb3bc1df","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:39:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69db5f7c625d9965b9f139e18b6dba2699f889f08153336b3d02afc57a956bc9"}
{"level":"info","ts":"2026-07-08T23:39:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cce9c738728acf36d8b96ddd7e3256d8a1b658465a1fd06ebc1f7d1cb3bc1df"}
{"level":"debug","ts":"2026-07-08T23:39:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59d9025f2f8c3ddf938e7b7ad4aff7c5a2c78c699c48a38b290f7a92bce9ea53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:39:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:39:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:39:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59d9025f2f8c3ddf938e7b7ad4aff7c5a2c78c699c48a38b290f7a92bce9ea53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:39:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59d9025f2f8c3ddf938e7b7ad4aff7c5a2c78c699c48a38b290f7a92bce9ea53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:39:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59d9025f2f8c3ddf938e7b7ad4aff7c5a2c78c699c48a38b290f7a92bce9ea53","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:39:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59d9025f2f8c3ddf938e7b7ad4aff7c5a2c78c699c48a38b290f7a92bce9ea53"}
{"level":"debug","ts":"2026-07-08T23:39:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59d9025f2f8c3ddf938e7b7ad4aff7c5a2c78c699c48a38b290f7a92bce9ea53","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:39:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59d9025f2f8c3ddf938e7b7ad4aff7c5a2c78c699c48a38b290f7a92bce9ea53"}
{"level":"debug","ts":"2026-07-08T23:39:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59d9025f2f8c3ddf938e7b7ad4aff7c5a2c78c699c48a38b290f7a92bce9ea53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:39:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:39:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["59d9025f2f8c3ddf938e7b7ad4aff7c5a2c78c699c48a38b290f7a92bce9ea53"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:39:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59d9025f2f8c3ddf938e7b7ad4aff7c5a2c78c699c48a38b290f7a92bce9ea53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:39:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8452f1126fe2c3341b7a3c8e08816c3da4f8722a747644f69bd96a0957bfbbe1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:39:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:39:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:39:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8452f1126fe2c3341b7a3c8e08816c3da4f8722a747644f69bd96a0957bfbbe1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:39:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59d9025f2f8c3ddf938e7b7ad4aff7c5a2c78c699c48a38b290f7a92bce9ea53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:39:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ded2e8e31ee92dea9a2a0906a754ed703e7872594602ca4e15eca6fdbfd26658","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:39:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:39:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:39:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ded2e8e31ee92dea9a2a0906a754ed703e7872594602ca4e15eca6fdbfd26658","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:39:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8452f1126fe2c3341b7a3c8e08816c3da4f8722a747644f69bd96a0957bfbbe1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:39:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ded2e8e31ee92dea9a2a0906a754ed703e7872594602ca4e15eca6fdbfd26658","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:39:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ded2e8e31ee92dea9a2a0906a754ed703e7872594602ca4e15eca6fdbfd26658","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:39:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8452f1126fe2c3341b7a3c8e08816c3da4f8722a747644f69bd96a0957bfbbe1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:39:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8452f1126fe2c3341b7a3c8e08816c3da4f8722a747644f69bd96a0957bfbbe1"}
{"level":"debug","ts":"2026-07-08T23:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ded2e8e31ee92dea9a2a0906a754ed703e7872594602ca4e15eca6fdbfd26658","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8452f1126fe2c3341b7a3c8e08816c3da4f8722a747644f69bd96a0957bfbbe1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:39:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:39:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8452f1126fe2c3341b7a3c8e08816c3da4f8722a747644f69bd96a0957bfbbe1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59d9025f2f8c3ddf938e7b7ad4aff7c5a2c78c699c48a38b290f7a92bce9ea53"}
{"level":"info","ts":"2026-07-08T23:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8452f1126fe2c3341b7a3c8e08816c3da4f8722a747644f69bd96a0957bfbbe1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8452f1126fe2c3341b7a3c8e08816c3da4f8722a747644f69bd96a0957bfbbe1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ded2e8e31ee92dea9a2a0906a754ed703e7872594602ca4e15eca6fdbfd26658"}
{"level":"debug","ts":"2026-07-08T23:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ded2e8e31ee92dea9a2a0906a754ed703e7872594602ca4e15eca6fdbfd26658","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:39:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:39:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ded2e8e31ee92dea9a2a0906a754ed703e7872594602ca4e15eca6fdbfd26658"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ded2e8e31ee92dea9a2a0906a754ed703e7872594602ca4e15eca6fdbfd26658","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bff73ce69a6e02180abf0e316914e66ce069978b83b27dce2d7591af01af382c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:39:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:39:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8452f1126fe2c3341b7a3c8e08816c3da4f8722a747644f69bd96a0957bfbbe1"}
{"level":"info","ts":"2026-07-08T23:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bff73ce69a6e02180abf0e316914e66ce069978b83b27dce2d7591af01af382c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ded2e8e31ee92dea9a2a0906a754ed703e7872594602ca4e15eca6fdbfd26658","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b242e49cc721878f20d85df829bb37d9177a14557ebe764a27e084e8d8b21fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:39:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:39:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b242e49cc721878f20d85df829bb37d9177a14557ebe764a27e084e8d8b21fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bff73ce69a6e02180abf0e316914e66ce069978b83b27dce2d7591af01af382c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:39:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:39:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bff73ce69a6e02180abf0e316914e66ce069978b83b27dce2d7591af01af382c"}
{"level":"info","ts":"2026-07-08T23:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bff73ce69a6e02180abf0e316914e66ce069978b83b27dce2d7591af01af382c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b242e49cc721878f20d85df829bb37d9177a14557ebe764a27e084e8d8b21fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bff73ce69a6e02180abf0e316914e66ce069978b83b27dce2d7591af01af382c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:39:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:39:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bff73ce69a6e02180abf0e316914e66ce069978b83b27dce2d7591af01af382c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bff73ce69a6e02180abf0e316914e66ce069978b83b27dce2d7591af01af382c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b242e49cc721878f20d85df829bb37d9177a14557ebe764a27e084e8d8b21fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bff73ce69a6e02180abf0e316914e66ce069978b83b27dce2d7591af01af382c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:39:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:39:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bff73ce69a6e02180abf0e316914e66ce069978b83b27dce2d7591af01af382c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ded2e8e31ee92dea9a2a0906a754ed703e7872594602ca4e15eca6fdbfd26658"}
{"level":"error","ts":"2026-07-08T23:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"bff73ce69a6e02180abf0e316914e66ce069978b83b27dce2d7591af01af382c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"bff73ce69a6e02180abf0e316914e66ce069978b83b27dce2d7591af01af382c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-08T23:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bff73ce69a6e02180abf0e316914e66ce069978b83b27dce2d7591af01af382c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bff73ce69a6e02180abf0e316914e66ce069978b83b27dce2d7591af01af382c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b242e49cc721878f20d85df829bb37d9177a14557ebe764a27e084e8d8b21fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:39:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:39:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b242e49cc721878f20d85df829bb37d9177a14557ebe764a27e084e8d8b21fa"}
{"level":"info","ts":"2026-07-08T23:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b242e49cc721878f20d85df829bb37d9177a14557ebe764a27e084e8d8b21fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b242e49cc721878f20d85df829bb37d9177a14557ebe764a27e084e8d8b21fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:39:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:39:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b242e49cc721878f20d85df829bb37d9177a14557ebe764a27e084e8d8b21fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bff73ce69a6e02180abf0e316914e66ce069978b83b27dce2d7591af01af382c"}
{"level":"info","ts":"2026-07-08T23:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b242e49cc721878f20d85df829bb37d9177a14557ebe764a27e084e8d8b21fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b242e49cc721878f20d85df829bb37d9177a14557ebe764a27e084e8d8b21fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:39:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:39:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b242e49cc721878f20d85df829bb37d9177a14557ebe764a27e084e8d8b21fa"}
{"level":"info","ts":"2026-07-08T23:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b242e49cc721878f20d85df829bb37d9177a14557ebe764a27e084e8d8b21fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b242e49cc721878f20d85df829bb37d9177a14557ebe764a27e084e8d8b21fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b242e49cc721878f20d85df829bb37d9177a14557ebe764a27e084e8d8b21fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b242e49cc721878f20d85df829bb37d9177a14557ebe764a27e084e8d8b21fa"}
{"level":"debug","ts":"2026-07-08T23:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b242e49cc721878f20d85df829bb37d9177a14557ebe764a27e084e8d8b21fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b242e49cc721878f20d85df829bb37d9177a14557ebe764a27e084e8d8b21fa"}
{"level":"debug","ts":"2026-07-08T23:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b242e49cc721878f20d85df829bb37d9177a14557ebe764a27e084e8d8b21fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:39:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:39:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b242e49cc721878f20d85df829bb37d9177a14557ebe764a27e084e8d8b21fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b242e49cc721878f20d85df829bb37d9177a14557ebe764a27e084e8d8b21fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b242e49cc721878f20d85df829bb37d9177a14557ebe764a27e084e8d8b21fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:39:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:39:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b242e49cc721878f20d85df829bb37d9177a14557ebe764a27e084e8d8b21fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b242e49cc721878f20d85df829bb37d9177a14557ebe764a27e084e8d8b21fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b242e49cc721878f20d85df829bb37d9177a14557ebe764a27e084e8d8b21fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b242e49cc721878f20d85df829bb37d9177a14557ebe764a27e084e8d8b21fa"}
{"level":"debug","ts":"2026-07-08T23:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b242e49cc721878f20d85df829bb37d9177a14557ebe764a27e084e8d8b21fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b242e49cc721878f20d85df829bb37d9177a14557ebe764a27e084e8d8b21fa"}
{"level":"debug","ts":"2026-07-08T23:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b242e49cc721878f20d85df829bb37d9177a14557ebe764a27e084e8d8b21fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:39:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:39:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b242e49cc721878f20d85df829bb37d9177a14557ebe764a27e084e8d8b21fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b242e49cc721878f20d85df829bb37d9177a14557ebe764a27e084e8d8b21fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b242e49cc721878f20d85df829bb37d9177a14557ebe764a27e084e8d8b21fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:39:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:39:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b242e49cc721878f20d85df829bb37d9177a14557ebe764a27e084e8d8b21fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b242e49cc721878f20d85df829bb37d9177a14557ebe764a27e084e8d8b21fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b242e49cc721878f20d85df829bb37d9177a14557ebe764a27e084e8d8b21fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b242e49cc721878f20d85df829bb37d9177a14557ebe764a27e084e8d8b21fa"}
{"level":"debug","ts":"2026-07-08T23:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b242e49cc721878f20d85df829bb37d9177a14557ebe764a27e084e8d8b21fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b242e49cc721878f20d85df829bb37d9177a14557ebe764a27e084e8d8b21fa"}
{"level":"debug","ts":"2026-07-08T23:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b242e49cc721878f20d85df829bb37d9177a14557ebe764a27e084e8d8b21fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:39:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:39:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b242e49cc721878f20d85df829bb37d9177a14557ebe764a27e084e8d8b21fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b242e49cc721878f20d85df829bb37d9177a14557ebe764a27e084e8d8b21fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b242e49cc721878f20d85df829bb37d9177a14557ebe764a27e084e8d8b21fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:39:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:39:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b242e49cc721878f20d85df829bb37d9177a14557ebe764a27e084e8d8b21fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b242e49cc721878f20d85df829bb37d9177a14557ebe764a27e084e8d8b21fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b242e49cc721878f20d85df829bb37d9177a14557ebe764a27e084e8d8b21fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b242e49cc721878f20d85df829bb37d9177a14557ebe764a27e084e8d8b21fa"}
{"level":"debug","ts":"2026-07-08T23:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b242e49cc721878f20d85df829bb37d9177a14557ebe764a27e084e8d8b21fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b242e49cc721878f20d85df829bb37d9177a14557ebe764a27e084e8d8b21fa"}
{"level":"debug","ts":"2026-07-08T23:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b242e49cc721878f20d85df829bb37d9177a14557ebe764a27e084e8d8b21fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:39:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:39:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b242e49cc721878f20d85df829bb37d9177a14557ebe764a27e084e8d8b21fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b242e49cc721878f20d85df829bb37d9177a14557ebe764a27e084e8d8b21fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b242e49cc721878f20d85df829bb37d9177a14557ebe764a27e084e8d8b21fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:39:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:39:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b242e49cc721878f20d85df829bb37d9177a14557ebe764a27e084e8d8b21fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b242e49cc721878f20d85df829bb37d9177a14557ebe764a27e084e8d8b21fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b242e49cc721878f20d85df829bb37d9177a14557ebe764a27e084e8d8b21fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b242e49cc721878f20d85df829bb37d9177a14557ebe764a27e084e8d8b21fa"}
{"level":"debug","ts":"2026-07-08T23:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b242e49cc721878f20d85df829bb37d9177a14557ebe764a27e084e8d8b21fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b242e49cc721878f20d85df829bb37d9177a14557ebe764a27e084e8d8b21fa"}
{"level":"debug","ts":"2026-07-08T23:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b242e49cc721878f20d85df829bb37d9177a14557ebe764a27e084e8d8b21fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:39:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:39:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b242e49cc721878f20d85df829bb37d9177a14557ebe764a27e084e8d8b21fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b242e49cc721878f20d85df829bb37d9177a14557ebe764a27e084e8d8b21fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b242e49cc721878f20d85df829bb37d9177a14557ebe764a27e084e8d8b21fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b242e49cc721878f20d85df829bb37d9177a14557ebe764a27e084e8d8b21fa"}
{"level":"debug","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6129f6226246a6c2828e8fd48bd83f30166bd9ed08598c3f7d3c6df708195e40","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:40:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:40:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6129f6226246a6c2828e8fd48bd83f30166bd9ed08598c3f7d3c6df708195e40","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6129f6226246a6c2828e8fd48bd83f30166bd9ed08598c3f7d3c6df708195e40","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:40:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:40:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6129f6226246a6c2828e8fd48bd83f30166bd9ed08598c3f7d3c6df708195e40"}
{"level":"info","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6129f6226246a6c2828e8fd48bd83f30166bd9ed08598c3f7d3c6df708195e40","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6129f6226246a6c2828e8fd48bd83f30166bd9ed08598c3f7d3c6df708195e40","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:40:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:40:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6129f6226246a6c2828e8fd48bd83f30166bd9ed08598c3f7d3c6df708195e40","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6129f6226246a6c2828e8fd48bd83f30166bd9ed08598c3f7d3c6df708195e40\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6129f6226246a6c2828e8fd48bd83f30166bd9ed08598c3f7d3c6df708195e40","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6129f6226246a6c2828e8fd48bd83f30166bd9ed08598c3f7d3c6df708195e40","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6129f6226246a6c2828e8fd48bd83f30166bd9ed08598c3f7d3c6df708195e40"}
{"level":"info","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6129f6226246a6c2828e8fd48bd83f30166bd9ed08598c3f7d3c6df708195e40"}
{"level":"debug","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acf3120e7aff4bb58a5c737a0e8c225e1fb303be2e7709a99e411e0369342615","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:40:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:40:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acf3120e7aff4bb58a5c737a0e8c225e1fb303be2e7709a99e411e0369342615","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acf3120e7aff4bb58a5c737a0e8c225e1fb303be2e7709a99e411e0369342615","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acf3120e7aff4bb58a5c737a0e8c225e1fb303be2e7709a99e411e0369342615","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6129f6226246a6c2828e8fd48bd83f30166bd9ed08598c3f7d3c6df708195e40","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:40:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:40:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6129f6226246a6c2828e8fd48bd83f30166bd9ed08598c3f7d3c6df708195e40"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acf3120e7aff4bb58a5c737a0e8c225e1fb303be2e7709a99e411e0369342615"}
{"level":"info","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6129f6226246a6c2828e8fd48bd83f30166bd9ed08598c3f7d3c6df708195e40","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6129f6226246a6c2828e8fd48bd83f30166bd9ed08598c3f7d3c6df708195e40","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acf3120e7aff4bb58a5c737a0e8c225e1fb303be2e7709a99e411e0369342615","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acf3120e7aff4bb58a5c737a0e8c225e1fb303be2e7709a99e411e0369342615"}
{"level":"info","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6129f6226246a6c2828e8fd48bd83f30166bd9ed08598c3f7d3c6df708195e40"}
{"level":"debug","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acf3120e7aff4bb58a5c737a0e8c225e1fb303be2e7709a99e411e0369342615","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:40:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:40:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["acf3120e7aff4bb58a5c737a0e8c225e1fb303be2e7709a99e411e0369342615"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acf3120e7aff4bb58a5c737a0e8c225e1fb303be2e7709a99e411e0369342615","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acf3120e7aff4bb58a5c737a0e8c225e1fb303be2e7709a99e411e0369342615","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:40:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:40:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acf3120e7aff4bb58a5c737a0e8c225e1fb303be2e7709a99e411e0369342615","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b88b60f45ea96b3beb818162f69f719c2501d48d2d98fcc8c05845618e3c0338","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:40:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:40:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acf3120e7aff4bb58a5c737a0e8c225e1fb303be2e7709a99e411e0369342615"}
{"level":"info","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b88b60f45ea96b3beb818162f69f719c2501d48d2d98fcc8c05845618e3c0338","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acf3120e7aff4bb58a5c737a0e8c225e1fb303be2e7709a99e411e0369342615","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:40:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:40:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["acf3120e7aff4bb58a5c737a0e8c225e1fb303be2e7709a99e411e0369342615"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acf3120e7aff4bb58a5c737a0e8c225e1fb303be2e7709a99e411e0369342615","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b88b60f45ea96b3beb818162f69f719c2501d48d2d98fcc8c05845618e3c0338","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:40:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:40:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b88b60f45ea96b3beb818162f69f719c2501d48d2d98fcc8c05845618e3c0338"}
{"level":"info","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b88b60f45ea96b3beb818162f69f719c2501d48d2d98fcc8c05845618e3c0338","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acf3120e7aff4bb58a5c737a0e8c225e1fb303be2e7709a99e411e0369342615","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:40:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:40:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acf3120e7aff4bb58a5c737a0e8c225e1fb303be2e7709a99e411e0369342615","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b88b60f45ea96b3beb818162f69f719c2501d48d2d98fcc8c05845618e3c0338","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:40:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:40:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b88b60f45ea96b3beb818162f69f719c2501d48d2d98fcc8c05845618e3c0338"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acf3120e7aff4bb58a5c737a0e8c225e1fb303be2e7709a99e411e0369342615"}
{"level":"info","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b88b60f45ea96b3beb818162f69f719c2501d48d2d98fcc8c05845618e3c0338","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acf3120e7aff4bb58a5c737a0e8c225e1fb303be2e7709a99e411e0369342615","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:40:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:40:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["acf3120e7aff4bb58a5c737a0e8c225e1fb303be2e7709a99e411e0369342615"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b88b60f45ea96b3beb818162f69f719c2501d48d2d98fcc8c05845618e3c0338"}
{"level":"info","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acf3120e7aff4bb58a5c737a0e8c225e1fb303be2e7709a99e411e0369342615","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b88b60f45ea96b3beb818162f69f719c2501d48d2d98fcc8c05845618e3c0338","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acf3120e7aff4bb58a5c737a0e8c225e1fb303be2e7709a99e411e0369342615","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:40:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:40:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acf3120e7aff4bb58a5c737a0e8c225e1fb303be2e7709a99e411e0369342615","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acf3120e7aff4bb58a5c737a0e8c225e1fb303be2e7709a99e411e0369342615","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acf3120e7aff4bb58a5c737a0e8c225e1fb303be2e7709a99e411e0369342615","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e919d8464b2f402888f75dce7fa2e0124bdeaca1d4d32c02ad7e79cd1c8ee391","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:40:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:40:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acf3120e7aff4bb58a5c737a0e8c225e1fb303be2e7709a99e411e0369342615"}
{"level":"info","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e919d8464b2f402888f75dce7fa2e0124bdeaca1d4d32c02ad7e79cd1c8ee391","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7fb1e3ddd0c333f9150428c0fa28178855a9e31f1610fa52fa51737157a4e84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:40:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:40:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b88b60f45ea96b3beb818162f69f719c2501d48d2d98fcc8c05845618e3c0338"}
{"level":"info","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7fb1e3ddd0c333f9150428c0fa28178855a9e31f1610fa52fa51737157a4e84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e919d8464b2f402888f75dce7fa2e0124bdeaca1d4d32c02ad7e79cd1c8ee391","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:40:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:40:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e919d8464b2f402888f75dce7fa2e0124bdeaca1d4d32c02ad7e79cd1c8ee391","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acf3120e7aff4bb58a5c737a0e8c225e1fb303be2e7709a99e411e0369342615","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:40:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:40:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["acf3120e7aff4bb58a5c737a0e8c225e1fb303be2e7709a99e411e0369342615"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e919d8464b2f402888f75dce7fa2e0124bdeaca1d4d32c02ad7e79cd1c8ee391"}
{"level":"info","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acf3120e7aff4bb58a5c737a0e8c225e1fb303be2e7709a99e411e0369342615","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7fb1e3ddd0c333f9150428c0fa28178855a9e31f1610fa52fa51737157a4e84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e919d8464b2f402888f75dce7fa2e0124bdeaca1d4d32c02ad7e79cd1c8ee391","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:40:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:40:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e919d8464b2f402888f75dce7fa2e0124bdeaca1d4d32c02ad7e79cd1c8ee391"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acf3120e7aff4bb58a5c737a0e8c225e1fb303be2e7709a99e411e0369342615"}
{"level":"info","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e919d8464b2f402888f75dce7fa2e0124bdeaca1d4d32c02ad7e79cd1c8ee391","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acf3120e7aff4bb58a5c737a0e8c225e1fb303be2e7709a99e411e0369342615","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7fb1e3ddd0c333f9150428c0fa28178855a9e31f1610fa52fa51737157a4e84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:40:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:40:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7fb1e3ddd0c333f9150428c0fa28178855a9e31f1610fa52fa51737157a4e84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e919d8464b2f402888f75dce7fa2e0124bdeaca1d4d32c02ad7e79cd1c8ee391","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7fb1e3ddd0c333f9150428c0fa28178855a9e31f1610fa52fa51737157a4e84","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7fb1e3ddd0c333f9150428c0fa28178855a9e31f1610fa52fa51737157a4e84"}
{"level":"debug","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7fb1e3ddd0c333f9150428c0fa28178855a9e31f1610fa52fa51737157a4e84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:40:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:40:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c7fb1e3ddd0c333f9150428c0fa28178855a9e31f1610fa52fa51737157a4e84"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e919d8464b2f402888f75dce7fa2e0124bdeaca1d4d32c02ad7e79cd1c8ee391"}
{"level":"info","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7fb1e3ddd0c333f9150428c0fa28178855a9e31f1610fa52fa51737157a4e84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7fb1e3ddd0c333f9150428c0fa28178855a9e31f1610fa52fa51737157a4e84","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acf3120e7aff4bb58a5c737a0e8c225e1fb303be2e7709a99e411e0369342615"}
{"level":"debug","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6710bf935467d8c1812fb60074eddc1315dc3f0954a592d8ad695f78e468f3eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:40:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:40:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7fb1e3ddd0c333f9150428c0fa28178855a9e31f1610fa52fa51737157a4e84"}
{"level":"info","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6710bf935467d8c1812fb60074eddc1315dc3f0954a592d8ad695f78e468f3eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed0ab7596e2f38f9b71bd5bd87a86ce829934d38e969ab3ddcbc5b0c8908c163","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:40:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:40:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed0ab7596e2f38f9b71bd5bd87a86ce829934d38e969ab3ddcbc5b0c8908c163","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6710bf935467d8c1812fb60074eddc1315dc3f0954a592d8ad695f78e468f3eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:40:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:40:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6710bf935467d8c1812fb60074eddc1315dc3f0954a592d8ad695f78e468f3eb"}
{"level":"info","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6710bf935467d8c1812fb60074eddc1315dc3f0954a592d8ad695f78e468f3eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed0ab7596e2f38f9b71bd5bd87a86ce829934d38e969ab3ddcbc5b0c8908c163","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:40:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:40:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed0ab7596e2f38f9b71bd5bd87a86ce829934d38e969ab3ddcbc5b0c8908c163"}
{"level":"info","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed0ab7596e2f38f9b71bd5bd87a86ce829934d38e969ab3ddcbc5b0c8908c163","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6710bf935467d8c1812fb60074eddc1315dc3f0954a592d8ad695f78e468f3eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed0ab7596e2f38f9b71bd5bd87a86ce829934d38e969ab3ddcbc5b0c8908c163","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:40:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:40:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed0ab7596e2f38f9b71bd5bd87a86ce829934d38e969ab3ddcbc5b0c8908c163"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed0ab7596e2f38f9b71bd5bd87a86ce829934d38e969ab3ddcbc5b0c8908c163","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed0ab7596e2f38f9b71bd5bd87a86ce829934d38e969ab3ddcbc5b0c8908c163","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:40:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:40:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed0ab7596e2f38f9b71bd5bd87a86ce829934d38e969ab3ddcbc5b0c8908c163"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ed0ab7596e2f38f9b71bd5bd87a86ce829934d38e969ab3ddcbc5b0c8908c163","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ed0ab7596e2f38f9b71bd5bd87a86ce829934d38e969ab3ddcbc5b0c8908c163\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6710bf935467d8c1812fb60074eddc1315dc3f0954a592d8ad695f78e468f3eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed0ab7596e2f38f9b71bd5bd87a86ce829934d38e969ab3ddcbc5b0c8908c163","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6710bf935467d8c1812fb60074eddc1315dc3f0954a592d8ad695f78e468f3eb"}
{"level":"debug","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed0ab7596e2f38f9b71bd5bd87a86ce829934d38e969ab3ddcbc5b0c8908c163","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:40:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:40:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed0ab7596e2f38f9b71bd5bd87a86ce829934d38e969ab3ddcbc5b0c8908c163","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed0ab7596e2f38f9b71bd5bd87a86ce829934d38e969ab3ddcbc5b0c8908c163","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed0ab7596e2f38f9b71bd5bd87a86ce829934d38e969ab3ddcbc5b0c8908c163"}
{"level":"debug","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed0ab7596e2f38f9b71bd5bd87a86ce829934d38e969ab3ddcbc5b0c8908c163","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:40:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:40:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6710bf935467d8c1812fb60074eddc1315dc3f0954a592d8ad695f78e468f3eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:40:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:40:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6710bf935467d8c1812fb60074eddc1315dc3f0954a592d8ad695f78e468f3eb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed0ab7596e2f38f9b71bd5bd87a86ce829934d38e969ab3ddcbc5b0c8908c163"}
{"level":"info","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6710bf935467d8c1812fb60074eddc1315dc3f0954a592d8ad695f78e468f3eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed0ab7596e2f38f9b71bd5bd87a86ce829934d38e969ab3ddcbc5b0c8908c163","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:40:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:40:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed0ab7596e2f38f9b71bd5bd87a86ce829934d38e969ab3ddcbc5b0c8908c163"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009"}
{"level":"info","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed0ab7596e2f38f9b71bd5bd87a86ce829934d38e969ab3ddcbc5b0c8908c163","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:40:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:40:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6710bf935467d8c1812fb60074eddc1315dc3f0954a592d8ad695f78e468f3eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:40:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:40:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6710bf935467d8c1812fb60074eddc1315dc3f0954a592d8ad695f78e468f3eb"}
{"level":"info","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6710bf935467d8c1812fb60074eddc1315dc3f0954a592d8ad695f78e468f3eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed0ab7596e2f38f9b71bd5bd87a86ce829934d38e969ab3ddcbc5b0c8908c163","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:40:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:40:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6710bf935467d8c1812fb60074eddc1315dc3f0954a592d8ad695f78e468f3eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:40:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:40:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6710bf935467d8c1812fb60074eddc1315dc3f0954a592d8ad695f78e468f3eb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009"}
{"level":"info","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6710bf935467d8c1812fb60074eddc1315dc3f0954a592d8ad695f78e468f3eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:40:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:40:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6710bf935467d8c1812fb60074eddc1315dc3f0954a592d8ad695f78e468f3eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed0ab7596e2f38f9b71bd5bd87a86ce829934d38e969ab3ddcbc5b0c8908c163"}
{"level":"info","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6710bf935467d8c1812fb60074eddc1315dc3f0954a592d8ad695f78e468f3eb"}
{"level":"info","ts":"2026-07-08T23:40:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009"}
{"level":"debug","ts":"2026-07-08T23:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:40:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:40:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009"}
{"level":"debug","ts":"2026-07-08T23:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009"}
{"level":"debug","ts":"2026-07-08T23:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:40:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:40:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:40:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:40:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009"}
{"level":"debug","ts":"2026-07-08T23:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009"}
{"level":"debug","ts":"2026-07-08T23:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:40:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:40:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:40:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:40:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69db5f7c625d9965b9f139e18b6dba2699f889f08153336b3d02afc57a956bc9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009"}
{"level":"debug","ts":"2026-07-08T23:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:40:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:40:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69db5f7c625d9965b9f139e18b6dba2699f889f08153336b3d02afc57a956bc9"}
{"level":"info","ts":"2026-07-08T23:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:40:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:40:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009"}
{"level":"info","ts":"2026-07-08T23:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009"}
{"level":"debug","ts":"2026-07-08T23:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009"}
{"level":"debug","ts":"2026-07-08T23:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:40:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:40:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:40:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:40:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009"}
{"level":"debug","ts":"2026-07-08T23:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009"}
{"level":"debug","ts":"2026-07-08T23:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:40:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:40:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:40:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:40:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009"}
{"level":"debug","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009"}
{"level":"debug","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:40:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:40:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:40:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:40:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009"}
{"level":"debug","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009"}
{"level":"debug","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:40:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:40:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9cce9c738728acf36d8b96ddd7e3256d8a1b658465a1fd06ebc1f7d1cb3bc1df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:40:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:40:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cce9c738728acf36d8b96ddd7e3256d8a1b658465a1fd06ebc1f7d1cb3bc1df"}
{"level":"info","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9cce9c738728acf36d8b96ddd7e3256d8a1b658465a1fd06ebc1f7d1cb3bc1df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:40:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:40:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9cce9c738728acf36d8b96ddd7e3256d8a1b658465a1fd06ebc1f7d1cb3bc1df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:40:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:40:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9cce9c738728acf36d8b96ddd7e3256d8a1b658465a1fd06ebc1f7d1cb3bc1df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009"}
{"level":"info","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9cce9c738728acf36d8b96ddd7e3256d8a1b658465a1fd06ebc1f7d1cb3bc1df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:40:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:40:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9cce9c738728acf36d8b96ddd7e3256d8a1b658465a1fd06ebc1f7d1cb3bc1df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:40:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:40:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cce9c738728acf36d8b96ddd7e3256d8a1b658465a1fd06ebc1f7d1cb3bc1df"}
{"level":"info","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9cce9c738728acf36d8b96ddd7e3256d8a1b658465a1fd06ebc1f7d1cb3bc1df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:40:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:40:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009"}
{"level":"info","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9cce9c738728acf36d8b96ddd7e3256d8a1b658465a1fd06ebc1f7d1cb3bc1df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:40:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:40:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9cce9c738728acf36d8b96ddd7e3256d8a1b658465a1fd06ebc1f7d1cb3bc1df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e919d8464b2f402888f75dce7fa2e0124bdeaca1d4d32c02ad7e79cd1c8ee391","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:40:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:40:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cce9c738728acf36d8b96ddd7e3256d8a1b658465a1fd06ebc1f7d1cb3bc1df"}
{"level":"error","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:40:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:40:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9cce9c738728acf36d8b96ddd7e3256d8a1b658465a1fd06ebc1f7d1cb3bc1df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:40:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:40:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9cce9c738728acf36d8b96ddd7e3256d8a1b658465a1fd06ebc1f7d1cb3bc1df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009"}
{"level":"info","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9cce9c738728acf36d8b96ddd7e3256d8a1b658465a1fd06ebc1f7d1cb3bc1df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:40:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:40:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e919d8464b2f402888f75dce7fa2e0124bdeaca1d4d32c02ad7e79cd1c8ee391"}
{"level":"info","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9cce9c738728acf36d8b96ddd7e3256d8a1b658465a1fd06ebc1f7d1cb3bc1df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:40:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:40:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009"}
{"level":"debug","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:40:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:40:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cce9c738728acf36d8b96ddd7e3256d8a1b658465a1fd06ebc1f7d1cb3bc1df"}
{"level":"debug","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6129f6226246a6c2828e8fd48bd83f30166bd9ed08598c3f7d3c6df708195e40","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009"}
{"level":"info","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6129f6226246a6c2828e8fd48bd83f30166bd9ed08598c3f7d3c6df708195e40"}
{"level":"debug","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8452f1126fe2c3341b7a3c8e08816c3da4f8722a747644f69bd96a0957bfbbe1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:40:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:40:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8452f1126fe2c3341b7a3c8e08816c3da4f8722a747644f69bd96a0957bfbbe1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8452f1126fe2c3341b7a3c8e08816c3da4f8722a747644f69bd96a0957bfbbe1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6710bf935467d8c1812fb60074eddc1315dc3f0954a592d8ad695f78e468f3eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8452f1126fe2c3341b7a3c8e08816c3da4f8722a747644f69bd96a0957bfbbe1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8452f1126fe2c3341b7a3c8e08816c3da4f8722a747644f69bd96a0957bfbbe1"}
{"level":"debug","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5bdd616101d3a7e08bfb7a69ed6c83a920fae759971353e487f783aa60ec75e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8452f1126fe2c3341b7a3c8e08816c3da4f8722a747644f69bd96a0957bfbbe1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:40:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:40:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8452f1126fe2c3341b7a3c8e08816c3da4f8722a747644f69bd96a0957bfbbe1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6710bf935467d8c1812fb60074eddc1315dc3f0954a592d8ad695f78e468f3eb"}
{"level":"info","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8452f1126fe2c3341b7a3c8e08816c3da4f8722a747644f69bd96a0957bfbbe1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b88b60f45ea96b3beb818162f69f719c2501d48d2d98fcc8c05845618e3c0338","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8452f1126fe2c3341b7a3c8e08816c3da4f8722a747644f69bd96a0957bfbbe1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:40:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:40:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8452f1126fe2c3341b7a3c8e08816c3da4f8722a747644f69bd96a0957bfbbe1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8452f1126fe2c3341b7a3c8e08816c3da4f8722a747644f69bd96a0957bfbbe1"}
{"level":"debug","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8452f1126fe2c3341b7a3c8e08816c3da4f8722a747644f69bd96a0957bfbbe1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:40:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:40:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8452f1126fe2c3341b7a3c8e08816c3da4f8722a747644f69bd96a0957bfbbe1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8452f1126fe2c3341b7a3c8e08816c3da4f8722a747644f69bd96a0957bfbbe1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8452f1126fe2c3341b7a3c8e08816c3da4f8722a747644f69bd96a0957bfbbe1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b242e49cc721878f20d85df829bb37d9177a14557ebe764a27e084e8d8b21fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a252eb011603ed6137e2af41de00be6f860e294a55f59f2ef017cfe69e6a13c0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5bdd616101d3a7e08bfb7a69ed6c83a920fae759971353e487f783aa60ec75e"}
{"level":"debug","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a84b7b77e2f3f1c38bef7e4b463621caaabf26ae665bc4043caab1b018ed855","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acf3120e7aff4bb58a5c737a0e8c225e1fb303be2e7709a99e411e0369342615","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b88b60f45ea96b3beb818162f69f719c2501d48d2d98fcc8c05845618e3c0338"}
{"level":"debug","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7fb1e3ddd0c333f9150428c0fa28178855a9e31f1610fa52fa51737157a4e84","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8452f1126fe2c3341b7a3c8e08816c3da4f8722a747644f69bd96a0957bfbbe1"}
{"level":"debug","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed0ab7596e2f38f9b71bd5bd87a86ce829934d38e969ab3ddcbc5b0c8908c163","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b242e49cc721878f20d85df829bb37d9177a14557ebe764a27e084e8d8b21fa"}
{"level":"debug","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c9d61f1b082de375e18d1f9e06bc7ba43cbef8c82c7f355f97f0838179c3723","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a252eb011603ed6137e2af41de00be6f860e294a55f59f2ef017cfe69e6a13c0"}
{"level":"debug","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ded2e8e31ee92dea9a2a0906a754ed703e7872594602ca4e15eca6fdbfd26658","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bff73ce69a6e02180abf0e316914e66ce069978b83b27dce2d7591af01af382c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a84b7b77e2f3f1c38bef7e4b463621caaabf26ae665bc4043caab1b018ed855"}
{"level":"debug","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1601a1d8a54caf21e35ff5c0ac3442b16c40d91274a3da32202f01268bb4e4af","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acf3120e7aff4bb58a5c737a0e8c225e1fb303be2e7709a99e411e0369342615"}
{"level":"debug","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59d9025f2f8c3ddf938e7b7ad4aff7c5a2c78c699c48a38b290f7a92bce9ea53","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7fb1e3ddd0c333f9150428c0fa28178855a9e31f1610fa52fa51737157a4e84"}
{"level":"info","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed0ab7596e2f38f9b71bd5bd87a86ce829934d38e969ab3ddcbc5b0c8908c163"}
{"level":"info","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c9d61f1b082de375e18d1f9e06bc7ba43cbef8c82c7f355f97f0838179c3723"}
{"level":"info","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ded2e8e31ee92dea9a2a0906a754ed703e7872594602ca4e15eca6fdbfd26658"}
{"level":"info","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bff73ce69a6e02180abf0e316914e66ce069978b83b27dce2d7591af01af382c"}
{"level":"info","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1601a1d8a54caf21e35ff5c0ac3442b16c40d91274a3da32202f01268bb4e4af"}
{"level":"info","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59d9025f2f8c3ddf938e7b7ad4aff7c5a2c78c699c48a38b290f7a92bce9ea53"}
{"level":"debug","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dde462ee0ed19ab91fea531e70d975cbbf4d37ef7b3668f9aa2b9b19f136254c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:40:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:40:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dde462ee0ed19ab91fea531e70d975cbbf4d37ef7b3668f9aa2b9b19f136254c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dde462ee0ed19ab91fea531e70d975cbbf4d37ef7b3668f9aa2b9b19f136254c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63ef80d805d28d2a0f989569a88e2aff2f518b4f2d1576a1a99f2cc5e9fa8598","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dde462ee0ed19ab91fea531e70d975cbbf4d37ef7b3668f9aa2b9b19f136254c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dde462ee0ed19ab91fea531e70d975cbbf4d37ef7b3668f9aa2b9b19f136254c"}
{"level":"debug","ts":"2026-07-08T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dde462ee0ed19ab91fea531e70d975cbbf4d37ef7b3668f9aa2b9b19f136254c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:40:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:40:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dde462ee0ed19ab91fea531e70d975cbbf4d37ef7b3668f9aa2b9b19f136254c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:40:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63ef80d805d28d2a0f989569a88e2aff2f518b4f2d1576a1a99f2cc5e9fa8598"}
{"level":"info","ts":"2026-07-08T23:40:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dde462ee0ed19ab91fea531e70d975cbbf4d37ef7b3668f9aa2b9b19f136254c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dde462ee0ed19ab91fea531e70d975cbbf4d37ef7b3668f9aa2b9b19f136254c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:40:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:40:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:40:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dde462ee0ed19ab91fea531e70d975cbbf4d37ef7b3668f9aa2b9b19f136254c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:40:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dde462ee0ed19ab91fea531e70d975cbbf4d37ef7b3668f9aa2b9b19f136254c"}
{"level":"debug","ts":"2026-07-08T23:40:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dde462ee0ed19ab91fea531e70d975cbbf4d37ef7b3668f9aa2b9b19f136254c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dde462ee0ed19ab91fea531e70d975cbbf4d37ef7b3668f9aa2b9b19f136254c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:40:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dde462ee0ed19ab91fea531e70d975cbbf4d37ef7b3668f9aa2b9b19f136254c"}
{"level":"debug","ts":"2026-07-08T23:40:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dde462ee0ed19ab91fea531e70d975cbbf4d37ef7b3668f9aa2b9b19f136254c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07be2283df4ace392f01165483752186898f1dca068cb3edf53b2db64dcaf20d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:40:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dde462ee0ed19ab91fea531e70d975cbbf4d37ef7b3668f9aa2b9b19f136254c"}
{"level":"debug","ts":"2026-07-08T23:40:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5882ffb4a614cb907375f0afdab27206b43e76fbd644d904687af36194dc0fad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dde462ee0ed19ab91fea531e70d975cbbf4d37ef7b3668f9aa2b9b19f136254c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:40:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:40:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dde462ee0ed19ab91fea531e70d975cbbf4d37ef7b3668f9aa2b9b19f136254c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:40:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07be2283df4ace392f01165483752186898f1dca068cb3edf53b2db64dcaf20d"}
{"level":"info","ts":"2026-07-08T23:40:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dde462ee0ed19ab91fea531e70d975cbbf4d37ef7b3668f9aa2b9b19f136254c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:40:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dde462ee0ed19ab91fea531e70d975cbbf4d37ef7b3668f9aa2b9b19f136254c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:40:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5882ffb4a614cb907375f0afdab27206b43e76fbd644d904687af36194dc0fad"}
{"level":"info","ts":"2026-07-08T23:40:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dde462ee0ed19ab91fea531e70d975cbbf4d37ef7b3668f9aa2b9b19f136254c"}
{"level":"info","ts":"2026-07-08T23:40:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b5d3e52f-0d5d-4deb-934f-cce4a846893c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:43772","PortSpecifier":{"PortValue":43772}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b5d3e52f-0d5d-4deb-934f-cce4a846893c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-45d83d.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T23:40:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b5d3e52f-0d5d-4deb-934f-cce4a846893c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:43772","PortSpecifier":{"PortValue":43772}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783554038,"nanos":146228566},"http":{"id":"b5d3e52f-0d5d-4deb-934f-cce4a846893c","method":"POST","headers":{":authority":"e2e-shared-a-45d83d.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:40:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b5d3e52f-0d5d-4deb-934f-cce4a846893c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-08T23:40:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b5d3e52f-0d5d-4deb-934f-cce4a846893c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4eb469ed-bde9-4b74-b02d-b674c54e5440","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=bc060732-2068-4968-bbfb-220d44e07ffa"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb0dcd2f307a"]}}
{"level":"debug","ts":"2026-07-08T23:40:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b5d3e52f-0d5d-4deb-934f-cce4a846893c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb0dcd2f307a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=bc060732-2068-4968-bbfb-220d44e07ffa"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4eb469ed-bde9-4b74-b02d-b674c54e5440","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"07be2283df4ace392f01165483752186898f1dca068cb3edf53b2db64dcaf20d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-45d83d.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:40:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5d3e52f-0d5d-4deb-934f-cce4a846893c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:40:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5d3e52f-0d5d-4deb-934f-cce4a846893c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:40:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5d3e52f-0d5d-4deb-934f-cce4a846893c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-45d83d/sub-test-model-45d83d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:40:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b5d3e52f-0d5d-4deb-934f-cce4a846893c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-08T23:40:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b5d3e52f-0d5d-4deb-934f-cce4a846893c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-08T23:40:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b5d3e52f-0d5d-4deb-934f-cce4a846893c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-08T23:40:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b5d3e52f-0d5d-4deb-934f-cce4a846893c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T23:40:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b5d3e52f-0d5d-4deb-934f-cce4a846893c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T23:40:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1942d787-314d-4f18-af84-7840744671f0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:52752","PortSpecifier":{"PortValue":52752}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1942d787-314d-4f18-af84-7840744671f0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-59ce67.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T23:40:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1942d787-314d-4f18-af84-7840744671f0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:52752","PortSpecifier":{"PortValue":52752}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783554038,"nanos":184369939},"http":{"id":"1942d787-314d-4f18-af84-7840744671f0","method":"POST","headers":{":authority":"e2e-shared-b-59ce67.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:40:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1942d787-314d-4f18-af84-7840744671f0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-08T23:40:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1942d787-314d-4f18-af84-7840744671f0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4eb469ed-bde9-4b74-b02d-b674c54e5440","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=bc060732-2068-4968-bbfb-220d44e07ffa"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb0dcd2f307a"]}}
{"level":"debug","ts":"2026-07-08T23:40:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1942d787-314d-4f18-af84-7840744671f0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb0dcd2f307a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=bc060732-2068-4968-bbfb-220d44e07ffa"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4eb469ed-bde9-4b74-b02d-b674c54e5440","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0c9d61f1b082de375e18d1f9e06bc7ba43cbef8c82c7f355f97f0838179c3723"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-59ce67.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:40:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1942d787-314d-4f18-af84-7840744671f0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:40:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1942d787-314d-4f18-af84-7840744671f0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:40:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1942d787-314d-4f18-af84-7840744671f0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-59ce67/sub-test-model-59ce67\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:40:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1942d787-314d-4f18-af84-7840744671f0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-08T23:40:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1942d787-314d-4f18-af84-7840744671f0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T23:40:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1942d787-314d-4f18-af84-7840744671f0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-08T23:40:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1942d787-314d-4f18-af84-7840744671f0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T23:40:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1942d787-314d-4f18-af84-7840744671f0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T23:40:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"235949e6-4c22-4ba3-a14c-87e31a924235","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:43782","PortSpecifier":{"PortValue":43782}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"235949e6-4c22-4ba3-a14c-87e31a924235","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-45d83d.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T23:40:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"235949e6-4c22-4ba3-a14c-87e31a924235","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:43782","PortSpecifier":{"PortValue":43782}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783554038,"nanos":220794729},"http":{"id":"235949e6-4c22-4ba3-a14c-87e31a924235","method":"GET","headers":{":authority":"e2e-shared-a-45d83d.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:40:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"235949e6-4c22-4ba3-a14c-87e31a924235","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1VPA0ADG6XKdBGwHD_pQR0JLMcmNV0U6LviWYbt1V7io9rAWbWld3MkCeu2vH"}
{"level":"debug","ts":"2026-07-08T23:40:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"235949e6-4c22-4ba3-a14c-87e31a924235","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-45d83d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1VPA0ADG6XKdBGwHD_pQR0JLMcmNV0U6LviWYbt1V7io9rAWbWld3MkCeu2vH\"}"}
{"level":"debug","ts":"2026-07-08T23:40:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"235949e6-4c22-4ba3-a14c-87e31a924235","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-45d83d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1de731b4-28a3-47d1-a90e-22970655f74c","keyName":"e2e-sub-iso-14ee84","subscription":"e2e-a-only-a9de39","tenant":"e2e-shared-a-45d83d","userId":"1de731b4-28a3-47d1-a90e-22970655f74c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-08T23:40:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"235949e6-4c22-4ba3-a14c-87e31a924235","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:40:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"235949e6-4c22-4ba3-a14c-87e31a924235","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:40:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"235949e6-4c22-4ba3-a14c-87e31a924235","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:40:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"235949e6-4c22-4ba3-a14c-87e31a924235","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-45d83d/sub-test-model-45d83d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:40:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"235949e6-4c22-4ba3-a14c-87e31a924235","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-08T23:40:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"235949e6-4c22-4ba3-a14c-87e31a924235","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-a9de39"}
{"level":"debug","ts":"2026-07-08T23:40:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"235949e6-4c22-4ba3-a14c-87e31a924235","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-08T23:40:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"235949e6-4c22-4ba3-a14c-87e31a924235","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-08T23:40:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"235949e6-4c22-4ba3-a14c-87e31a924235","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T23:40:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"235949e6-4c22-4ba3-a14c-87e31a924235","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T23:40:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"75031cf9-4af7-4177-8654-1f23299a3111","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:52764","PortSpecifier":{"PortValue":52764}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"75031cf9-4af7-4177-8654-1f23299a3111","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-59ce67.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T23:40:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"75031cf9-4af7-4177-8654-1f23299a3111","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:52764","PortSpecifier":{"PortValue":52764}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783554038,"nanos":265307227},"http":{"id":"75031cf9-4af7-4177-8654-1f23299a3111","method":"GET","headers":{":authority":"e2e-shared-b-59ce67.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:40:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"75031cf9-4af7-4177-8654-1f23299a3111","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-bOdH5Vmp1li4teCM_wQRmAUgIvf5pENOqDodhcenZ36fczliCSwqFPGfL0dI"}
{"level":"debug","ts":"2026-07-08T23:40:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"75031cf9-4af7-4177-8654-1f23299a3111","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-59ce67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-bOdH5Vmp1li4teCM_wQRmAUgIvf5pENOqDodhcenZ36fczliCSwqFPGfL0dI\"}"}
{"level":"debug","ts":"2026-07-08T23:40:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"75031cf9-4af7-4177-8654-1f23299a3111","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-59ce67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1ed7123d-c0cc-4883-8554-25a21b26621f","keyName":"e2e-sub-iso-278428","subscription":"e2e-b-only-a9de39","tenant":"e2e-shared-b-59ce67","userId":"1ed7123d-c0cc-4883-8554-25a21b26621f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-08T23:40:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"75031cf9-4af7-4177-8654-1f23299a3111","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:40:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75031cf9-4af7-4177-8654-1f23299a3111","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:40:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75031cf9-4af7-4177-8654-1f23299a3111","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:40:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75031cf9-4af7-4177-8654-1f23299a3111","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-59ce67/sub-test-model-59ce67\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:40:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"75031cf9-4af7-4177-8654-1f23299a3111","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-08T23:40:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"75031cf9-4af7-4177-8654-1f23299a3111","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T23:40:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"75031cf9-4af7-4177-8654-1f23299a3111","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-a9de39"}
{"level":"debug","ts":"2026-07-08T23:40:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"75031cf9-4af7-4177-8654-1f23299a3111","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-08T23:40:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"75031cf9-4af7-4177-8654-1f23299a3111","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T23:40:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"75031cf9-4af7-4177-8654-1f23299a3111","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T23:40:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"680db9cc-88fb-4dbf-8a6e-838424f87756","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:42090","PortSpecifier":{"PortValue":42090}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"680db9cc-88fb-4dbf-8a6e-838424f87756","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-45d83d.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T23:40:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"680db9cc-88fb-4dbf-8a6e-838424f87756","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:42090","PortSpecifier":{"PortValue":42090}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783554048,"nanos":107884576},"http":{"id":"680db9cc-88fb-4dbf-8a6e-838424f87756","method":"POST","headers":{":authority":"e2e-shared-a-45d83d.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:40:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"680db9cc-88fb-4dbf-8a6e-838424f87756","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-08T23:40:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"680db9cc-88fb-4dbf-8a6e-838424f87756","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4eb469ed-bde9-4b74-b02d-b674c54e5440","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=bc060732-2068-4968-bbfb-220d44e07ffa"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb0dcd2f307a"]}}
{"level":"debug","ts":"2026-07-08T23:40:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"680db9cc-88fb-4dbf-8a6e-838424f87756","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb0dcd2f307a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=bc060732-2068-4968-bbfb-220d44e07ffa"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4eb469ed-bde9-4b74-b02d-b674c54e5440","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"07be2283df4ace392f01165483752186898f1dca068cb3edf53b2db64dcaf20d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-45d83d.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:40:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"680db9cc-88fb-4dbf-8a6e-838424f87756","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:40:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"680db9cc-88fb-4dbf-8a6e-838424f87756","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:40:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"680db9cc-88fb-4dbf-8a6e-838424f87756","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-45d83d/sub-test-model-45d83d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:40:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"680db9cc-88fb-4dbf-8a6e-838424f87756","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-08T23:40:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"680db9cc-88fb-4dbf-8a6e-838424f87756","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T23:40:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"680db9cc-88fb-4dbf-8a6e-838424f87756","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-08T23:40:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"680db9cc-88fb-4dbf-8a6e-838424f87756","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T23:40:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"680db9cc-88fb-4dbf-8a6e-838424f87756","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T23:40:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ab18f03f-2d95-4563-a167-56b10e8e0628","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36564","PortSpecifier":{"PortValue":36564}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ab18f03f-2d95-4563-a167-56b10e8e0628","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-59ce67.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T23:40:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ab18f03f-2d95-4563-a167-56b10e8e0628","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36564","PortSpecifier":{"PortValue":36564}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783554048,"nanos":139534486},"http":{"id":"ab18f03f-2d95-4563-a167-56b10e8e0628","method":"POST","headers":{":authority":"e2e-shared-b-59ce67.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:40:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ab18f03f-2d95-4563-a167-56b10e8e0628","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-08T23:40:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ab18f03f-2d95-4563-a167-56b10e8e0628","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4eb469ed-bde9-4b74-b02d-b674c54e5440","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=bc060732-2068-4968-bbfb-220d44e07ffa"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb0dcd2f307a"]}}
{"level":"debug","ts":"2026-07-08T23:40:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ab18f03f-2d95-4563-a167-56b10e8e0628","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb0dcd2f307a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=bc060732-2068-4968-bbfb-220d44e07ffa"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4eb469ed-bde9-4b74-b02d-b674c54e5440","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0c9d61f1b082de375e18d1f9e06bc7ba43cbef8c82c7f355f97f0838179c3723"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-59ce67.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:40:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ab18f03f-2d95-4563-a167-56b10e8e0628","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:40:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ab18f03f-2d95-4563-a167-56b10e8e0628","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:40:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ab18f03f-2d95-4563-a167-56b10e8e0628","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-59ce67/sub-test-model-59ce67\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:40:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ab18f03f-2d95-4563-a167-56b10e8e0628","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-08T23:40:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ab18f03f-2d95-4563-a167-56b10e8e0628","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T23:40:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ab18f03f-2d95-4563-a167-56b10e8e0628","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-08T23:40:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ab18f03f-2d95-4563-a167-56b10e8e0628","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T23:40:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ab18f03f-2d95-4563-a167-56b10e8e0628","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T23:40:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ce40acbe-20a5-4252-89f3-42f5b7220771","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:42102","PortSpecifier":{"PortValue":42102}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ce40acbe-20a5-4252-89f3-42f5b7220771","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-45d83d.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T23:40:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ce40acbe-20a5-4252-89f3-42f5b7220771","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:42102","PortSpecifier":{"PortValue":42102}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783554048,"nanos":169717917},"http":{"id":"ce40acbe-20a5-4252-89f3-42f5b7220771","method":"POST","headers":{":authority":"e2e-shared-a-45d83d.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:40:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ce40acbe-20a5-4252-89f3-42f5b7220771","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ovpeQ7NqK0D2LMzm_1a3LbdNKUlNrAFd0J4INmPr9mGhSsvYj09dW9wtPNm4"}
{"level":"debug","ts":"2026-07-08T23:40:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ce40acbe-20a5-4252-89f3-42f5b7220771","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-45d83d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ovpeQ7NqK0D2LMzm_1a3LbdNKUlNrAFd0J4INmPr9mGhSsvYj09dW9wtPNm4\"}"}
{"level":"debug","ts":"2026-07-08T23:40:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ce40acbe-20a5-4252-89f3-42f5b7220771","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-45d83d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3033e382-f3c4-4769-bc3b-b8291fdfdeb0","keyName":"e2e-sub-iso-63a83a","subscription":"e2e-shared-sub-f5657d","tenant":"e2e-shared-a-45d83d","userId":"3033e382-f3c4-4769-bc3b-b8291fdfdeb0","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-08T23:40:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ce40acbe-20a5-4252-89f3-42f5b7220771","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:40:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce40acbe-20a5-4252-89f3-42f5b7220771","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:40:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce40acbe-20a5-4252-89f3-42f5b7220771","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:40:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce40acbe-20a5-4252-89f3-42f5b7220771","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-45d83d/sub-test-model-45d83d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:40:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ce40acbe-20a5-4252-89f3-42f5b7220771","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-08T23:40:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce40acbe-20a5-4252-89f3-42f5b7220771","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T23:40:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce40acbe-20a5-4252-89f3-42f5b7220771","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-f5657d"}
{"level":"debug","ts":"2026-07-08T23:40:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce40acbe-20a5-4252-89f3-42f5b7220771","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-08T23:40:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ce40acbe-20a5-4252-89f3-42f5b7220771","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T23:40:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ce40acbe-20a5-4252-89f3-42f5b7220771","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T23:40:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3374860f-597a-404b-8c6d-e1c3cf67a725","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36578","PortSpecifier":{"PortValue":36578}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3374860f-597a-404b-8c6d-e1c3cf67a725","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-59ce67.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T23:40:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3374860f-597a-404b-8c6d-e1c3cf67a725","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36578","PortSpecifier":{"PortValue":36578}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783554048,"nanos":205317474},"http":{"id":"3374860f-597a-404b-8c6d-e1c3cf67a725","method":"POST","headers":{":authority":"e2e-shared-b-59ce67.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:40:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3374860f-597a-404b-8c6d-e1c3cf67a725","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1AVJCeZyndozRtaGz_ZUnGcYtMQSAsZiiRXHLtzefVhJEfzbMukcSWjYIVonf"}
{"level":"debug","ts":"2026-07-08T23:40:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3374860f-597a-404b-8c6d-e1c3cf67a725","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-59ce67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1AVJCeZyndozRtaGz_ZUnGcYtMQSAsZiiRXHLtzefVhJEfzbMukcSWjYIVonf\"}"}
{"level":"debug","ts":"2026-07-08T23:40:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3374860f-597a-404b-8c6d-e1c3cf67a725","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-59ce67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3f433be9-fcdb-40bc-bb7e-1fa95d2eeae0","keyName":"e2e-sub-iso-c4f21a","subscription":"e2e-shared-sub-f5657d","tenant":"e2e-shared-b-59ce67","userId":"3f433be9-fcdb-40bc-bb7e-1fa95d2eeae0","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-08T23:40:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3374860f-597a-404b-8c6d-e1c3cf67a725","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:40:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3374860f-597a-404b-8c6d-e1c3cf67a725","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:40:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3374860f-597a-404b-8c6d-e1c3cf67a725","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:40:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3374860f-597a-404b-8c6d-e1c3cf67a725","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-59ce67/sub-test-model-59ce67\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:40:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3374860f-597a-404b-8c6d-e1c3cf67a725","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-08T23:40:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3374860f-597a-404b-8c6d-e1c3cf67a725","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T23:40:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3374860f-597a-404b-8c6d-e1c3cf67a725","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-08T23:40:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3374860f-597a-404b-8c6d-e1c3cf67a725","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-f5657d"}
{"level":"info","ts":"2026-07-08T23:40:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3374860f-597a-404b-8c6d-e1c3cf67a725","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T23:40:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3374860f-597a-404b-8c6d-e1c3cf67a725","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T23:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ded2e8e31ee92dea9a2a0906a754ed703e7872594602ca4e15eca6fdbfd26658"}
{"level":"info","ts":"2026-07-08T23:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8452f1126fe2c3341b7a3c8e08816c3da4f8722a747644f69bd96a0957bfbbe1"}
{"level":"info","ts":"2026-07-08T23:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0b242e49cc721878f20d85df829bb37d9177a14557ebe764a27e084e8d8b21fa"}
{"level":"info","ts":"2026-07-08T23:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5307d71f59acd04c2dedf472eec898c9a1af3dc6717e627fa380c4daa4d76009"}
{"level":"info","ts":"2026-07-08T23:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/acf3120e7aff4bb58a5c737a0e8c225e1fb303be2e7709a99e411e0369342615"}
{"level":"info","ts":"2026-07-08T23:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e919d8464b2f402888f75dce7fa2e0124bdeaca1d4d32c02ad7e79cd1c8ee391"}
{"level":"info","ts":"2026-07-08T23:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/59d9025f2f8c3ddf938e7b7ad4aff7c5a2c78c699c48a38b290f7a92bce9ea53"}
{"level":"info","ts":"2026-07-08T23:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c7fb1e3ddd0c333f9150428c0fa28178855a9e31f1610fa52fa51737157a4e84"}
{"level":"info","ts":"2026-07-08T23:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6710bf935467d8c1812fb60074eddc1315dc3f0954a592d8ad695f78e468f3eb"}
{"level":"info","ts":"2026-07-08T23:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3a84b7b77e2f3f1c38bef7e4b463621caaabf26ae665bc4043caab1b018ed855"}
{"level":"info","ts":"2026-07-08T23:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ed0ab7596e2f38f9b71bd5bd87a86ce829934d38e969ab3ddcbc5b0c8908c163"}
{"level":"info","ts":"2026-07-08T23:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6129f6226246a6c2828e8fd48bd83f30166bd9ed08598c3f7d3c6df708195e40"}
{"level":"info","ts":"2026-07-08T23:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b88b60f45ea96b3beb818162f69f719c2501d48d2d98fcc8c05845618e3c0338"}
{"level":"info","ts":"2026-07-08T23:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bff73ce69a6e02180abf0e316914e66ce069978b83b27dce2d7591af01af382c"}
{"level":"info","ts":"2026-07-08T23:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/69db5f7c625d9965b9f139e18b6dba2699f889f08153336b3d02afc57a956bc9"}
{"level":"info","ts":"2026-07-08T23:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9cce9c738728acf36d8b96ddd7e3256d8a1b658465a1fd06ebc1f7d1cb3bc1df"}
{"level":"debug","ts":"2026-07-08T23:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0887908f10bbd5a7e1ce63bd178e82dc4e33d4ae073f0c1a6c62b41618a9e85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:41:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:41:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0887908f10bbd5a7e1ce63bd178e82dc4e33d4ae073f0c1a6c62b41618a9e85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0887908f10bbd5a7e1ce63bd178e82dc4e33d4ae073f0c1a6c62b41618a9e85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:41:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:41:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0887908f10bbd5a7e1ce63bd178e82dc4e33d4ae073f0c1a6c62b41618a9e85"}
{"level":"info","ts":"2026-07-08T23:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0887908f10bbd5a7e1ce63bd178e82dc4e33d4ae073f0c1a6c62b41618a9e85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0887908f10bbd5a7e1ce63bd178e82dc4e33d4ae073f0c1a6c62b41618a9e85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:41:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:41:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-08T23:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e0887908f10bbd5a7e1ce63bd178e82dc4e33d4ae073f0c1a6c62b41618a9e85","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e0887908f10bbd5a7e1ce63bd178e82dc4e33d4ae073f0c1a6c62b41618a9e85\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-08T23:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0887908f10bbd5a7e1ce63bd178e82dc4e33d4ae073f0c1a6c62b41618a9e85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0887908f10bbd5a7e1ce63bd178e82dc4e33d4ae073f0c1a6c62b41618a9e85","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0887908f10bbd5a7e1ce63bd178e82dc4e33d4ae073f0c1a6c62b41618a9e85"}
{"level":"info","ts":"2026-07-08T23:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0887908f10bbd5a7e1ce63bd178e82dc4e33d4ae073f0c1a6c62b41618a9e85"}
{"level":"debug","ts":"2026-07-08T23:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0887908f10bbd5a7e1ce63bd178e82dc4e33d4ae073f0c1a6c62b41618a9e85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:41:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:41:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e0887908f10bbd5a7e1ce63bd178e82dc4e33d4ae073f0c1a6c62b41618a9e85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0887908f10bbd5a7e1ce63bd178e82dc4e33d4ae073f0c1a6c62b41618a9e85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0887908f10bbd5a7e1ce63bd178e82dc4e33d4ae073f0c1a6c62b41618a9e85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:41:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:41:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0887908f10bbd5a7e1ce63bd178e82dc4e33d4ae073f0c1a6c62b41618a9e85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0887908f10bbd5a7e1ce63bd178e82dc4e33d4ae073f0c1a6c62b41618a9e85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0887908f10bbd5a7e1ce63bd178e82dc4e33d4ae073f0c1a6c62b41618a9e85","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0887908f10bbd5a7e1ce63bd178e82dc4e33d4ae073f0c1a6c62b41618a9e85"}
{"level":"debug","ts":"2026-07-08T23:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0887908f10bbd5a7e1ce63bd178e82dc4e33d4ae073f0c1a6c62b41618a9e85","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0887908f10bbd5a7e1ce63bd178e82dc4e33d4ae073f0c1a6c62b41618a9e85"}
{"level":"debug","ts":"2026-07-08T23:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03a8277bbd142b81ff7ee19e8415b57002a36623527c44647e980815abf441b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:41:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:41:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03a8277bbd142b81ff7ee19e8415b57002a36623527c44647e980815abf441b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5acaa7325f7fc9c6247159f3a8542872303e03f3cdf334caa9e61e0a3d66dd71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:41:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:41:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03a8277bbd142b81ff7ee19e8415b57002a36623527c44647e980815abf441b0"}
{"level":"info","ts":"2026-07-08T23:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5acaa7325f7fc9c6247159f3a8542872303e03f3cdf334caa9e61e0a3d66dd71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0887908f10bbd5a7e1ce63bd178e82dc4e33d4ae073f0c1a6c62b41618a9e85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:41:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:41:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e0887908f10bbd5a7e1ce63bd178e82dc4e33d4ae073f0c1a6c62b41618a9e85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0887908f10bbd5a7e1ce63bd178e82dc4e33d4ae073f0c1a6c62b41618a9e85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03a8277bbd142b81ff7ee19e8415b57002a36623527c44647e980815abf441b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:41:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:41:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["03a8277bbd142b81ff7ee19e8415b57002a36623527c44647e980815abf441b0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5acaa7325f7fc9c6247159f3a8542872303e03f3cdf334caa9e61e0a3d66dd71"}
{"level":"info","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03a8277bbd142b81ff7ee19e8415b57002a36623527c44647e980815abf441b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5acaa7325f7fc9c6247159f3a8542872303e03f3cdf334caa9e61e0a3d66dd71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:41:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:41:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5acaa7325f7fc9c6247159f3a8542872303e03f3cdf334caa9e61e0a3d66dd71"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03a8277bbd142b81ff7ee19e8415b57002a36623527c44647e980815abf441b0"}
{"level":"info","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5acaa7325f7fc9c6247159f3a8542872303e03f3cdf334caa9e61e0a3d66dd71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0887908f10bbd5a7e1ce63bd178e82dc4e33d4ae073f0c1a6c62b41618a9e85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03a8277bbd142b81ff7ee19e8415b57002a36623527c44647e980815abf441b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5acaa7325f7fc9c6247159f3a8542872303e03f3cdf334caa9e61e0a3d66dd71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:41:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:41:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5acaa7325f7fc9c6247159f3a8542872303e03f3cdf334caa9e61e0a3d66dd71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5acaa7325f7fc9c6247159f3a8542872303e03f3cdf334caa9e61e0a3d66dd71","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5acaa7325f7fc9c6247159f3a8542872303e03f3cdf334caa9e61e0a3d66dd71"}
{"level":"debug","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5acaa7325f7fc9c6247159f3a8542872303e03f3cdf334caa9e61e0a3d66dd71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:41:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:41:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5acaa7325f7fc9c6247159f3a8542872303e03f3cdf334caa9e61e0a3d66dd71"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5acaa7325f7fc9c6247159f3a8542872303e03f3cdf334caa9e61e0a3d66dd71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab0816ee41a84838e5e56d07a5fb225c1e375da70aab564c90fdfb247dde1b33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:41:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:41:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0887908f10bbd5a7e1ce63bd178e82dc4e33d4ae073f0c1a6c62b41618a9e85"}
{"level":"info","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab0816ee41a84838e5e56d07a5fb225c1e375da70aab564c90fdfb247dde1b33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5acaa7325f7fc9c6247159f3a8542872303e03f3cdf334caa9e61e0a3d66dd71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab0816ee41a84838e5e56d07a5fb225c1e375da70aab564c90fdfb247dde1b33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab0816ee41a84838e5e56d07a5fb225c1e375da70aab564c90fdfb247dde1b33","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03a8277bbd142b81ff7ee19e8415b57002a36623527c44647e980815abf441b0"}
{"level":"debug","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab0816ee41a84838e5e56d07a5fb225c1e375da70aab564c90fdfb247dde1b33","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5acaa7325f7fc9c6247159f3a8542872303e03f3cdf334caa9e61e0a3d66dd71"}
{"level":"info","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab0816ee41a84838e5e56d07a5fb225c1e375da70aab564c90fdfb247dde1b33"}
{"level":"debug","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab0816ee41a84838e5e56d07a5fb225c1e375da70aab564c90fdfb247dde1b33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:41:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:41:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab0816ee41a84838e5e56d07a5fb225c1e375da70aab564c90fdfb247dde1b33"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab0816ee41a84838e5e56d07a5fb225c1e375da70aab564c90fdfb247dde1b33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab0816ee41a84838e5e56d07a5fb225c1e375da70aab564c90fdfb247dde1b33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:41:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:41:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab0816ee41a84838e5e56d07a5fb225c1e375da70aab564c90fdfb247dde1b33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6354968028d25ce3261593b21a10c97711e5cd3e30750401e280d7b53501895","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:41:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:41:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab0816ee41a84838e5e56d07a5fb225c1e375da70aab564c90fdfb247dde1b33"}
{"level":"info","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6354968028d25ce3261593b21a10c97711e5cd3e30750401e280d7b53501895","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab0816ee41a84838e5e56d07a5fb225c1e375da70aab564c90fdfb247dde1b33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:41:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:41:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab0816ee41a84838e5e56d07a5fb225c1e375da70aab564c90fdfb247dde1b33"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab0816ee41a84838e5e56d07a5fb225c1e375da70aab564c90fdfb247dde1b33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6354968028d25ce3261593b21a10c97711e5cd3e30750401e280d7b53501895","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:41:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:41:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6354968028d25ce3261593b21a10c97711e5cd3e30750401e280d7b53501895"}
{"level":"info","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6354968028d25ce3261593b21a10c97711e5cd3e30750401e280d7b53501895","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab0816ee41a84838e5e56d07a5fb225c1e375da70aab564c90fdfb247dde1b33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:41:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:41:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab0816ee41a84838e5e56d07a5fb225c1e375da70aab564c90fdfb247dde1b33"}
{"level":"info","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab0816ee41a84838e5e56d07a5fb225c1e375da70aab564c90fdfb247dde1b33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6354968028d25ce3261593b21a10c97711e5cd3e30750401e280d7b53501895","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab0816ee41a84838e5e56d07a5fb225c1e375da70aab564c90fdfb247dde1b33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:41:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:41:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab0816ee41a84838e5e56d07a5fb225c1e375da70aab564c90fdfb247dde1b33"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab0816ee41a84838e5e56d07a5fb225c1e375da70aab564c90fdfb247dde1b33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab0816ee41a84838e5e56d07a5fb225c1e375da70aab564c90fdfb247dde1b33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:41:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:41:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab0816ee41a84838e5e56d07a5fb225c1e375da70aab564c90fdfb247dde1b33"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ab0816ee41a84838e5e56d07a5fb225c1e375da70aab564c90fdfb247dde1b33","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ab0816ee41a84838e5e56d07a5fb225c1e375da70aab564c90fdfb247dde1b33\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6354968028d25ce3261593b21a10c97711e5cd3e30750401e280d7b53501895","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab0816ee41a84838e5e56d07a5fb225c1e375da70aab564c90fdfb247dde1b33","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6354968028d25ce3261593b21a10c97711e5cd3e30750401e280d7b53501895"}
{"level":"debug","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab0816ee41a84838e5e56d07a5fb225c1e375da70aab564c90fdfb247dde1b33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:41:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:41:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab0816ee41a84838e5e56d07a5fb225c1e375da70aab564c90fdfb247dde1b33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3af6a5bc18b6abc5811db739d950e9dc17b79c1244fea243a629790b5e11e25e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:41:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:41:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab0816ee41a84838e5e56d07a5fb225c1e375da70aab564c90fdfb247dde1b33"}
{"level":"info","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3af6a5bc18b6abc5811db739d950e9dc17b79c1244fea243a629790b5e11e25e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab0816ee41a84838e5e56d07a5fb225c1e375da70aab564c90fdfb247dde1b33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:41:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:41:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab0816ee41a84838e5e56d07a5fb225c1e375da70aab564c90fdfb247dde1b33"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab0816ee41a84838e5e56d07a5fb225c1e375da70aab564c90fdfb247dde1b33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e257f771226dda2f714bd1c4753c9d128d40760940241b81e650773df0fb2410","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:41:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:41:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3af6a5bc18b6abc5811db739d950e9dc17b79c1244fea243a629790b5e11e25e"}
{"level":"info","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e257f771226dda2f714bd1c4753c9d128d40760940241b81e650773df0fb2410","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3af6a5bc18b6abc5811db739d950e9dc17b79c1244fea243a629790b5e11e25e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:41:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:41:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3af6a5bc18b6abc5811db739d950e9dc17b79c1244fea243a629790b5e11e25e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3af6a5bc18b6abc5811db739d950e9dc17b79c1244fea243a629790b5e11e25e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6354968028d25ce3261593b21a10c97711e5cd3e30750401e280d7b53501895","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:41:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:41:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6354968028d25ce3261593b21a10c97711e5cd3e30750401e280d7b53501895"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6354968028d25ce3261593b21a10c97711e5cd3e30750401e280d7b53501895","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab0816ee41a84838e5e56d07a5fb225c1e375da70aab564c90fdfb247dde1b33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:41:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:41:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab0816ee41a84838e5e56d07a5fb225c1e375da70aab564c90fdfb247dde1b33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e257f771226dda2f714bd1c4753c9d128d40760940241b81e650773df0fb2410","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3af6a5bc18b6abc5811db739d950e9dc17b79c1244fea243a629790b5e11e25e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6354968028d25ce3261593b21a10c97711e5cd3e30750401e280d7b53501895","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab0816ee41a84838e5e56d07a5fb225c1e375da70aab564c90fdfb247dde1b33"}
{"level":"debug","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab0816ee41a84838e5e56d07a5fb225c1e375da70aab564c90fdfb247dde1b33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:41:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:41:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab0816ee41a84838e5e56d07a5fb225c1e375da70aab564c90fdfb247dde1b33"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab0816ee41a84838e5e56d07a5fb225c1e375da70aab564c90fdfb247dde1b33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e257f771226dda2f714bd1c4753c9d128d40760940241b81e650773df0fb2410","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:41:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:41:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e257f771226dda2f714bd1c4753c9d128d40760940241b81e650773df0fb2410","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab0816ee41a84838e5e56d07a5fb225c1e375da70aab564c90fdfb247dde1b33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79344b3b5baad982afdf5b9c906c6b54126700f0761d7bcd8b761253e8e5e38b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:41:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:41:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e257f771226dda2f714bd1c4753c9d128d40760940241b81e650773df0fb2410"}
{"level":"info","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79344b3b5baad982afdf5b9c906c6b54126700f0761d7bcd8b761253e8e5e38b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e257f771226dda2f714bd1c4753c9d128d40760940241b81e650773df0fb2410","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:41:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:41:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e257f771226dda2f714bd1c4753c9d128d40760940241b81e650773df0fb2410"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e257f771226dda2f714bd1c4753c9d128d40760940241b81e650773df0fb2410","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79344b3b5baad982afdf5b9c906c6b54126700f0761d7bcd8b761253e8e5e38b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e257f771226dda2f714bd1c4753c9d128d40760940241b81e650773df0fb2410","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:41:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:41:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e257f771226dda2f714bd1c4753c9d128d40760940241b81e650773df0fb2410"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e257f771226dda2f714bd1c4753c9d128d40760940241b81e650773df0fb2410","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e257f771226dda2f714bd1c4753c9d128d40760940241b81e650773df0fb2410\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e257f771226dda2f714bd1c4753c9d128d40760940241b81e650773df0fb2410","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3af6a5bc18b6abc5811db739d950e9dc17b79c1244fea243a629790b5e11e25e"}
{"level":"debug","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79344b3b5baad982afdf5b9c906c6b54126700f0761d7bcd8b761253e8e5e38b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e257f771226dda2f714bd1c4753c9d128d40760940241b81e650773df0fb2410","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79344b3b5baad982afdf5b9c906c6b54126700f0761d7bcd8b761253e8e5e38b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6354968028d25ce3261593b21a10c97711e5cd3e30750401e280d7b53501895"}
{"level":"info","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab0816ee41a84838e5e56d07a5fb225c1e375da70aab564c90fdfb247dde1b33"}
{"level":"debug","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79344b3b5baad982afdf5b9c906c6b54126700f0761d7bcd8b761253e8e5e38b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:41:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:41:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79344b3b5baad982afdf5b9c906c6b54126700f0761d7bcd8b761253e8e5e38b"}
{"level":"info","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79344b3b5baad982afdf5b9c906c6b54126700f0761d7bcd8b761253e8e5e38b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79344b3b5baad982afdf5b9c906c6b54126700f0761d7bcd8b761253e8e5e38b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:41:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:41:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["79344b3b5baad982afdf5b9c906c6b54126700f0761d7bcd8b761253e8e5e38b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e257f771226dda2f714bd1c4753c9d128d40760940241b81e650773df0fb2410"}
{"level":"info","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79344b3b5baad982afdf5b9c906c6b54126700f0761d7bcd8b761253e8e5e38b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79344b3b5baad982afdf5b9c906c6b54126700f0761d7bcd8b761253e8e5e38b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:41:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:41:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79344b3b5baad982afdf5b9c906c6b54126700f0761d7bcd8b761253e8e5e38b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79344b3b5baad982afdf5b9c906c6b54126700f0761d7bcd8b761253e8e5e38b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79344b3b5baad982afdf5b9c906c6b54126700f0761d7bcd8b761253e8e5e38b"}
{"level":"debug","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79344b3b5baad982afdf5b9c906c6b54126700f0761d7bcd8b761253e8e5e38b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79344b3b5baad982afdf5b9c906c6b54126700f0761d7bcd8b761253e8e5e38b"}
{"level":"debug","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79344b3b5baad982afdf5b9c906c6b54126700f0761d7bcd8b761253e8e5e38b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:41:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:41:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["79344b3b5baad982afdf5b9c906c6b54126700f0761d7bcd8b761253e8e5e38b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79344b3b5baad982afdf5b9c906c6b54126700f0761d7bcd8b761253e8e5e38b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79344b3b5baad982afdf5b9c906c6b54126700f0761d7bcd8b761253e8e5e38b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79344b3b5baad982afdf5b9c906c6b54126700f0761d7bcd8b761253e8e5e38b"}
{"level":"debug","ts":"2026-07-08T23:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70373a653414e549cce4b69f67f8cf91f762607de4a30241b43a9f60152c3a83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:41:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:41:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70373a653414e549cce4b69f67f8cf91f762607de4a30241b43a9f60152c3a83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70373a653414e549cce4b69f67f8cf91f762607de4a30241b43a9f60152c3a83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70373a653414e549cce4b69f67f8cf91f762607de4a30241b43a9f60152c3a83","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70373a653414e549cce4b69f67f8cf91f762607de4a30241b43a9f60152c3a83"}
{"level":"debug","ts":"2026-07-08T23:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70373a653414e549cce4b69f67f8cf91f762607de4a30241b43a9f60152c3a83","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70373a653414e549cce4b69f67f8cf91f762607de4a30241b43a9f60152c3a83"}
{"level":"debug","ts":"2026-07-08T23:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70373a653414e549cce4b69f67f8cf91f762607de4a30241b43a9f60152c3a83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:41:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:41:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70373a653414e549cce4b69f67f8cf91f762607de4a30241b43a9f60152c3a83"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70373a653414e549cce4b69f67f8cf91f762607de4a30241b43a9f60152c3a83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70373a653414e549cce4b69f67f8cf91f762607de4a30241b43a9f60152c3a83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:41:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:41:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70373a653414e549cce4b69f67f8cf91f762607de4a30241b43a9f60152c3a83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70373a653414e549cce4b69f67f8cf91f762607de4a30241b43a9f60152c3a83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70373a653414e549cce4b69f67f8cf91f762607de4a30241b43a9f60152c3a83","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70373a653414e549cce4b69f67f8cf91f762607de4a30241b43a9f60152c3a83"}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70373a653414e549cce4b69f67f8cf91f762607de4a30241b43a9f60152c3a83","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70373a653414e549cce4b69f67f8cf91f762607de4a30241b43a9f60152c3a83"}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70373a653414e549cce4b69f67f8cf91f762607de4a30241b43a9f60152c3a83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70373a653414e549cce4b69f67f8cf91f762607de4a30241b43a9f60152c3a83"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70373a653414e549cce4b69f67f8cf91f762607de4a30241b43a9f60152c3a83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2af1bb57a40ca9fdd07b53a31c88e11ac923324e0682a27f5ebd590fdec66253","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2af1bb57a40ca9fdd07b53a31c88e11ac923324e0682a27f5ebd590fdec66253","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70373a653414e549cce4b69f67f8cf91f762607de4a30241b43a9f60152c3a83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2af1bb57a40ca9fdd07b53a31c88e11ac923324e0682a27f5ebd590fdec66253","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2af1bb57a40ca9fdd07b53a31c88e11ac923324e0682a27f5ebd590fdec66253","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2af1bb57a40ca9fdd07b53a31c88e11ac923324e0682a27f5ebd590fdec66253"}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2af1bb57a40ca9fdd07b53a31c88e11ac923324e0682a27f5ebd590fdec66253","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2af1bb57a40ca9fdd07b53a31c88e11ac923324e0682a27f5ebd590fdec66253"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70373a653414e549cce4b69f67f8cf91f762607de4a30241b43a9f60152c3a83"}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2af1bb57a40ca9fdd07b53a31c88e11ac923324e0682a27f5ebd590fdec66253","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2af1bb57a40ca9fdd07b53a31c88e11ac923324e0682a27f5ebd590fdec66253","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2af1bb57a40ca9fdd07b53a31c88e11ac923324e0682a27f5ebd590fdec66253"}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2af1bb57a40ca9fdd07b53a31c88e11ac923324e0682a27f5ebd590fdec66253","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2af1bb57a40ca9fdd07b53a31c88e11ac923324e0682a27f5ebd590fdec66253","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2af1bb57a40ca9fdd07b53a31c88e11ac923324e0682a27f5ebd590fdec66253","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2af1bb57a40ca9fdd07b53a31c88e11ac923324e0682a27f5ebd590fdec66253"}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2af1bb57a40ca9fdd07b53a31c88e11ac923324e0682a27f5ebd590fdec66253","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2af1bb57a40ca9fdd07b53a31c88e11ac923324e0682a27f5ebd590fdec66253"}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2af1bb57a40ca9fdd07b53a31c88e11ac923324e0682a27f5ebd590fdec66253","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2af1bb57a40ca9fdd07b53a31c88e11ac923324e0682a27f5ebd590fdec66253"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2af1bb57a40ca9fdd07b53a31c88e11ac923324e0682a27f5ebd590fdec66253","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2af1bb57a40ca9fdd07b53a31c88e11ac923324e0682a27f5ebd590fdec66253","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2af1bb57a40ca9fdd07b53a31c88e11ac923324e0682a27f5ebd590fdec66253","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2af1bb57a40ca9fdd07b53a31c88e11ac923324e0682a27f5ebd590fdec66253","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2af1bb57a40ca9fdd07b53a31c88e11ac923324e0682a27f5ebd590fdec66253","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2af1bb57a40ca9fdd07b53a31c88e11ac923324e0682a27f5ebd590fdec66253"}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2af1bb57a40ca9fdd07b53a31c88e11ac923324e0682a27f5ebd590fdec66253","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2da2ed502f2d8882e29c00092ec183e9a44473ef911abb29941d1c7ac9639680","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2af1bb57a40ca9fdd07b53a31c88e11ac923324e0682a27f5ebd590fdec66253"}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2da2ed502f2d8882e29c00092ec183e9a44473ef911abb29941d1c7ac9639680","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2da2ed502f2d8882e29c00092ec183e9a44473ef911abb29941d1c7ac9639680","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2da2ed502f2d8882e29c00092ec183e9a44473ef911abb29941d1c7ac9639680"}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2da2ed502f2d8882e29c00092ec183e9a44473ef911abb29941d1c7ac9639680","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2da2ed502f2d8882e29c00092ec183e9a44473ef911abb29941d1c7ac9639680","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2da2ed502f2d8882e29c00092ec183e9a44473ef911abb29941d1c7ac9639680","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2da2ed502f2d8882e29c00092ec183e9a44473ef911abb29941d1c7ac9639680\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2af1bb57a40ca9fdd07b53a31c88e11ac923324e0682a27f5ebd590fdec66253","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2af1bb57a40ca9fdd07b53a31c88e11ac923324e0682a27f5ebd590fdec66253"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2da2ed502f2d8882e29c00092ec183e9a44473ef911abb29941d1c7ac9639680"}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2af1bb57a40ca9fdd07b53a31c88e11ac923324e0682a27f5ebd590fdec66253","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2da2ed502f2d8882e29c00092ec183e9a44473ef911abb29941d1c7ac9639680","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2af1bb57a40ca9fdd07b53a31c88e11ac923324e0682a27f5ebd590fdec66253","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2da2ed502f2d8882e29c00092ec183e9a44473ef911abb29941d1c7ac9639680"}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2af1bb57a40ca9fdd07b53a31c88e11ac923324e0682a27f5ebd590fdec66253"}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2da2ed502f2d8882e29c00092ec183e9a44473ef911abb29941d1c7ac9639680","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2da2ed502f2d8882e29c00092ec183e9a44473ef911abb29941d1c7ac9639680"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2da2ed502f2d8882e29c00092ec183e9a44473ef911abb29941d1c7ac9639680","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f0d4cf9b6a4ff9b0bfbad4bd6d6d7671a28d3f58fcfeb302c0d8c3302ca5942","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f0d4cf9b6a4ff9b0bfbad4bd6d6d7671a28d3f58fcfeb302c0d8c3302ca5942","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2da2ed502f2d8882e29c00092ec183e9a44473ef911abb29941d1c7ac9639680","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83d0341a1ddb594dad84fd601110c1904ebb6dd778cf81b40835db208b59c17c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f0d4cf9b6a4ff9b0bfbad4bd6d6d7671a28d3f58fcfeb302c0d8c3302ca5942"}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83d0341a1ddb594dad84fd601110c1904ebb6dd778cf81b40835db208b59c17c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f0d4cf9b6a4ff9b0bfbad4bd6d6d7671a28d3f58fcfeb302c0d8c3302ca5942","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f0d4cf9b6a4ff9b0bfbad4bd6d6d7671a28d3f58fcfeb302c0d8c3302ca5942"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2da2ed502f2d8882e29c00092ec183e9a44473ef911abb29941d1c7ac9639680"}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f0d4cf9b6a4ff9b0bfbad4bd6d6d7671a28d3f58fcfeb302c0d8c3302ca5942","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83d0341a1ddb594dad84fd601110c1904ebb6dd778cf81b40835db208b59c17c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83d0341a1ddb594dad84fd601110c1904ebb6dd778cf81b40835db208b59c17c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f0d4cf9b6a4ff9b0bfbad4bd6d6d7671a28d3f58fcfeb302c0d8c3302ca5942","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83d0341a1ddb594dad84fd601110c1904ebb6dd778cf81b40835db208b59c17c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83d0341a1ddb594dad84fd601110c1904ebb6dd778cf81b40835db208b59c17c"}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83d0341a1ddb594dad84fd601110c1904ebb6dd778cf81b40835db208b59c17c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83d0341a1ddb594dad84fd601110c1904ebb6dd778cf81b40835db208b59c17c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f0d4cf9b6a4ff9b0bfbad4bd6d6d7671a28d3f58fcfeb302c0d8c3302ca5942"}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83d0341a1ddb594dad84fd601110c1904ebb6dd778cf81b40835db208b59c17c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83d0341a1ddb594dad84fd601110c1904ebb6dd778cf81b40835db208b59c17c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83d0341a1ddb594dad84fd601110c1904ebb6dd778cf81b40835db208b59c17c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83d0341a1ddb594dad84fd601110c1904ebb6dd778cf81b40835db208b59c17c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83d0341a1ddb594dad84fd601110c1904ebb6dd778cf81b40835db208b59c17c"}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83d0341a1ddb594dad84fd601110c1904ebb6dd778cf81b40835db208b59c17c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83d0341a1ddb594dad84fd601110c1904ebb6dd778cf81b40835db208b59c17c"}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83d0341a1ddb594dad84fd601110c1904ebb6dd778cf81b40835db208b59c17c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83d0341a1ddb594dad84fd601110c1904ebb6dd778cf81b40835db208b59c17c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83d0341a1ddb594dad84fd601110c1904ebb6dd778cf81b40835db208b59c17c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83d0341a1ddb594dad84fd601110c1904ebb6dd778cf81b40835db208b59c17c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83d0341a1ddb594dad84fd601110c1904ebb6dd778cf81b40835db208b59c17c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83d0341a1ddb594dad84fd601110c1904ebb6dd778cf81b40835db208b59c17c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83d0341a1ddb594dad84fd601110c1904ebb6dd778cf81b40835db208b59c17c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83d0341a1ddb594dad84fd601110c1904ebb6dd778cf81b40835db208b59c17c"}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83d0341a1ddb594dad84fd601110c1904ebb6dd778cf81b40835db208b59c17c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83d0341a1ddb594dad84fd601110c1904ebb6dd778cf81b40835db208b59c17c"}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f070afbefdb5c8b6e8a60306f10b362a815eca346f5e34b6773b5d0c29eb0e72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f070afbefdb5c8b6e8a60306f10b362a815eca346f5e34b6773b5d0c29eb0e72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f070afbefdb5c8b6e8a60306f10b362a815eca346f5e34b6773b5d0c29eb0e72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f070afbefdb5c8b6e8a60306f10b362a815eca346f5e34b6773b5d0c29eb0e72","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f070afbefdb5c8b6e8a60306f10b362a815eca346f5e34b6773b5d0c29eb0e72"}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83d0341a1ddb594dad84fd601110c1904ebb6dd778cf81b40835db208b59c17c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83d0341a1ddb594dad84fd601110c1904ebb6dd778cf81b40835db208b59c17c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f070afbefdb5c8b6e8a60306f10b362a815eca346f5e34b6773b5d0c29eb0e72"}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83d0341a1ddb594dad84fd601110c1904ebb6dd778cf81b40835db208b59c17c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f070afbefdb5c8b6e8a60306f10b362a815eca346f5e34b6773b5d0c29eb0e72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f070afbefdb5c8b6e8a60306f10b362a815eca346f5e34b6773b5d0c29eb0e72"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f070afbefdb5c8b6e8a60306f10b362a815eca346f5e34b6773b5d0c29eb0e72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83d0341a1ddb594dad84fd601110c1904ebb6dd778cf81b40835db208b59c17c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83d0341a1ddb594dad84fd601110c1904ebb6dd778cf81b40835db208b59c17c"}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83d0341a1ddb594dad84fd601110c1904ebb6dd778cf81b40835db208b59c17c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f070afbefdb5c8b6e8a60306f10b362a815eca346f5e34b6773b5d0c29eb0e72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f070afbefdb5c8b6e8a60306f10b362a815eca346f5e34b6773b5d0c29eb0e72"}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f070afbefdb5c8b6e8a60306f10b362a815eca346f5e34b6773b5d0c29eb0e72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83d0341a1ddb594dad84fd601110c1904ebb6dd778cf81b40835db208b59c17c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f070afbefdb5c8b6e8a60306f10b362a815eca346f5e34b6773b5d0c29eb0e72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f070afbefdb5c8b6e8a60306f10b362a815eca346f5e34b6773b5d0c29eb0e72"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83d0341a1ddb594dad84fd601110c1904ebb6dd778cf81b40835db208b59c17c"}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f070afbefdb5c8b6e8a60306f10b362a815eca346f5e34b6773b5d0c29eb0e72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83d0341a1ddb594dad84fd601110c1904ebb6dd778cf81b40835db208b59c17c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83d0341a1ddb594dad84fd601110c1904ebb6dd778cf81b40835db208b59c17c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83d0341a1ddb594dad84fd601110c1904ebb6dd778cf81b40835db208b59c17c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a7bca8f128f79c8e2d205111142827fad0dd7adb3307db411bb174aa2386030","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f070afbefdb5c8b6e8a60306f10b362a815eca346f5e34b6773b5d0c29eb0e72"}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a7bca8f128f79c8e2d205111142827fad0dd7adb3307db411bb174aa2386030","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f070afbefdb5c8b6e8a60306f10b362a815eca346f5e34b6773b5d0c29eb0e72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83d0341a1ddb594dad84fd601110c1904ebb6dd778cf81b40835db208b59c17c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a7bca8f128f79c8e2d205111142827fad0dd7adb3307db411bb174aa2386030","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a7bca8f128f79c8e2d205111142827fad0dd7adb3307db411bb174aa2386030"}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a7bca8f128f79c8e2d205111142827fad0dd7adb3307db411bb174aa2386030","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a7bca8f128f79c8e2d205111142827fad0dd7adb3307db411bb174aa2386030","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1a7bca8f128f79c8e2d205111142827fad0dd7adb3307db411bb174aa2386030"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1a7bca8f128f79c8e2d205111142827fad0dd7adb3307db411bb174aa2386030","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1a7bca8f128f79c8e2d205111142827fad0dd7adb3307db411bb174aa2386030\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a7bca8f128f79c8e2d205111142827fad0dd7adb3307db411bb174aa2386030","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1a7bca8f128f79c8e2d205111142827fad0dd7adb3307db411bb174aa2386030"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a7bca8f128f79c8e2d205111142827fad0dd7adb3307db411bb174aa2386030","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a7bca8f128f79c8e2d205111142827fad0dd7adb3307db411bb174aa2386030","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1a7bca8f128f79c8e2d205111142827fad0dd7adb3307db411bb174aa2386030"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f070afbefdb5c8b6e8a60306f10b362a815eca346f5e34b6773b5d0c29eb0e72"}
{"level":"error","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1a7bca8f128f79c8e2d205111142827fad0dd7adb3307db411bb174aa2386030","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1a7bca8f128f79c8e2d205111142827fad0dd7adb3307db411bb174aa2386030\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a7bca8f128f79c8e2d205111142827fad0dd7adb3307db411bb174aa2386030","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28faedaca20c95dfd7172a4930886f91a07e8de9d350a55300245d4ceb236f22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28faedaca20c95dfd7172a4930886f91a07e8de9d350a55300245d4ceb236f22","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a7bca8f128f79c8e2d205111142827fad0dd7adb3307db411bb174aa2386030","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28faedaca20c95dfd7172a4930886f91a07e8de9d350a55300245d4ceb236f22","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28faedaca20c95dfd7172a4930886f91a07e8de9d350a55300245d4ceb236f22","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83d0341a1ddb594dad84fd601110c1904ebb6dd778cf81b40835db208b59c17c"}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28faedaca20c95dfd7172a4930886f91a07e8de9d350a55300245d4ceb236f22","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a7bca8f128f79c8e2d205111142827fad0dd7adb3307db411bb174aa2386030"}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28faedaca20c95dfd7172a4930886f91a07e8de9d350a55300245d4ceb236f22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28faedaca20c95dfd7172a4930886f91a07e8de9d350a55300245d4ceb236f22"}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28faedaca20c95dfd7172a4930886f91a07e8de9d350a55300245d4ceb236f22","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28faedaca20c95dfd7172a4930886f91a07e8de9d350a55300245d4ceb236f22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28faedaca20c95dfd7172a4930886f91a07e8de9d350a55300245d4ceb236f22"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28faedaca20c95dfd7172a4930886f91a07e8de9d350a55300245d4ceb236f22","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28faedaca20c95dfd7172a4930886f91a07e8de9d350a55300245d4ceb236f22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28faedaca20c95dfd7172a4930886f91a07e8de9d350a55300245d4ceb236f22"}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28faedaca20c95dfd7172a4930886f91a07e8de9d350a55300245d4ceb236f22","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28faedaca20c95dfd7172a4930886f91a07e8de9d350a55300245d4ceb236f22","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28faedaca20c95dfd7172a4930886f91a07e8de9d350a55300245d4ceb236f22","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28faedaca20c95dfd7172a4930886f91a07e8de9d350a55300245d4ceb236f22"}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28faedaca20c95dfd7172a4930886f91a07e8de9d350a55300245d4ceb236f22","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28faedaca20c95dfd7172a4930886f91a07e8de9d350a55300245d4ceb236f22"}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28faedaca20c95dfd7172a4930886f91a07e8de9d350a55300245d4ceb236f22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28faedaca20c95dfd7172a4930886f91a07e8de9d350a55300245d4ceb236f22"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28faedaca20c95dfd7172a4930886f91a07e8de9d350a55300245d4ceb236f22","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28faedaca20c95dfd7172a4930886f91a07e8de9d350a55300245d4ceb236f22","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28faedaca20c95dfd7172a4930886f91a07e8de9d350a55300245d4ceb236f22"}
{"level":"debug","ts":"2026-07-08T23:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a252eb011603ed6137e2af41de00be6f860e294a55f59f2ef017cfe69e6a13c0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a252eb011603ed6137e2af41de00be6f860e294a55f59f2ef017cfe69e6a13c0"}
{"level":"debug","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dde462ee0ed19ab91fea531e70d975cbbf4d37ef7b3668f9aa2b9b19f136254c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:42:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:42:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dde462ee0ed19ab91fea531e70d975cbbf4d37ef7b3668f9aa2b9b19f136254c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dde462ee0ed19ab91fea531e70d975cbbf4d37ef7b3668f9aa2b9b19f136254c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dde462ee0ed19ab91fea531e70d975cbbf4d37ef7b3668f9aa2b9b19f136254c"}
{"level":"debug","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dde462ee0ed19ab91fea531e70d975cbbf4d37ef7b3668f9aa2b9b19f136254c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dde462ee0ed19ab91fea531e70d975cbbf4d37ef7b3668f9aa2b9b19f136254c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dde462ee0ed19ab91fea531e70d975cbbf4d37ef7b3668f9aa2b9b19f136254c"}
{"level":"debug","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dde462ee0ed19ab91fea531e70d975cbbf4d37ef7b3668f9aa2b9b19f136254c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:42:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:42:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dde462ee0ed19ab91fea531e70d975cbbf4d37ef7b3668f9aa2b9b19f136254c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dde462ee0ed19ab91fea531e70d975cbbf4d37ef7b3668f9aa2b9b19f136254c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab0816ee41a84838e5e56d07a5fb225c1e375da70aab564c90fdfb247dde1b33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:42:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:42:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab0816ee41a84838e5e56d07a5fb225c1e375da70aab564c90fdfb247dde1b33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dde462ee0ed19ab91fea531e70d975cbbf4d37ef7b3668f9aa2b9b19f136254c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab0816ee41a84838e5e56d07a5fb225c1e375da70aab564c90fdfb247dde1b33","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab0816ee41a84838e5e56d07a5fb225c1e375da70aab564c90fdfb247dde1b33"}
{"level":"debug","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab0816ee41a84838e5e56d07a5fb225c1e375da70aab564c90fdfb247dde1b33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:42:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:42:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab0816ee41a84838e5e56d07a5fb225c1e375da70aab564c90fdfb247dde1b33"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab0816ee41a84838e5e56d07a5fb225c1e375da70aab564c90fdfb247dde1b33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab0816ee41a84838e5e56d07a5fb225c1e375da70aab564c90fdfb247dde1b33","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dde462ee0ed19ab91fea531e70d975cbbf4d37ef7b3668f9aa2b9b19f136254c"}
{"level":"info","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab0816ee41a84838e5e56d07a5fb225c1e375da70aab564c90fdfb247dde1b33"}
{"level":"debug","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2da2ed502f2d8882e29c00092ec183e9a44473ef911abb29941d1c7ac9639680","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:42:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:42:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2da2ed502f2d8882e29c00092ec183e9a44473ef911abb29941d1c7ac9639680","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2da2ed502f2d8882e29c00092ec183e9a44473ef911abb29941d1c7ac9639680","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2da2ed502f2d8882e29c00092ec183e9a44473ef911abb29941d1c7ac9639680"}
{"level":"debug","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2da2ed502f2d8882e29c00092ec183e9a44473ef911abb29941d1c7ac9639680","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2da2ed502f2d8882e29c00092ec183e9a44473ef911abb29941d1c7ac9639680","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2da2ed502f2d8882e29c00092ec183e9a44473ef911abb29941d1c7ac9639680"}
{"level":"debug","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2da2ed502f2d8882e29c00092ec183e9a44473ef911abb29941d1c7ac9639680","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:42:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:42:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2da2ed502f2d8882e29c00092ec183e9a44473ef911abb29941d1c7ac9639680"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2da2ed502f2d8882e29c00092ec183e9a44473ef911abb29941d1c7ac9639680","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07be2283df4ace392f01165483752186898f1dca068cb3edf53b2db64dcaf20d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:42:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:42:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07be2283df4ace392f01165483752186898f1dca068cb3edf53b2db64dcaf20d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2da2ed502f2d8882e29c00092ec183e9a44473ef911abb29941d1c7ac9639680","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07be2283df4ace392f01165483752186898f1dca068cb3edf53b2db64dcaf20d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07be2283df4ace392f01165483752186898f1dca068cb3edf53b2db64dcaf20d"}
{"level":"debug","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07be2283df4ace392f01165483752186898f1dca068cb3edf53b2db64dcaf20d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:42:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:42:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07be2283df4ace392f01165483752186898f1dca068cb3edf53b2db64dcaf20d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07be2283df4ace392f01165483752186898f1dca068cb3edf53b2db64dcaf20d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07be2283df4ace392f01165483752186898f1dca068cb3edf53b2db64dcaf20d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2da2ed502f2d8882e29c00092ec183e9a44473ef911abb29941d1c7ac9639680"}
{"level":"info","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07be2283df4ace392f01165483752186898f1dca068cb3edf53b2db64dcaf20d"}
{"level":"debug","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79344b3b5baad982afdf5b9c906c6b54126700f0761d7bcd8b761253e8e5e38b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:42:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:42:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79344b3b5baad982afdf5b9c906c6b54126700f0761d7bcd8b761253e8e5e38b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79344b3b5baad982afdf5b9c906c6b54126700f0761d7bcd8b761253e8e5e38b"}
{"level":"debug","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79344b3b5baad982afdf5b9c906c6b54126700f0761d7bcd8b761253e8e5e38b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79344b3b5baad982afdf5b9c906c6b54126700f0761d7bcd8b761253e8e5e38b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79344b3b5baad982afdf5b9c906c6b54126700f0761d7bcd8b761253e8e5e38b"}
{"level":"debug","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79344b3b5baad982afdf5b9c906c6b54126700f0761d7bcd8b761253e8e5e38b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:42:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:42:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["79344b3b5baad982afdf5b9c906c6b54126700f0761d7bcd8b761253e8e5e38b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79344b3b5baad982afdf5b9c906c6b54126700f0761d7bcd8b761253e8e5e38b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79344b3b5baad982afdf5b9c906c6b54126700f0761d7bcd8b761253e8e5e38b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:42:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:42:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79344b3b5baad982afdf5b9c906c6b54126700f0761d7bcd8b761253e8e5e38b"}
{"level":"info","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79344b3b5baad982afdf5b9c906c6b54126700f0761d7bcd8b761253e8e5e38b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70373a653414e549cce4b69f67f8cf91f762607de4a30241b43a9f60152c3a83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:42:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:42:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70373a653414e549cce4b69f67f8cf91f762607de4a30241b43a9f60152c3a83"}
{"level":"info","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70373a653414e549cce4b69f67f8cf91f762607de4a30241b43a9f60152c3a83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79344b3b5baad982afdf5b9c906c6b54126700f0761d7bcd8b761253e8e5e38b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f070afbefdb5c8b6e8a60306f10b362a815eca346f5e34b6773b5d0c29eb0e72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70373a653414e549cce4b69f67f8cf91f762607de4a30241b43a9f60152c3a83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:42:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:42:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70373a653414e549cce4b69f67f8cf91f762607de4a30241b43a9f60152c3a83"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70373a653414e549cce4b69f67f8cf91f762607de4a30241b43a9f60152c3a83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79344b3b5baad982afdf5b9c906c6b54126700f0761d7bcd8b761253e8e5e38b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70373a653414e549cce4b69f67f8cf91f762607de4a30241b43a9f60152c3a83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:42:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:42:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70373a653414e549cce4b69f67f8cf91f762607de4a30241b43a9f60152c3a83"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79344b3b5baad982afdf5b9c906c6b54126700f0761d7bcd8b761253e8e5e38b"}
{"level":"error","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"70373a653414e549cce4b69f67f8cf91f762607de4a30241b43a9f60152c3a83","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"70373a653414e549cce4b69f67f8cf91f762607de4a30241b43a9f60152c3a83\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70373a653414e549cce4b69f67f8cf91f762607de4a30241b43a9f60152c3a83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70373a653414e549cce4b69f67f8cf91f762607de4a30241b43a9f60152c3a83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79344b3b5baad982afdf5b9c906c6b54126700f0761d7bcd8b761253e8e5e38b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:42:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:42:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["79344b3b5baad982afdf5b9c906c6b54126700f0761d7bcd8b761253e8e5e38b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f070afbefdb5c8b6e8a60306f10b362a815eca346f5e34b6773b5d0c29eb0e72"}
{"level":"info","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79344b3b5baad982afdf5b9c906c6b54126700f0761d7bcd8b761253e8e5e38b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79344b3b5baad982afdf5b9c906c6b54126700f0761d7bcd8b761253e8e5e38b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1601a1d8a54caf21e35ff5c0ac3442b16c40d91274a3da32202f01268bb4e4af","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70373a653414e549cce4b69f67f8cf91f762607de4a30241b43a9f60152c3a83"}
{"level":"debug","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e257f771226dda2f714bd1c4753c9d128d40760940241b81e650773df0fb2410","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79344b3b5baad982afdf5b9c906c6b54126700f0761d7bcd8b761253e8e5e38b"}
{"level":"debug","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63ef80d805d28d2a0f989569a88e2aff2f518b4f2d1576a1a99f2cc5e9fa8598","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1601a1d8a54caf21e35ff5c0ac3442b16c40d91274a3da32202f01268bb4e4af"}
{"level":"debug","ts":"2026-07-08T23:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6354968028d25ce3261593b21a10c97711e5cd3e30750401e280d7b53501895","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e257f771226dda2f714bd1c4753c9d128d40760940241b81e650773df0fb2410"}
{"level":"info","ts":"2026-07-08T23:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63ef80d805d28d2a0f989569a88e2aff2f518b4f2d1576a1a99f2cc5e9fa8598"}
{"level":"debug","ts":"2026-07-08T23:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0887908f10bbd5a7e1ce63bd178e82dc4e33d4ae073f0c1a6c62b41618a9e85","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6354968028d25ce3261593b21a10c97711e5cd3e30750401e280d7b53501895"}
{"level":"debug","ts":"2026-07-08T23:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5882ffb4a614cb907375f0afdab27206b43e76fbd644d904687af36194dc0fad","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0887908f10bbd5a7e1ce63bd178e82dc4e33d4ae073f0c1a6c62b41618a9e85"}
{"level":"debug","ts":"2026-07-08T23:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2af1bb57a40ca9fdd07b53a31c88e11ac923324e0682a27f5ebd590fdec66253","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5882ffb4a614cb907375f0afdab27206b43e76fbd644d904687af36194dc0fad"}
{"level":"debug","ts":"2026-07-08T23:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83d0341a1ddb594dad84fd601110c1904ebb6dd778cf81b40835db208b59c17c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2af1bb57a40ca9fdd07b53a31c88e11ac923324e0682a27f5ebd590fdec66253"}
{"level":"info","ts":"2026-07-08T23:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83d0341a1ddb594dad84fd601110c1904ebb6dd778cf81b40835db208b59c17c"}
{"level":"debug","ts":"2026-07-08T23:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3af6a5bc18b6abc5811db739d950e9dc17b79c1244fea243a629790b5e11e25e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03a8277bbd142b81ff7ee19e8415b57002a36623527c44647e980815abf441b0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3af6a5bc18b6abc5811db739d950e9dc17b79c1244fea243a629790b5e11e25e"}
{"level":"debug","ts":"2026-07-08T23:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28faedaca20c95dfd7172a4930886f91a07e8de9d350a55300245d4ceb236f22","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03a8277bbd142b81ff7ee19e8415b57002a36623527c44647e980815abf441b0"}
{"level":"debug","ts":"2026-07-08T23:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f0d4cf9b6a4ff9b0bfbad4bd6d6d7671a28d3f58fcfeb302c0d8c3302ca5942","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28faedaca20c95dfd7172a4930886f91a07e8de9d350a55300245d4ceb236f22"}
{"level":"debug","ts":"2026-07-08T23:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5acaa7325f7fc9c6247159f3a8542872303e03f3cdf334caa9e61e0a3d66dd71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5bdd616101d3a7e08bfb7a69ed6c83a920fae759971353e487f783aa60ec75e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f0d4cf9b6a4ff9b0bfbad4bd6d6d7671a28d3f58fcfeb302c0d8c3302ca5942"}
{"level":"debug","ts":"2026-07-08T23:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a7bca8f128f79c8e2d205111142827fad0dd7adb3307db411bb174aa2386030","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5acaa7325f7fc9c6247159f3a8542872303e03f3cdf334caa9e61e0a3d66dd71"}
{"level":"debug","ts":"2026-07-08T23:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c9d61f1b082de375e18d1f9e06bc7ba43cbef8c82c7f355f97f0838179c3723","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5bdd616101d3a7e08bfb7a69ed6c83a920fae759971353e487f783aa60ec75e"}
{"level":"info","ts":"2026-07-08T23:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a7bca8f128f79c8e2d205111142827fad0dd7adb3307db411bb174aa2386030"}
{"level":"info","ts":"2026-07-08T23:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c9d61f1b082de375e18d1f9e06bc7ba43cbef8c82c7f355f97f0838179c3723"}
{"level":"info","ts":"2026-07-08T23:42:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ef12b5e8-8549-4374-86d7-18ee7e270ad2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36736","PortSpecifier":{"PortValue":36736}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ef12b5e8-8549-4374-86d7-18ee7e270ad2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-45d83d.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T23:42:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ef12b5e8-8549-4374-86d7-18ee7e270ad2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36736","PortSpecifier":{"PortValue":36736}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783554133,"nanos":885900566},"http":{"id":"ef12b5e8-8549-4374-86d7-18ee7e270ad2","method":"POST","headers":{":authority":"e2e-shared-a-45d83d.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:42:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ef12b5e8-8549-4374-86d7-18ee7e270ad2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-08T23:42:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ef12b5e8-8549-4374-86d7-18ee7e270ad2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4eb469ed-bde9-4b74-b02d-b674c54e5440","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=bc060732-2068-4968-bbfb-220d44e07ffa"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb0dcd2f307a"]}}
{"level":"debug","ts":"2026-07-08T23:42:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ef12b5e8-8549-4374-86d7-18ee7e270ad2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb0dcd2f307a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=bc060732-2068-4968-bbfb-220d44e07ffa"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4eb469ed-bde9-4b74-b02d-b674c54e5440","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"07be2283df4ace392f01165483752186898f1dca068cb3edf53b2db64dcaf20d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-45d83d.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:42:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef12b5e8-8549-4374-86d7-18ee7e270ad2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:42:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef12b5e8-8549-4374-86d7-18ee7e270ad2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:42:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef12b5e8-8549-4374-86d7-18ee7e270ad2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-45d83d/rate-test-model-45d83d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:42:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ef12b5e8-8549-4374-86d7-18ee7e270ad2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-08T23:42:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef12b5e8-8549-4374-86d7-18ee7e270ad2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T23:42:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef12b5e8-8549-4374-86d7-18ee7e270ad2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-08T23:42:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ef12b5e8-8549-4374-86d7-18ee7e270ad2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T23:42:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ef12b5e8-8549-4374-86d7-18ee7e270ad2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T23:42:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1f1abd5b-9a32-4f70-b747-0848d387f649","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:59450","PortSpecifier":{"PortValue":59450}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1f1abd5b-9a32-4f70-b747-0848d387f649","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-59ce67.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T23:42:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1f1abd5b-9a32-4f70-b747-0848d387f649","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:59450","PortSpecifier":{"PortValue":59450}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783554133,"nanos":925149369},"http":{"id":"1f1abd5b-9a32-4f70-b747-0848d387f649","method":"POST","headers":{":authority":"e2e-shared-b-59ce67.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:42:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1f1abd5b-9a32-4f70-b747-0848d387f649","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-08T23:42:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1f1abd5b-9a32-4f70-b747-0848d387f649","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4eb469ed-bde9-4b74-b02d-b674c54e5440","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=bc060732-2068-4968-bbfb-220d44e07ffa"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb0dcd2f307a"]}}
{"level":"debug","ts":"2026-07-08T23:42:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1f1abd5b-9a32-4f70-b747-0848d387f649","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb0dcd2f307a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=bc060732-2068-4968-bbfb-220d44e07ffa"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4eb469ed-bde9-4b74-b02d-b674c54e5440","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0c9d61f1b082de375e18d1f9e06bc7ba43cbef8c82c7f355f97f0838179c3723"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-59ce67.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:42:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f1abd5b-9a32-4f70-b747-0848d387f649","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:42:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f1abd5b-9a32-4f70-b747-0848d387f649","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:42:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f1abd5b-9a32-4f70-b747-0848d387f649","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-59ce67/rate-test-model-59ce67\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:42:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1f1abd5b-9a32-4f70-b747-0848d387f649","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-08T23:42:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f1abd5b-9a32-4f70-b747-0848d387f649","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-08T23:42:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f1abd5b-9a32-4f70-b747-0848d387f649","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-08T23:42:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1f1abd5b-9a32-4f70-b747-0848d387f649","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T23:42:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1f1abd5b-9a32-4f70-b747-0848d387f649","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T23:42:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e6a980e6-79ee-4370-9bbe-bc1dc8021a3f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36752","PortSpecifier":{"PortValue":36752}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e6a980e6-79ee-4370-9bbe-bc1dc8021a3f","method":"POST","path":"/ai-tenant-e2e-shared-a-45d83d/rate-test-model-45d83d/v1/completions","host":"e2e-shared-a-45d83d.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T23:42:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e6a980e6-79ee-4370-9bbe-bc1dc8021a3f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36752","PortSpecifier":{"PortValue":36752}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783554133,"nanos":968990344},"http":{"id":"e6a980e6-79ee-4370-9bbe-bc1dc8021a3f","method":"POST","headers":{":authority":"e2e-shared-a-45d83d.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-45d83d/rate-test-model-45d83d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:42:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e6a980e6-79ee-4370-9bbe-bc1dc8021a3f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-9UC1Hcb6SMrGpGRR_KBkfBdGMHsn41pLyUKc8ruZnDvSjp8HabYWqMR41DhR"}
{"level":"debug","ts":"2026-07-08T23:42:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e6a980e6-79ee-4370-9bbe-bc1dc8021a3f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-45d83d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-9UC1Hcb6SMrGpGRR_KBkfBdGMHsn41pLyUKc8ruZnDvSjp8HabYWqMR41DhR\"}"}
{"level":"debug","ts":"2026-07-08T23:42:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e6a980e6-79ee-4370-9bbe-bc1dc8021a3f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-45d83d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1b1c900e-4ea5-47f1-ab96-2385d2aa223a","keyName":"e2e-rate-a-430d56","subscription":"e2e-rate-iso-a-430d56","tenant":"e2e-shared-a-45d83d","userId":"1b1c900e-4ea5-47f1-ab96-2385d2aa223a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-08T23:42:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e6a980e6-79ee-4370-9bbe-bc1dc8021a3f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-45d83d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-45d83d/rate-test-model-45d83d\",\"requestedSubscription\":\"e2e-rate-iso-a-430d56\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-08T23:42:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e6a980e6-79ee-4370-9bbe-bc1dc8021a3f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-45d83d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-45d83d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-430d56","namespace":"ai-tenant-e2e-shared-a-45d83d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-08T23:42:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e6a980e6-79ee-4370-9bbe-bc1dc8021a3f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:42:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e6a980e6-79ee-4370-9bbe-bc1dc8021a3f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:42:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e6a980e6-79ee-4370-9bbe-bc1dc8021a3f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:42:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e6a980e6-79ee-4370-9bbe-bc1dc8021a3f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-45d83d/rate-test-model-45d83d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:42:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e6a980e6-79ee-4370-9bbe-bc1dc8021a3f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:42:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e6a980e6-79ee-4370-9bbe-bc1dc8021a3f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T23:42:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e6a980e6-79ee-4370-9bbe-bc1dc8021a3f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-430d56"}
{"level":"debug","ts":"2026-07-08T23:42:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e6a980e6-79ee-4370-9bbe-bc1dc8021a3f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-08T23:42:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e6a980e6-79ee-4370-9bbe-bc1dc8021a3f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1b1c900e-4ea5-47f1-ab96-2385d2aa223a","keyName":"e2e-rate-a-430d56","selected_subscription":"e2e-rate-iso-a-430d56","selected_subscription_key":"ai-tenant-e2e-shared-a-45d83d/e2e-rate-iso-a-430d56@ai-tenant-e2e-shared-a-45d83d/rate-test-model-45d83d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-45d83d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-430d56","namespace":"ai-tenant-e2e-shared-a-45d83d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-08T23:42:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e6a980e6-79ee-4370-9bbe-bc1dc8021a3f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T23:42:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e6a980e6-79ee-4370-9bbe-bc1dc8021a3f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T23:42:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"367a0a38-9ac7-4054-ad82-43c4c04f247a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36766","PortSpecifier":{"PortValue":36766}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"367a0a38-9ac7-4054-ad82-43c4c04f247a","method":"POST","path":"/ai-tenant-e2e-shared-a-45d83d/rate-test-model-45d83d/v1/completions","host":"e2e-shared-a-45d83d.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T23:42:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"367a0a38-9ac7-4054-ad82-43c4c04f247a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36766","PortSpecifier":{"PortValue":36766}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783554135,"nanos":28033303},"http":{"id":"367a0a38-9ac7-4054-ad82-43c4c04f247a","method":"POST","headers":{":authority":"e2e-shared-a-45d83d.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-45d83d/rate-test-model-45d83d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:42:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"367a0a38-9ac7-4054-ad82-43c4c04f247a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-9UC1Hcb6SMrGpGRR_KBkfBdGMHsn41pLyUKc8ruZnDvSjp8HabYWqMR41DhR"}
{"level":"debug","ts":"2026-07-08T23:42:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"367a0a38-9ac7-4054-ad82-43c4c04f247a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-45d83d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-9UC1Hcb6SMrGpGRR_KBkfBdGMHsn41pLyUKc8ruZnDvSjp8HabYWqMR41DhR\"}"}
{"level":"debug","ts":"2026-07-08T23:42:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"367a0a38-9ac7-4054-ad82-43c4c04f247a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-45d83d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1b1c900e-4ea5-47f1-ab96-2385d2aa223a","keyName":"e2e-rate-a-430d56","subscription":"e2e-rate-iso-a-430d56","tenant":"e2e-shared-a-45d83d","userId":"1b1c900e-4ea5-47f1-ab96-2385d2aa223a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-08T23:42:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"367a0a38-9ac7-4054-ad82-43c4c04f247a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-45d83d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-45d83d/rate-test-model-45d83d\",\"requestedSubscription\":\"e2e-rate-iso-a-430d56\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-08T23:42:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"367a0a38-9ac7-4054-ad82-43c4c04f247a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-45d83d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-45d83d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-430d56","namespace":"ai-tenant-e2e-shared-a-45d83d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-08T23:42:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"367a0a38-9ac7-4054-ad82-43c4c04f247a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:42:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"367a0a38-9ac7-4054-ad82-43c4c04f247a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:42:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"367a0a38-9ac7-4054-ad82-43c4c04f247a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:42:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"367a0a38-9ac7-4054-ad82-43c4c04f247a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:42:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"367a0a38-9ac7-4054-ad82-43c4c04f247a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-45d83d/rate-test-model-45d83d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:42:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"367a0a38-9ac7-4054-ad82-43c4c04f247a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T23:42:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"367a0a38-9ac7-4054-ad82-43c4c04f247a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-430d56"}
{"level":"debug","ts":"2026-07-08T23:42:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"367a0a38-9ac7-4054-ad82-43c4c04f247a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-08T23:42:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"367a0a38-9ac7-4054-ad82-43c4c04f247a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1b1c900e-4ea5-47f1-ab96-2385d2aa223a","keyName":"e2e-rate-a-430d56","selected_subscription":"e2e-rate-iso-a-430d56","selected_subscription_key":"ai-tenant-e2e-shared-a-45d83d/e2e-rate-iso-a-430d56@ai-tenant-e2e-shared-a-45d83d/rate-test-model-45d83d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-45d83d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-430d56","namespace":"ai-tenant-e2e-shared-a-45d83d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-08T23:42:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"367a0a38-9ac7-4054-ad82-43c4c04f247a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T23:42:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"367a0a38-9ac7-4054-ad82-43c4c04f247a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T23:42:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"13ec6bd7-0b48-4747-a8e0-fdce9c085ad5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36770","PortSpecifier":{"PortValue":36770}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"13ec6bd7-0b48-4747-a8e0-fdce9c085ad5","method":"POST","path":"/ai-tenant-e2e-shared-a-45d83d/rate-test-model-45d83d/v1/completions","host":"e2e-shared-a-45d83d.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T23:42:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"13ec6bd7-0b48-4747-a8e0-fdce9c085ad5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36770","PortSpecifier":{"PortValue":36770}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783554136,"nanos":65248273},"http":{"id":"13ec6bd7-0b48-4747-a8e0-fdce9c085ad5","method":"POST","headers":{":authority":"e2e-shared-a-45d83d.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-45d83d/rate-test-model-45d83d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:42:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"13ec6bd7-0b48-4747-a8e0-fdce9c085ad5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-9UC1Hcb6SMrGpGRR_KBkfBdGMHsn41pLyUKc8ruZnDvSjp8HabYWqMR41DhR"}
{"level":"debug","ts":"2026-07-08T23:42:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"13ec6bd7-0b48-4747-a8e0-fdce9c085ad5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-45d83d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-9UC1Hcb6SMrGpGRR_KBkfBdGMHsn41pLyUKc8ruZnDvSjp8HabYWqMR41DhR\"}"}
{"level":"debug","ts":"2026-07-08T23:42:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"13ec6bd7-0b48-4747-a8e0-fdce9c085ad5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-45d83d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1b1c900e-4ea5-47f1-ab96-2385d2aa223a","keyName":"e2e-rate-a-430d56","subscription":"e2e-rate-iso-a-430d56","tenant":"e2e-shared-a-45d83d","userId":"1b1c900e-4ea5-47f1-ab96-2385d2aa223a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-08T23:42:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"13ec6bd7-0b48-4747-a8e0-fdce9c085ad5","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-45d83d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-45d83d/rate-test-model-45d83d\",\"requestedSubscription\":\"e2e-rate-iso-a-430d56\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-08T23:42:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"13ec6bd7-0b48-4747-a8e0-fdce9c085ad5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-45d83d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-45d83d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-430d56","namespace":"ai-tenant-e2e-shared-a-45d83d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-08T23:42:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"13ec6bd7-0b48-4747-a8e0-fdce9c085ad5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:42:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13ec6bd7-0b48-4747-a8e0-fdce9c085ad5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:42:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13ec6bd7-0b48-4747-a8e0-fdce9c085ad5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:42:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13ec6bd7-0b48-4747-a8e0-fdce9c085ad5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:42:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13ec6bd7-0b48-4747-a8e0-fdce9c085ad5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-45d83d/rate-test-model-45d83d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:42:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13ec6bd7-0b48-4747-a8e0-fdce9c085ad5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T23:42:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13ec6bd7-0b48-4747-a8e0-fdce9c085ad5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-430d56"}
{"level":"debug","ts":"2026-07-08T23:42:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13ec6bd7-0b48-4747-a8e0-fdce9c085ad5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-08T23:42:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13ec6bd7-0b48-4747-a8e0-fdce9c085ad5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1b1c900e-4ea5-47f1-ab96-2385d2aa223a","keyName":"e2e-rate-a-430d56","selected_subscription":"e2e-rate-iso-a-430d56","selected_subscription_key":"ai-tenant-e2e-shared-a-45d83d/e2e-rate-iso-a-430d56@ai-tenant-e2e-shared-a-45d83d/rate-test-model-45d83d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-45d83d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-430d56","namespace":"ai-tenant-e2e-shared-a-45d83d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-08T23:42:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"13ec6bd7-0b48-4747-a8e0-fdce9c085ad5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T23:42:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"13ec6bd7-0b48-4747-a8e0-fdce9c085ad5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T23:42:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9b08934d-6f88-4877-9a19-2acb1c2c23fa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:34228","PortSpecifier":{"PortValue":34228}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9b08934d-6f88-4877-9a19-2acb1c2c23fa","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-45d83d.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T23:42:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9b08934d-6f88-4877-9a19-2acb1c2c23fa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:34228","PortSpecifier":{"PortValue":34228}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783554146,"nanos":791699590},"http":{"id":"9b08934d-6f88-4877-9a19-2acb1c2c23fa","method":"POST","headers":{":authority":"e2e-shared-a-45d83d.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:42:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9b08934d-6f88-4877-9a19-2acb1c2c23fa","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-08T23:42:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9b08934d-6f88-4877-9a19-2acb1c2c23fa","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4eb469ed-bde9-4b74-b02d-b674c54e5440","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=bc060732-2068-4968-bbfb-220d44e07ffa"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb0dcd2f307a"]}}
{"level":"debug","ts":"2026-07-08T23:42:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9b08934d-6f88-4877-9a19-2acb1c2c23fa","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb0dcd2f307a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=bc060732-2068-4968-bbfb-220d44e07ffa"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4eb469ed-bde9-4b74-b02d-b674c54e5440","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"07be2283df4ace392f01165483752186898f1dca068cb3edf53b2db64dcaf20d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-45d83d.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:42:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b08934d-6f88-4877-9a19-2acb1c2c23fa","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:42:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b08934d-6f88-4877-9a19-2acb1c2c23fa","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:42:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b08934d-6f88-4877-9a19-2acb1c2c23fa","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-45d83d/rate-test-model-45d83d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:42:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9b08934d-6f88-4877-9a19-2acb1c2c23fa","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-08T23:42:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b08934d-6f88-4877-9a19-2acb1c2c23fa","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T23:42:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b08934d-6f88-4877-9a19-2acb1c2c23fa","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-08T23:42:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9b08934d-6f88-4877-9a19-2acb1c2c23fa","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T23:42:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9b08934d-6f88-4877-9a19-2acb1c2c23fa","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T23:42:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"54c0a58d-accc-44ed-9246-7d9a3bb759f4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:38442","PortSpecifier":{"PortValue":38442}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"54c0a58d-accc-44ed-9246-7d9a3bb759f4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-59ce67.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T23:42:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"54c0a58d-accc-44ed-9246-7d9a3bb759f4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:38442","PortSpecifier":{"PortValue":38442}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783554146,"nanos":833712273},"http":{"id":"54c0a58d-accc-44ed-9246-7d9a3bb759f4","method":"POST","headers":{":authority":"e2e-shared-b-59ce67.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:42:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"54c0a58d-accc-44ed-9246-7d9a3bb759f4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-08T23:42:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"54c0a58d-accc-44ed-9246-7d9a3bb759f4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4eb469ed-bde9-4b74-b02d-b674c54e5440","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=bc060732-2068-4968-bbfb-220d44e07ffa"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb0dcd2f307a"]}}
{"level":"debug","ts":"2026-07-08T23:42:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"54c0a58d-accc-44ed-9246-7d9a3bb759f4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb0dcd2f307a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=bc060732-2068-4968-bbfb-220d44e07ffa"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4eb469ed-bde9-4b74-b02d-b674c54e5440","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0c9d61f1b082de375e18d1f9e06bc7ba43cbef8c82c7f355f97f0838179c3723"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-59ce67.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:42:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54c0a58d-accc-44ed-9246-7d9a3bb759f4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:42:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54c0a58d-accc-44ed-9246-7d9a3bb759f4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:42:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54c0a58d-accc-44ed-9246-7d9a3bb759f4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-59ce67/rate-test-model-59ce67\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:42:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"54c0a58d-accc-44ed-9246-7d9a3bb759f4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-08T23:42:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"54c0a58d-accc-44ed-9246-7d9a3bb759f4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T23:42:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"54c0a58d-accc-44ed-9246-7d9a3bb759f4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-08T23:42:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"54c0a58d-accc-44ed-9246-7d9a3bb759f4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T23:42:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"54c0a58d-accc-44ed-9246-7d9a3bb759f4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T23:42:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f8bf5fdf-b951-45da-8b20-f8e2cb048a07","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:34234","PortSpecifier":{"PortValue":34234}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f8bf5fdf-b951-45da-8b20-f8e2cb048a07","method":"POST","path":"/ai-tenant-e2e-shared-a-45d83d/rate-test-model-45d83d/v1/completions","host":"e2e-shared-a-45d83d.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T23:42:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f8bf5fdf-b951-45da-8b20-f8e2cb048a07","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:34234","PortSpecifier":{"PortValue":34234}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783554146,"nanos":871804234},"http":{"id":"f8bf5fdf-b951-45da-8b20-f8e2cb048a07","method":"POST","headers":{":authority":"e2e-shared-a-45d83d.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-45d83d/rate-test-model-45d83d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:42:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f8bf5fdf-b951-45da-8b20-f8e2cb048a07","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-BCMvhOrjo7CRsHeK_7MQqxNQ2YAEDjLpmXLTbfKwhWNg9qqhEgM3UKMiWSs1"}
{"level":"debug","ts":"2026-07-08T23:42:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f8bf5fdf-b951-45da-8b20-f8e2cb048a07","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-45d83d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-BCMvhOrjo7CRsHeK_7MQqxNQ2YAEDjLpmXLTbfKwhWNg9qqhEgM3UKMiWSs1\"}"}
{"level":"debug","ts":"2026-07-08T23:42:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f8bf5fdf-b951-45da-8b20-f8e2cb048a07","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-45d83d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"dcb89e25-8a53-48d6-8fe2-8eec11506120","keyName":"e2e-rate-a-bfacdf","subscription":"e2e-rate-iso-a-bfacdf","tenant":"e2e-shared-a-45d83d","userId":"dcb89e25-8a53-48d6-8fe2-8eec11506120","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-08T23:42:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f8bf5fdf-b951-45da-8b20-f8e2cb048a07","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-45d83d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-45d83d/rate-test-model-45d83d\",\"requestedSubscription\":\"e2e-rate-iso-a-bfacdf\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-08T23:42:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f8bf5fdf-b951-45da-8b20-f8e2cb048a07","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-45d83d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-45d83d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bfacdf","namespace":"ai-tenant-e2e-shared-a-45d83d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-08T23:42:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f8bf5fdf-b951-45da-8b20-f8e2cb048a07","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:42:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f8bf5fdf-b951-45da-8b20-f8e2cb048a07","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:42:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f8bf5fdf-b951-45da-8b20-f8e2cb048a07","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:42:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f8bf5fdf-b951-45da-8b20-f8e2cb048a07","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-45d83d/rate-test-model-45d83d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:42:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f8bf5fdf-b951-45da-8b20-f8e2cb048a07","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:42:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f8bf5fdf-b951-45da-8b20-f8e2cb048a07","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T23:42:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f8bf5fdf-b951-45da-8b20-f8e2cb048a07","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-08T23:42:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f8bf5fdf-b951-45da-8b20-f8e2cb048a07","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-bfacdf"}
{"level":"debug","ts":"2026-07-08T23:42:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f8bf5fdf-b951-45da-8b20-f8e2cb048a07","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"dcb89e25-8a53-48d6-8fe2-8eec11506120","keyName":"e2e-rate-a-bfacdf","selected_subscription":"e2e-rate-iso-a-bfacdf","selected_subscription_key":"ai-tenant-e2e-shared-a-45d83d/e2e-rate-iso-a-bfacdf@ai-tenant-e2e-shared-a-45d83d/rate-test-model-45d83d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-45d83d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bfacdf","namespace":"ai-tenant-e2e-shared-a-45d83d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-08T23:42:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f8bf5fdf-b951-45da-8b20-f8e2cb048a07","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T23:42:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f8bf5fdf-b951-45da-8b20-f8e2cb048a07","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T23:42:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7fb94616-1aab-4f59-99e9-23d320997469","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:34238","PortSpecifier":{"PortValue":34238}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7fb94616-1aab-4f59-99e9-23d320997469","method":"POST","path":"/ai-tenant-e2e-shared-a-45d83d/rate-test-model-45d83d/v1/completions","host":"e2e-shared-a-45d83d.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T23:42:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7fb94616-1aab-4f59-99e9-23d320997469","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:34238","PortSpecifier":{"PortValue":34238}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783554147,"nanos":904943632},"http":{"id":"7fb94616-1aab-4f59-99e9-23d320997469","method":"POST","headers":{":authority":"e2e-shared-a-45d83d.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-45d83d/rate-test-model-45d83d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:42:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7fb94616-1aab-4f59-99e9-23d320997469","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-BCMvhOrjo7CRsHeK_7MQqxNQ2YAEDjLpmXLTbfKwhWNg9qqhEgM3UKMiWSs1"}
{"level":"debug","ts":"2026-07-08T23:42:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7fb94616-1aab-4f59-99e9-23d320997469","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-45d83d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-BCMvhOrjo7CRsHeK_7MQqxNQ2YAEDjLpmXLTbfKwhWNg9qqhEgM3UKMiWSs1\"}"}
{"level":"debug","ts":"2026-07-08T23:42:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7fb94616-1aab-4f59-99e9-23d320997469","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-45d83d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"dcb89e25-8a53-48d6-8fe2-8eec11506120","keyName":"e2e-rate-a-bfacdf","subscription":"e2e-rate-iso-a-bfacdf","tenant":"e2e-shared-a-45d83d","userId":"dcb89e25-8a53-48d6-8fe2-8eec11506120","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-08T23:42:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7fb94616-1aab-4f59-99e9-23d320997469","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-45d83d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-45d83d/rate-test-model-45d83d\",\"requestedSubscription\":\"e2e-rate-iso-a-bfacdf\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-08T23:42:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7fb94616-1aab-4f59-99e9-23d320997469","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-45d83d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-45d83d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bfacdf","namespace":"ai-tenant-e2e-shared-a-45d83d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-08T23:42:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7fb94616-1aab-4f59-99e9-23d320997469","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:42:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7fb94616-1aab-4f59-99e9-23d320997469","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:42:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7fb94616-1aab-4f59-99e9-23d320997469","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:42:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7fb94616-1aab-4f59-99e9-23d320997469","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:42:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7fb94616-1aab-4f59-99e9-23d320997469","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-45d83d/rate-test-model-45d83d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:42:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7fb94616-1aab-4f59-99e9-23d320997469","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T23:42:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7fb94616-1aab-4f59-99e9-23d320997469","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-08T23:42:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7fb94616-1aab-4f59-99e9-23d320997469","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-bfacdf"}
{"level":"debug","ts":"2026-07-08T23:42:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7fb94616-1aab-4f59-99e9-23d320997469","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"dcb89e25-8a53-48d6-8fe2-8eec11506120","keyName":"e2e-rate-a-bfacdf","selected_subscription":"e2e-rate-iso-a-bfacdf","selected_subscription_key":"ai-tenant-e2e-shared-a-45d83d/e2e-rate-iso-a-bfacdf@ai-tenant-e2e-shared-a-45d83d/rate-test-model-45d83d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-45d83d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bfacdf","namespace":"ai-tenant-e2e-shared-a-45d83d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-08T23:42:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7fb94616-1aab-4f59-99e9-23d320997469","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T23:42:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7fb94616-1aab-4f59-99e9-23d320997469","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T23:42:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"db4a524e-35f4-496b-9cef-709903e35f60","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:34246","PortSpecifier":{"PortValue":34246}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"db4a524e-35f4-496b-9cef-709903e35f60","method":"POST","path":"/ai-tenant-e2e-shared-a-45d83d/rate-test-model-45d83d/v1/completions","host":"e2e-shared-a-45d83d.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T23:42:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"db4a524e-35f4-496b-9cef-709903e35f60","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:34246","PortSpecifier":{"PortValue":34246}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783554148,"nanos":942025503},"http":{"id":"db4a524e-35f4-496b-9cef-709903e35f60","method":"POST","headers":{":authority":"e2e-shared-a-45d83d.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-45d83d/rate-test-model-45d83d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:42:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"db4a524e-35f4-496b-9cef-709903e35f60","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-BCMvhOrjo7CRsHeK_7MQqxNQ2YAEDjLpmXLTbfKwhWNg9qqhEgM3UKMiWSs1"}
{"level":"debug","ts":"2026-07-08T23:42:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"db4a524e-35f4-496b-9cef-709903e35f60","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-45d83d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-BCMvhOrjo7CRsHeK_7MQqxNQ2YAEDjLpmXLTbfKwhWNg9qqhEgM3UKMiWSs1\"}"}
{"level":"debug","ts":"2026-07-08T23:42:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"db4a524e-35f4-496b-9cef-709903e35f60","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-45d83d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"dcb89e25-8a53-48d6-8fe2-8eec11506120","keyName":"e2e-rate-a-bfacdf","subscription":"e2e-rate-iso-a-bfacdf","tenant":"e2e-shared-a-45d83d","userId":"dcb89e25-8a53-48d6-8fe2-8eec11506120","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-08T23:42:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"db4a524e-35f4-496b-9cef-709903e35f60","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-45d83d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-45d83d/rate-test-model-45d83d\",\"requestedSubscription\":\"e2e-rate-iso-a-bfacdf\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-08T23:42:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"db4a524e-35f4-496b-9cef-709903e35f60","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-45d83d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-45d83d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bfacdf","namespace":"ai-tenant-e2e-shared-a-45d83d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-08T23:42:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"db4a524e-35f4-496b-9cef-709903e35f60","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:42:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"db4a524e-35f4-496b-9cef-709903e35f60","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:42:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"db4a524e-35f4-496b-9cef-709903e35f60","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-45d83d/rate-test-model-45d83d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:42:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"db4a524e-35f4-496b-9cef-709903e35f60","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:42:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"db4a524e-35f4-496b-9cef-709903e35f60","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:42:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"db4a524e-35f4-496b-9cef-709903e35f60","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-08T23:42:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"db4a524e-35f4-496b-9cef-709903e35f60","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T23:42:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"db4a524e-35f4-496b-9cef-709903e35f60","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-bfacdf"}
{"level":"debug","ts":"2026-07-08T23:42:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"db4a524e-35f4-496b-9cef-709903e35f60","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"dcb89e25-8a53-48d6-8fe2-8eec11506120","keyName":"e2e-rate-a-bfacdf","selected_subscription":"e2e-rate-iso-a-bfacdf","selected_subscription_key":"ai-tenant-e2e-shared-a-45d83d/e2e-rate-iso-a-bfacdf@ai-tenant-e2e-shared-a-45d83d/rate-test-model-45d83d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-45d83d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bfacdf","namespace":"ai-tenant-e2e-shared-a-45d83d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-08T23:42:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"db4a524e-35f4-496b-9cef-709903e35f60","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T23:42:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"db4a524e-35f4-496b-9cef-709903e35f60","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T23:42:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bc6e3b1f-7241-424b-8bc2-9ff454304c7a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:38448","PortSpecifier":{"PortValue":38448}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bc6e3b1f-7241-424b-8bc2-9ff454304c7a","method":"POST","path":"/ai-tenant-e2e-shared-b-59ce67/rate-test-model-59ce67/v1/completions","host":"e2e-shared-b-59ce67.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T23:42:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bc6e3b1f-7241-424b-8bc2-9ff454304c7a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:38448","PortSpecifier":{"PortValue":38448}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783554148,"nanos":976086276},"http":{"id":"bc6e3b1f-7241-424b-8bc2-9ff454304c7a","method":"POST","headers":{":authority":"e2e-shared-b-59ce67.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-59ce67/rate-test-model-59ce67/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:42:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bc6e3b1f-7241-424b-8bc2-9ff454304c7a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-NMrKs9mKo2HIv5uf_beYhGAHScKJZtDVMU0RDtCSNDks4rHS26hFwvES0qMO"}
{"level":"debug","ts":"2026-07-08T23:42:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bc6e3b1f-7241-424b-8bc2-9ff454304c7a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-59ce67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-NMrKs9mKo2HIv5uf_beYhGAHScKJZtDVMU0RDtCSNDks4rHS26hFwvES0qMO\"}"}
{"level":"debug","ts":"2026-07-08T23:42:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bc6e3b1f-7241-424b-8bc2-9ff454304c7a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-59ce67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"443989fe-4168-41b2-9916-d9f518f9d8d8","keyName":"e2e-rate-b-bfacdf","subscription":"e2e-rate-iso-b-bfacdf","tenant":"e2e-shared-b-59ce67","userId":"443989fe-4168-41b2-9916-d9f518f9d8d8","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-08T23:42:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bc6e3b1f-7241-424b-8bc2-9ff454304c7a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-59ce67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-59ce67/rate-test-model-59ce67\",\"requestedSubscription\":\"e2e-rate-iso-b-bfacdf\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-08T23:42:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bc6e3b1f-7241-424b-8bc2-9ff454304c7a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-59ce67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-59ce67","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-bfacdf","namespace":"ai-tenant-e2e-shared-b-59ce67","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-08T23:42:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bc6e3b1f-7241-424b-8bc2-9ff454304c7a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:42:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc6e3b1f-7241-424b-8bc2-9ff454304c7a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:42:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc6e3b1f-7241-424b-8bc2-9ff454304c7a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:42:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc6e3b1f-7241-424b-8bc2-9ff454304c7a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-59ce67/rate-test-model-59ce67\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:42:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc6e3b1f-7241-424b-8bc2-9ff454304c7a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:42:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bc6e3b1f-7241-424b-8bc2-9ff454304c7a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T23:42:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bc6e3b1f-7241-424b-8bc2-9ff454304c7a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-bfacdf"}
{"level":"debug","ts":"2026-07-08T23:42:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bc6e3b1f-7241-424b-8bc2-9ff454304c7a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-08T23:42:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bc6e3b1f-7241-424b-8bc2-9ff454304c7a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"443989fe-4168-41b2-9916-d9f518f9d8d8","keyName":"e2e-rate-b-bfacdf","selected_subscription":"e2e-rate-iso-b-bfacdf","selected_subscription_key":"ai-tenant-e2e-shared-b-59ce67/e2e-rate-iso-b-bfacdf@ai-tenant-e2e-shared-b-59ce67/rate-test-model-59ce67","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-59ce67","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-bfacdf","namespace":"ai-tenant-e2e-shared-b-59ce67","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-08T23:42:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bc6e3b1f-7241-424b-8bc2-9ff454304c7a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T23:42:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bc6e3b1f-7241-424b-8bc2-9ff454304c7a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T23:42:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e257f771226dda2f714bd1c4753c9d128d40760940241b81e650773df0fb2410"}
{"level":"info","ts":"2026-07-08T23:42:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/79344b3b5baad982afdf5b9c906c6b54126700f0761d7bcd8b761253e8e5e38b"}
{"level":"info","ts":"2026-07-08T23:42:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3af6a5bc18b6abc5811db739d950e9dc17b79c1244fea243a629790b5e11e25e"}
{"level":"info","ts":"2026-07-08T23:42:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5acaa7325f7fc9c6247159f3a8542872303e03f3cdf334caa9e61e0a3d66dd71"}
{"level":"info","ts":"2026-07-08T23:42:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ab0816ee41a84838e5e56d07a5fb225c1e375da70aab564c90fdfb247dde1b33"}
{"level":"info","ts":"2026-07-08T23:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/03a8277bbd142b81ff7ee19e8415b57002a36623527c44647e980815abf441b0"}
{"level":"info","ts":"2026-07-08T23:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b6354968028d25ce3261593b21a10c97711e5cd3e30750401e280d7b53501895"}
{"level":"info","ts":"2026-07-08T23:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e0887908f10bbd5a7e1ce63bd178e82dc4e33d4ae073f0c1a6c62b41618a9e85"}
{"level":"info","ts":"2026-07-08T23:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2af1bb57a40ca9fdd07b53a31c88e11ac923324e0682a27f5ebd590fdec66253"}
{"level":"info","ts":"2026-07-08T23:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1a7bca8f128f79c8e2d205111142827fad0dd7adb3307db411bb174aa2386030"}
{"level":"info","ts":"2026-07-08T23:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2da2ed502f2d8882e29c00092ec183e9a44473ef911abb29941d1c7ac9639680"}
{"level":"info","ts":"2026-07-08T23:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4f0d4cf9b6a4ff9b0bfbad4bd6d6d7671a28d3f58fcfeb302c0d8c3302ca5942"}
{"level":"info","ts":"2026-07-08T23:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/70373a653414e549cce4b69f67f8cf91f762607de4a30241b43a9f60152c3a83"}
{"level":"info","ts":"2026-07-08T23:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/28faedaca20c95dfd7172a4930886f91a07e8de9d350a55300245d4ceb236f22"}
{"level":"info","ts":"2026-07-08T23:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/83d0341a1ddb594dad84fd601110c1904ebb6dd778cf81b40835db208b59c17c"}
{"level":"info","ts":"2026-07-08T23:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f070afbefdb5c8b6e8a60306f10b362a815eca346f5e34b6773b5d0c29eb0e72"}
{"level":"info","ts":"2026-07-08T23:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1601a1d8a54caf21e35ff5c0ac3442b16c40d91274a3da32202f01268bb4e4af"}
{"level":"info","ts":"2026-07-08T23:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/07be2283df4ace392f01165483752186898f1dca068cb3edf53b2db64dcaf20d"}
{"level":"info","ts":"2026-07-08T23:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a252eb011603ed6137e2af41de00be6f860e294a55f59f2ef017cfe69e6a13c0"}
{"level":"info","ts":"2026-07-08T23:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/63ef80d805d28d2a0f989569a88e2aff2f518b4f2d1576a1a99f2cc5e9fa8598"}
{"level":"info","ts":"2026-07-08T23:43:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5882ffb4a614cb907375f0afdab27206b43e76fbd644d904687af36194dc0fad"}
{"level":"info","ts":"2026-07-08T23:43:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b5bdd616101d3a7e08bfb7a69ed6c83a920fae759971353e487f783aa60ec75e"}
{"level":"info","ts":"2026-07-08T23:43:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0c9d61f1b082de375e18d1f9e06bc7ba43cbef8c82c7f355f97f0838179c3723"}
{"level":"info","ts":"2026-07-08T23:43:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dde462ee0ed19ab91fea531e70d975cbbf4d37ef7b3668f9aa2b9b19f136254c"}